last executing test programs: 1m36.173632848s ago: executing program 0 (id=736): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x840004cb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x84) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 1m36.143778973s ago: executing program 0 (id=737): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 1m36.08023991s ago: executing program 0 (id=739): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b5b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x94) 1m36.018041418s ago: executing program 0 (id=741): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m35.839691374s ago: executing program 0 (id=743): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x31dc, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x60024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x2000, @fd, 0xffff, &(0x7f0000000140), 0x0, 0x12, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 1m35.551142857s ago: executing program 0 (id=755): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b5b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.532861384s ago: executing program 32 (id=755): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b5b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.967092802s ago: executing program 1 (id=2203): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x5d, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100400, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb6, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8828, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 3.860634351s ago: executing program 1 (id=2217): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) 3.686091337s ago: executing program 1 (id=2224): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) 3.580702896s ago: executing program 1 (id=2216): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0xc, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 2.949142204s ago: executing program 3 (id=2234): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) 2.696541814s ago: executing program 3 (id=2236): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x44c, 0x30, 0x12f, 0x20, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x4, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff7ffd, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x9, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x4000011, 0x188, 0x6, 0x5, 0xb, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x8, 0xe0b2, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x801, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x3, 0x7f, 0x0, 0xae, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x3, 0x2000007, 0x0, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x1000003, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe57, 0x4, 0x2, 0x84, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x1, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x7, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x9, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x100400, 0x5, 0x3, 0x0, 0x797, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x1, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0x0, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x5, 0x6, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x77a, 0x80a, 0xfffffffb, 0x3ff, 0x3f7, 0x4, 0x6, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.4173615s ago: executing program 3 (id=2240): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x2, @val=@perf_event={0x11}}, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) 2.268963611s ago: executing program 4 (id=2243): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2.26332898s ago: executing program 3 (id=2254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000002c0)=0x20, 0x4) 2.022324494s ago: executing program 4 (id=2245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setresuid(0x0, 0xee00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 1.64263917s ago: executing program 5 (id=2247): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') 1.64247286s ago: executing program 2 (id=2248): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[], 0x0, 0xfc5f}, 0x28) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 1.64237069s ago: executing program 4 (id=2249): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) 1.520753436s ago: executing program 4 (id=2250): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x229, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r0, &(0x7f0000000bc0)="cfac217eb8ce6f6c", 0xff07, 0x7ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) 1.500905132s ago: executing program 5 (id=2251): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) socket$inet6(0xa, 0x5, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.487483209s ago: executing program 2 (id=2252): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchown(r2, 0x0, 0xee01) 1.430852968s ago: executing program 2 (id=2253): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) 1.321633807s ago: executing program 5 (id=2255): prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[], 0x0) 1.200800964s ago: executing program 3 (id=2256): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 733.349773ms ago: executing program 3 (id=2258): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) acct(0x0) acct(0x0) 543.731946ms ago: executing program 5 (id=2259): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) tkill(r0, 0x24) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) 543.566926ms ago: executing program 2 (id=2260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="0198f5ffffff00002000128008000100677265001400028008000700ac1414bb06000e00020000008632094da6fe52b20981b574138fd3788ca9a49e6544916832a49f92cfed834cb10817fb747043998bd91b425e3841d6c8870d63a8ff1ed0327feedde96b88c6a80ebdfa77fdd8"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010003904020020000000000000000000", @ANYRES32=r2, @ANYBLOB="40100000004104002000128008000100677265001400028008000700ac1414aa0600030081000000050011000700000000001e00"], 0x50}}, 0x4040000) 355.781909ms ago: executing program 2 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x5}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 354.082919ms ago: executing program 5 (id=2271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)=""/17, &(0x7f0000000100)=0x11) 352.854889ms ago: executing program 4 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) 318.402202ms ago: executing program 5 (id=2263): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 236.544786ms ago: executing program 4 (id=2264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 112.706622ms ago: executing program 2 (id=2265): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 25.500125ms ago: executing program 1 (id=2266): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 0s ago: executing program 1 (id=2267): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(2000000540.763:494): avc: denied { listen } for pid=5473 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.686642][ T28] audit: type=1400 audit(2000000540.763:495): avc: denied { accept } for pid=5473 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.706517][ T5476] loop3: detected capacity change from 0 to 2048 [ 62.758248][ T3302] loop3: p3 < > p4 < > [ 62.762468][ T3302] loop3: partition table partially beyond EOD, truncated [ 62.769924][ T3302] loop3: p3 start 4284289 is beyond EOD, truncated [ 62.780011][ T5476] loop3: p3 < > p4 < > [ 62.784367][ T5476] loop3: partition table partially beyond EOD, truncated [ 62.792158][ T5476] loop3: p3 start 4284289 is beyond EOD, truncated [ 62.844529][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.088474][ T5318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.144125][ T28] audit: type=1400 audit(2000000541.303:496): avc: denied { read } for pid=5494 comm="syz.1.702" path="socket:[10710]" dev="sockfs" ino=10710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 63.204733][ T5500] loop0: detected capacity change from 0 to 512 [ 63.240080][ T5500] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.521334][ T5525] loop2: detected capacity change from 0 to 512 [ 63.548264][ T5525] EXT4-fs: Ignoring removed i_version option [ 63.556937][ T5525] EXT4-fs: Ignoring removed bh option [ 63.589006][ T5525] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.939703][ T5551] geneve2: entered promiscuous mode [ 63.953799][ T5551] geneve2: entered allmulticast mode [ 63.978659][ T5233] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.997942][ T5233] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 64.013092][ T5233] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 64.038065][ T5233] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 64.068980][ T28] audit: type=1400 audit(2000000542.233:497): avc: denied { read append } for pid=5559 comm="syz.2.728" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.140606][ T28] audit: type=1400 audit(2000000542.233:498): avc: denied { open } for pid=5559 comm="syz.2.728" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.168927][ T28] audit: type=1400 audit(2000000542.233:499): avc: denied { ioctl } for pid=5559 comm="syz.2.728" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.198569][ T28] audit: type=1400 audit(2000000542.233:500): avc: denied { connect } for pid=5561 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.700396][ T5590] loop2: detected capacity change from 0 to 512 [ 64.707247][ T5590] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 64.723304][ T5592] loop0: detected capacity change from 0 to 512 [ 64.759330][ T5570] loop4: detected capacity change from 0 to 1024 [ 64.782892][ T5592] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.826608][ T5570] EXT4-fs: inline encryption not supported [ 64.853775][ T3310] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 64.870172][ T5570] EXT4-fs: Ignoring removed nobh option [ 64.890116][ T5570] EXT4-fs: Ignoring removed bh option [ 64.896427][ T3310] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 64.973282][ T5608] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 65.032332][ T5614] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 65.051647][ T5614] bond2: (slave ip6gretap1): making interface the new active one [ 65.060566][ T5614] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 65.080155][ T5614] syz.2.751 (5614) used greatest stack depth: 8416 bytes left [ 65.102636][ T5237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.185209][ T5237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.255512][ T5237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.339252][ T5237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.478340][ T5237] bridge_slave_1: left allmulticast mode [ 65.494232][ T5237] bridge_slave_1: left promiscuous mode [ 65.502741][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.517293][ T5237] bridge_slave_0: left allmulticast mode [ 65.533227][ T5237] bridge_slave_0: left promiscuous mode [ 65.539484][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.689939][ T5237] bond0 (unregistering): left promiscuous mode [ 65.696204][ T5237] bond_slave_1: left promiscuous mode [ 65.705962][ T5237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.716003][ T5237] bond0 (unregistering): Released all slaves [ 65.750547][ T5629] chnl_net:caif_netlink_parms(): no params data found [ 65.773851][ T5671] xt_limit: Overflow, try lower: 65536/2147483648 [ 65.818082][ T5237] hsr_slave_0: left promiscuous mode [ 65.826555][ T5237] hsr_slave_1: left promiscuous mode [ 65.832720][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.840769][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.854651][ T5237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.863779][ T5237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.895409][ T5237] veth1_macvtap: left promiscuous mode [ 65.908428][ T5237] veth0_macvtap: left promiscuous mode [ 65.919141][ T5237] veth1_vlan: left promiscuous mode [ 65.924725][ T5237] veth0_vlan: left promiscuous mode [ 65.999672][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 66.009109][ T5702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.768'. [ 66.073494][ T5237] team0 (unregistering): Port device team_slave_1 removed [ 66.092733][ T5237] team0 (unregistering): Port device team_slave_0 removed [ 66.132262][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.139687][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.146872][ T5629] bridge_slave_0: entered allmulticast mode [ 66.154059][ T5629] bridge_slave_0: entered promiscuous mode [ 66.166220][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.176008][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.187242][ T5629] bridge_slave_1: entered allmulticast mode [ 66.194209][ T5629] bridge_slave_1: entered promiscuous mode [ 66.213585][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.224409][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.250490][ T5629] team0: Port device team_slave_0 added [ 66.289234][ T5629] team0: Port device team_slave_1 added [ 66.334040][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.348069][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.402985][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.443179][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.450371][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.476619][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.524807][ T5629] hsr_slave_0: entered promiscuous mode [ 66.543806][ T5629] hsr_slave_1: entered promiscuous mode [ 66.708371][ T5629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.725211][ T5629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.763760][ T5629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.791009][ T5629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.854258][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.872196][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.885192][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.892449][ T5241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.907672][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.914839][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.944117][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 66.976408][ T5774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'. [ 67.051896][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.192272][ T5629] veth0_vlan: entered promiscuous mode [ 67.201145][ T5629] veth1_vlan: entered promiscuous mode [ 67.216121][ T5629] veth0_macvtap: entered promiscuous mode [ 67.223878][ T5629] veth1_macvtap: entered promiscuous mode [ 67.235014][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.245848][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.256469][ T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.265889][ T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.275582][ T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.284937][ T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.941706][ T5923] loop3: detected capacity change from 0 to 8192 [ 69.122010][ T5942] atomic_op ffff88811b1ff528 conn xmit_atomic 0000000000000000 [ 69.562231][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.863'. [ 69.635384][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.665396][ T5967] loop4: detected capacity change from 0 to 8192 [ 69.695200][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.906751][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'. [ 70.030333][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 70.120342][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.885'. [ 70.187566][ T6017] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 70.223716][ T6017] bond3: entered promiscuous mode [ 70.229261][ T6017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.311056][ T6017] bond3: (slave bridge1): making interface the new active one [ 70.330445][ T6017] bridge1: entered promiscuous mode [ 70.336987][ T6017] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 70.497098][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 70.601220][ T6058] atomic_op ffff888122496928 conn xmit_atomic 0000000000000000 [ 70.656248][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.668583][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.800394][ T6077] netlink: 'syz.5.904': attribute type 1 has an invalid length. [ 70.814185][ T6077] bond1: entered promiscuous mode [ 70.821088][ T6077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.847260][ T6077] bond1: (slave bridge1): making interface the new active one [ 70.854955][ T6077] bridge1: entered promiscuous mode [ 70.861679][ T6077] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 71.158341][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 71.263963][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 71.263981][ T28] audit: type=1326 audit(2000000549.433:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6095 comm="syz.5.911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1938ac629 code=0x0 [ 72.043696][ T6135] loop2: detected capacity change from 0 to 128 [ 72.060967][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 72.188066][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 72.214444][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.221802][ T6127] loop4: detected capacity change from 0 to 32768 [ 72.280214][ T3302] loop4: p1 p3 < > [ 72.283140][ T6146] loop2: detected capacity change from 0 to 512 [ 72.315434][ T6127] loop4: p1 p3 < > [ 72.331283][ T6146] EXT4-fs mount: 10 callbacks suppressed [ 72.331302][ T6146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.459352][ T6155] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 72.478181][ T6146] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.539427][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.686072][ T6161] sit1: entered promiscuous mode [ 72.753099][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 72.755703][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 72.810666][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 72.811492][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 72.960513][ T6175] loop1: detected capacity change from 0 to 1024 [ 72.986681][ T6175] EXT4-fs: dax option not supported [ 73.014032][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 73.120925][ T6186] loop1: detected capacity change from 0 to 512 [ 73.152964][ T6186] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.190392][ T6191] loop4: detected capacity change from 0 to 512 [ 73.196959][ T6186] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35249!=33349) [ 73.237444][ T6186] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.256239][ T6191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.288436][ T6186] EXT4-fs (loop1): 1 truncate cleaned up [ 73.294620][ T6186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-030000000000 ro without journal. Quota mode: none. [ 73.307884][ T6197] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 73.315087][ T6191] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.351408][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-030000000000. [ 73.396512][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.061028][ T6219] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 74.162310][ T6223] loop5: detected capacity change from 0 to 1024 [ 74.171071][ T6223] EXT4-fs: dax option not supported [ 74.189597][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 74.308189][ T6226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.324966][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.962'. [ 74.483330][ T77] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.062038][ T28] audit: type=1400 audit(2000000553.223:516): avc: denied { read write } for pid=6271 comm="syz.2.991" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.114727][ T28] audit: type=1400 audit(2000000553.223:517): avc: denied { open } for pid=6271 comm="syz.2.991" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 75.208723][ T28] audit: type=1400 audit(2000000553.383:518): avc: denied { watch watch_reads } for pid=6279 comm="syz.2.982" path="/235/file0" dev="tmpfs" ino=1235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.282271][ T6282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=6282 comm=syz.2.996 [ 75.295116][ T6282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=6282 comm=syz.2.996 [ 75.478373][ T3661] kernel write not supported for file bpf-prog (pid: 3661 comm: kworker/1:13) [ 75.499532][ T6298] pim6reg1: entered promiscuous mode [ 75.504854][ T6298] pim6reg1: entered allmulticast mode [ 75.675461][ T6315] netlink: 'syz.1.1001': attribute type 12 has an invalid length. [ 75.683588][ T6313] syzkaller1: entered promiscuous mode [ 75.689214][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 75.698141][ T6313] syzkaller1: entered allmulticast mode [ 75.722612][ T6315] netlink: 'syz.1.1001': attribute type 12 has an invalid length. [ 75.732197][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 75.746822][ T5241] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.756220][ T5241] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.765355][ T5241] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.821724][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 75.830765][ T5241] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.873275][ T6324] macvlan2: entered promiscuous mode [ 75.880834][ T6324] bond0: entered promiscuous mode [ 75.885908][ T6324] bond_slave_0: entered promiscuous mode [ 75.912381][ T6324] bond_slave_1: entered promiscuous mode [ 75.919014][ T6324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.017614][ T28] audit: type=1326 audit(2000000554.183:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.060730][ T28] audit: type=1326 audit(2000000554.223:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.090840][ T6350] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 76.101042][ T28] audit: type=1326 audit(2000000554.223:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.124963][ T28] audit: type=1326 audit(2000000554.223:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.126196][ T6350] bond1 (unregistering): Released all slaves [ 76.155586][ T28] audit: type=1326 audit(2000000554.223:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.179223][ T28] audit: type=1326 audit(2000000554.223:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6347 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.278077][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 76.278097][ T28] audit: type=1326 audit(2000000554.443:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.308726][ T28] audit: type=1326 audit(2000000554.443:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.333318][ T28] audit: type=1326 audit(2000000554.483:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.375339][ T28] audit: type=1326 audit(2000000554.493:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.399341][ T28] audit: type=1326 audit(2000000554.493:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.423457][ T28] audit: type=1326 audit(2000000554.493:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.447041][ T28] audit: type=1326 audit(2000000554.493:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.470790][ T28] audit: type=1326 audit(2000000554.493:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.494245][ T28] audit: type=1326 audit(2000000554.493:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.498055][ T4980] Bluetooth: hci0: command 0x1003 tx timeout [ 76.517837][ T3633] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.525476][ T28] audit: type=1326 audit(2000000554.493:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5e2ce9c629 code=0x7ffc0000 [ 76.681702][ T6393] bridge2: entered allmulticast mode [ 76.701953][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1027'. [ 76.984998][ T6420] loop5: detected capacity change from 0 to 1024 [ 77.012536][ T6426] netlink: 'syz.3.1042': attribute type 12 has an invalid length. [ 77.035800][ T6420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.121155][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.387584][ T6450] loop1: detected capacity change from 0 to 4096 [ 77.409391][ T6450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.449214][ T6450] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1052: corrupted inode contents [ 77.502488][ T6458] EXT4-fs (loop1): shut down requested (1) [ 77.523900][ T6450] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.1052: mark_inode_dirty error [ 77.560689][ T6450] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1052: corrupted inode contents [ 77.593031][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.609205][ T5241] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.626059][ T6471] loop4: detected capacity change from 0 to 128 [ 77.912716][ T6498] loop5: detected capacity change from 0 to 256 [ 78.000948][ T6502] loop5: detected capacity change from 0 to 512 [ 78.030881][ T6502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.054787][ T6502] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.103053][ T6512] loop1: detected capacity change from 0 to 512 [ 78.138381][ T6512] EXT4-fs: Ignoring removed orlov option [ 78.167570][ T6512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.218137][ T6512] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.267287][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.369188][ T6523] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1081'. [ 78.439717][ T6502] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1073: bg 0: block 217: padding at end of block bitmap is not set [ 78.621859][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.764748][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 78.795402][ T6574] loop3: detected capacity change from 0 to 764 [ 78.810218][ T6574] rock: directory entry would overflow storage [ 78.816487][ T6574] rock: sig=0x5245, size=8, remaining=5 [ 78.819032][ T6572] netlink: 'syz.2.1097': attribute type 26 has an invalid length. [ 78.878088][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 78.904104][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 78.939004][ T6572] netlink: 'syz.2.1097': attribute type 26 has an invalid length. [ 78.965142][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 79.850749][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 79.912729][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 79.963784][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 79.973023][ T6637] loop3: detected capacity change from 0 to 512 [ 79.973467][ T6637] EXT4-fs: Ignoring removed nobh option [ 80.018156][ T6637] EXT4-fs: Ignoring removed orlov option [ 80.036015][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 80.045871][ T6637] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 1: comm syz.3.1114: invalid block [ 80.083919][ T6637] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.084157][ T6637] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1114: couldn't read orphan inode 11 (err -117) [ 80.093355][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 80.093384][ C1] EXT4-fs (loop3): initial error at time 2000000814: __ext4_iget:5378: inode 11: block 1 [ 80.093421][ C1] EXT4-fs (loop3): last error at time 2000000814: __ext4_iget:5378: inode 11: block 1 [ 80.170250][ T6637] loop3: lost filesystem error report for type 5 error -117 [ 80.189510][ T6637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.287120][ T6637] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 80.361533][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.669395][ T6661] sctp: [Deprecated]: syz.2.1119 (pid 6661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.669395][ T6661] Use struct sctp_sack_info instead [ 80.713348][ T6668] loop5: detected capacity change from 0 to 512 [ 80.734847][ T6668] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1123: invalid indirect mapped block 256 (level 2) [ 80.748822][ T6668] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.749179][ T6668] EXT4-fs (loop5): 2 truncates cleaned up [ 80.758340][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 80.758365][ C1] EXT4-fs (loop5): initial error at time 2000000814: ext4_free_branches:1023: inode 11 [ 80.758392][ C1] EXT4-fs (loop5): last error at time 2000000814: ext4_free_branches:1023: inode 11 [ 80.791902][ T6668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.219648][ T5233] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 81.235525][ T6670] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 81.262927][ T5233] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.289816][ T5233] EXT4-fs (loop5): This should not happen!! Data will be lost [ 81.289816][ T5233] [ 81.309993][ T5233] EXT4-fs (loop5): Total free blocks count 0 [ 81.323680][ T5233] EXT4-fs (loop5): Free/Dirty block details [ 81.336431][ T5233] EXT4-fs (loop5): free_blocks=0 [ 81.346980][ T5233] EXT4-fs (loop5): dirty_blocks=16001 [ 81.358071][ T5233] EXT4-fs (loop5): Block reservation details [ 81.364441][ T5233] EXT4-fs (loop5): i_reserved_data_blocks=16001 [ 81.470656][ T5230] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 81.814971][ T6702] __nla_validate_parse: 2 callbacks suppressed [ 81.815016][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 82.154979][ T6682] loop2: detected capacity change from 0 to 1024 [ 82.185268][ T6682] EXT4-fs: inline encryption not supported [ 82.195037][ T6682] ext4: Bad value for 'mb_optimize_scan' [ 82.490050][ T6719] netlink: 'syz.3.1152': attribute type 29 has an invalid length. [ 82.499391][ T6719] netlink: 'syz.3.1152': attribute type 29 has an invalid length. [ 82.531210][ T6719] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1152'. [ 83.118217][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 83.152661][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1144'. [ 83.209483][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 83.209480][ T5230] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.209611][ T5230] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.256255][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1144'. [ 83.261403][ T5230] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.283348][ T6735] loop2: detected capacity change from 0 to 512 [ 83.289903][ T5230] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.304877][ T6735] EXT4-fs: Ignoring removed i_version option [ 83.311693][ T6735] EXT4-fs: Ignoring removed oldalloc option [ 83.332216][ T6735] EXT4-fs (loop2): 1 truncate cleaned up [ 83.345124][ T6735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.389485][ T6746] loop4: detected capacity change from 0 to 1024 [ 83.411690][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.440480][ T6746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.505835][ T6757] loop2: detected capacity change from 0 to 512 [ 83.521681][ T6757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.592438][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.636276][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.666027][ T5241] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 83.727745][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 83.727763][ T28] audit: type=1326 audit(2000000817.899:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.758857][ T28] audit: type=1326 audit(2000000817.909:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.783301][ T28] audit: type=1326 audit(2000000817.909:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.807327][ T28] audit: type=1326 audit(2000000817.909:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.838041][ T28] audit: type=1326 audit(2000000817.909:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.862313][ T6726] 9pnet_fd: p9_fd_create_tcp (6726): problem connecting socket to 127.0.0.1 [ 83.865926][ T28] audit: type=1326 audit(2000000817.899:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.895794][ T28] audit: type=1326 audit(2000000817.909:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.922306][ T28] audit: type=1326 audit(2000000817.909:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 83.952217][ T28] audit: type=1326 audit(2000000817.909:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 84.083378][ T28] audit: type=1326 audit(2000000818.079:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2600b5c629 code=0x7ffc0000 [ 84.411749][ T6809] loop4: detected capacity change from 0 to 512 [ 84.426992][ T6809] EXT4-fs (loop4): failed to initialize system zone (-117) [ 84.434730][ T6809] EXT4-fs (loop4): mount failed [ 85.149687][ T6860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=6860 comm=syz.1.1202 [ 85.169020][ T6860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=6860 comm=syz.1.1202 [ 86.150530][ T6991] pim6reg1: entered promiscuous mode [ 86.163293][ T6991] pim6reg1: entered allmulticast mode [ 87.124020][ T7008] netlink: 'syz.2.1207': attribute type 12 has an invalid length. [ 87.138339][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 87.170209][ T7008] netlink: 'syz.2.1207': attribute type 12 has an invalid length. [ 87.179196][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 87.260134][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1214'. [ 87.282030][ T7024] bond_slave_0: entered promiscuous mode [ 87.287717][ T7024] bond_slave_1: entered promiscuous mode [ 87.307557][ T7024] macvlan2: entered promiscuous mode [ 87.327190][ T7024] bond0: entered promiscuous mode [ 87.350725][ T7035] loop4: detected capacity change from 0 to 1024 [ 87.351247][ T7024] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.380545][ T7035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.415092][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.403919][ T7071] loop5: detected capacity change from 0 to 4096 [ 88.421625][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 88.485933][ T7078] bond_slave_0: entered promiscuous mode [ 88.491670][ T7078] bond_slave_1: entered promiscuous mode [ 88.502924][ T7078] macvlan2: entered promiscuous mode [ 88.508402][ T7078] bond0: entered promiscuous mode [ 88.514692][ T7078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 88.541399][ T7071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.601305][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 88.623444][ T7071] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1234: corrupted inode contents [ 88.686936][ T7071] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.1234: mark_inode_dirty error [ 88.694762][ T7093] EXT4-fs (loop5): shut down requested (1) [ 88.708671][ T7071] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1234: corrupted inode contents [ 88.793286][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.812760][ T5233] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 88.826889][ T5233] __quota_error: 50 callbacks suppressed [ 88.826905][ T5233] Quota error (device loop5): write_blk: dquota write failed [ 88.862056][ T5233] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 88.876221][ T7109] loop2: detected capacity change from 0 to 256 [ 88.918189][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 88.971160][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 89.064871][ T7124] loop3: detected capacity change from 0 to 512 [ 89.102675][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.269957][ T7124] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.375146][ T7131] loop2: detected capacity change from 0 to 512 [ 89.412171][ T7131] EXT4-fs: Ignoring removed orlov option [ 89.442687][ T7131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.474505][ T7131] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.539921][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.647683][ T7146] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1264'. [ 89.798337][ T7124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1256: bg 0: block 217: padding at end of block bitmap is not set [ 89.944358][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.945888][ T7170] netlink: 'syz.5.1277': attribute type 29 has an invalid length. [ 90.032846][ T7170] netlink: 'syz.5.1277': attribute type 29 has an invalid length. [ 90.060567][ T7170] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1277'. [ 90.420883][ T7183] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 90.444059][ T7183] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 90.518975][ T28] audit: type=1326 audit(2000001080.697:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 90.555444][ T28] audit: type=1326 audit(2000001080.717:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 90.559778][ T7198] netlink: 'syz.3.1290': attribute type 29 has an invalid length. [ 90.580424][ T28] audit: type=1326 audit(2000001080.717:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 90.610342][ T28] audit: type=1326 audit(2000001080.717:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 90.638329][ T7161] 9pnet_fd: p9_fd_create_tcp (7161): problem connecting socket to 127.0.0.1 [ 90.672859][ T28] audit: type=1326 audit(2000001080.717:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 90.675573][ T7198] netlink: 'syz.3.1290': attribute type 29 has an invalid length. [ 90.698078][ T28] audit: type=1326 audit(2000001080.717:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 90.737313][ T7202] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1290'. [ 90.781707][ T28] audit: type=1326 audit(2000001080.717:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7193 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 91.670989][ T7218] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 91.725173][ T7218] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 92.417658][ T7254] loop4: detected capacity change from 0 to 764 [ 92.432601][ T7254] rock: directory entry would overflow storage [ 92.441523][ T7254] rock: sig=0x5245, size=8, remaining=5 [ 93.095144][ T7267] netlink: 'syz.4.1317': attribute type 4 has an invalid length. [ 93.106591][ T7267] netlink: 'syz.4.1317': attribute type 4 has an invalid length. [ 93.179652][ T3393] Process accounting resumed [ 93.634336][ T7298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1335'. [ 93.671394][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 93.723573][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 93.750168][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 93.806629][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 93.830918][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 93.849875][ T28] audit: type=1326 audit(2000001084.027:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 93.878149][ T3393] Process accounting resumed [ 93.912317][ T28] audit: type=1326 audit(2000001084.027:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 94.058147][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 94.088041][ T28] audit: type=1326 audit(2000001084.027:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 94.141040][ T28] audit: type=1326 audit(2000001084.027:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 94.188648][ T28] audit: type=1326 audit(2000001084.027:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 94.247092][ T28] audit: type=1326 audit(2000001084.027:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 94.311582][ T28] audit: type=1326 audit(2000001084.027:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7328 comm="syz.4.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x7ffc0000 [ 95.119014][ T7363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'. [ 95.131212][ T7354] loop3: detected capacity change from 0 to 8192 [ 95.268777][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 95.317251][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 95.339245][ T7382] validate_nla: 4 callbacks suppressed [ 95.339263][ T7382] netlink: 'syz.4.1364': attribute type 20 has an invalid length. [ 95.394778][ T7382] netlink: 'syz.4.1364': attribute type 20 has an invalid length. [ 95.837832][ T7406] loop5: detected capacity change from 0 to 8192 [ 96.100373][ T7402] loop4: detected capacity change from 0 to 32768 [ 96.430500][ T7402] loop4: p1 p3 < > [ 96.475626][ T7414] netlink: 'syz.3.1376': attribute type 20 has an invalid length. [ 96.517788][ T7414] netlink: 'syz.3.1376': attribute type 20 has an invalid length. [ 96.613875][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 96.625354][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 96.638329][ T7435] loop5: detected capacity change from 0 to 512 [ 96.656593][ T7435] ext4: Unknown parameter 'nouser_xattr' [ 96.669106][ T7441] geneve2: entered promiscuous mode [ 96.675358][ T7441] geneve2: entered allmulticast mode [ 96.861255][ T7461] loop4: detected capacity change from 0 to 512 [ 96.883993][ T7461] EXT4-fs (loop4): 1 truncate cleaned up [ 96.907067][ T7461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.028669][ T7483] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1390: bg 0: block 465: padding at end of block bitmap is not set [ 97.078364][ T7483] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 97.088688][ T7483] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1390: invalid indirect mapped block 234881024 (level 0) [ 97.317134][ T7491] loop3: detected capacity change from 0 to 512 [ 97.350128][ T7491] ext4: Unknown parameter 'nouser_xattr' [ 97.507608][ T7498] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 97.522264][ T7501] loop2: detected capacity change from 0 to 512 [ 97.564171][ T7498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.565540][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.572331][ T7498] bond1: (slave bond2): making interface the new active one [ 97.588180][ T7498] bond1: (slave bond2): Enslaving as an active interface with an up link [ 97.672268][ T7501] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1396: invalid indirect mapped block 256 (level 2) [ 97.758943][ T7501] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.763109][ T7501] EXT4-fs (loop2): 2 truncates cleaned up [ 97.772304][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 97.772324][ C0] EXT4-fs (loop2): initial error at time 2000001087: ext4_free_branches:1023: inode 11 [ 97.772354][ C0] EXT4-fs (loop2): last error at time 2000001087: ext4_free_branches:1023: inode 11 [ 97.820491][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.028356][ T7530] delete_channel: no stack [ 98.092341][ T7536] loop1: detected capacity change from 0 to 512 [ 98.128464][ T7536] ext4: Unknown parameter 'nouser_xattr' [ 98.681134][ T7553] loop5: detected capacity change from 0 to 1024 [ 98.708455][ T7553] EXT4-fs: inline encryption not supported [ 98.714334][ T7553] EXT4-fs: Ignoring removed nobh option [ 98.738130][ T7553] EXT4-fs: Ignoring removed nobh option [ 98.754090][ T7553] EXT4-fs: Ignoring removed bh option [ 98.778417][ T5241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 98.852140][ T7553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.852540][ T5241] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.886435][ T5241] EXT4-fs (loop2): This should not happen!! Data will be lost [ 98.886435][ T5241] [ 98.896590][ T5241] EXT4-fs (loop2): Total free blocks count 0 [ 98.902853][ T5241] EXT4-fs (loop2): Free/Dirty block details [ 98.909226][ T5241] EXT4-fs (loop2): free_blocks=0 [ 98.914223][ T5241] EXT4-fs (loop2): dirty_blocks=7665 [ 98.915463][ T7553] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.1419: Allocating blocks 385-513 which overlap fs metadata [ 98.919836][ T5241] EXT4-fs (loop2): Block reservation details [ 98.939733][ T5241] EXT4-fs (loop2): i_reserved_data_blocks=7665 [ 98.948560][ T5241] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 98.997285][ T7553] EXT4-fs (loop5): pa ffff888105d4ed90: logic 16, phys. 129, len 24 [ 99.005627][ T7553] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 99.170762][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.259702][ T7571] loop4: detected capacity change from 0 to 2048 [ 99.332250][ T7571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.401170][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.514783][ T7587] loop4: detected capacity change from 0 to 512 [ 99.553155][ T7587] ext4: Unknown parameter 'nouser_xattr' [ 99.915154][ T7599] rdma_op ffff88811b426980 conn xmit_rdma 0000000000000000 [ 100.149674][ T7608] __nla_validate_parse: 12 callbacks suppressed [ 100.149702][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1438'. [ 100.291343][ T7615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1454'. [ 100.314788][ T7616] loop3: detected capacity change from 0 to 256 [ 100.345349][ T7616] FAT-fs (loop3): bogus number of FAT sectors [ 100.371977][ T7616] FAT-fs (loop3): Can't find a valid FAT filesystem [ 100.465025][ T7592] loop5: detected capacity change from 0 to 1024 [ 100.553172][ T7592] EXT4-fs: inline encryption not supported [ 100.565532][ T7592] ext4: Bad value for 'mb_optimize_scan' [ 100.597366][ T7628] rdma_op ffff8881224b5980 conn xmit_rdma 0000000000000000 [ 100.809195][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 101.118380][ T7659] netlink: 'syz.3.1462': attribute type 12 has an invalid length. [ 101.152529][ T7659] netlink: 'syz.3.1462': attribute type 29 has an invalid length. [ 101.188089][ T7659] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1462'. [ 101.485480][ T28] audit: type=1326 audit(2000001091.657:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7ffc0000 [ 101.558070][ T28] audit: type=1326 audit(2000001091.657:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb19386cece code=0x7ffc0000 [ 101.608225][ T28] audit: type=1326 audit(2000001091.657:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb1938ad957 code=0x7ffc0000 [ 101.619960][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 101.675725][ T28] audit: type=1326 audit(2000001091.657:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1938ac629 code=0x7ffc0000 [ 101.710231][ T28] audit: type=1326 audit(2000001091.657:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb1938ad957 code=0x7ffc0000 [ 101.770848][ T28] audit: type=1326 audit(2000001091.657:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb19386cece code=0x7ffc0000 [ 101.837127][ T28] audit: type=1326 audit(2000001091.657:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7ffc0000 [ 101.882606][ T28] audit: type=1326 audit(2000001091.667:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb1938ac629 code=0x7ffc0000 [ 101.930100][ T28] audit: type=1326 audit(2000001091.667:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7ffc0000 [ 101.979218][ T28] audit: type=1326 audit(2000001091.667:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.5.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb1938ac629 code=0x7ffc0000 [ 102.105211][ T7662] loop1: detected capacity change from 0 to 1024 [ 102.123884][ T7662] EXT4-fs: inline encryption not supported [ 102.141114][ T7709] loop3: detected capacity change from 0 to 128 [ 102.155644][ T7662] ext4: Bad value for 'mb_optimize_scan' [ 102.192769][ T7709] xt_nat: multiple ranges no longer supported [ 102.735423][ T7721] loop2: detected capacity change from 0 to 32768 [ 102.788431][ T3302] loop2: p1 p3 < > [ 102.803213][ T7721] loop2: p1 p3 < > [ 102.972387][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 102.979523][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.042338][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 103.048896][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 103.298579][ T7782] netlink: 'syz.3.1515': attribute type 10 has an invalid length. [ 103.361829][ T7782] bond0: (slave bond_slave_0): Releasing backup interface [ 103.382680][ T7782] bond_slave_0: left promiscuous mode [ 103.421564][ T7747] loop4: detected capacity change from 0 to 1024 [ 103.495673][ T7747] EXT4-fs: inline encryption not supported [ 103.511178][ T7747] ext4: Bad value for 'mb_optimize_scan' [ 103.698878][ T7813] netlink: 'syz.2.1531': attribute type 10 has an invalid length. [ 103.999105][ T7860] loop1: detected capacity change from 0 to 1024 [ 104.023060][ T7860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.175734][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.237790][ T7884] loop2: detected capacity change from 0 to 1024 [ 104.335681][ T7884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.578877][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.706961][ T8018] loop3: detected capacity change from 0 to 1024 [ 105.715163][ T8022] netlink: 'syz.2.1563': attribute type 29 has an invalid length. [ 105.724288][ T8022] netlink: 'syz.2.1563': attribute type 29 has an invalid length. [ 105.753175][ T8022] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1563'. [ 105.796323][ T40] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 105.806904][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.007591][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.598638][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1574'. [ 106.638459][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1574'. [ 106.687054][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 106.687070][ T28] audit: type=1326 audit(2000001096.857:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8047 comm="syz.4.1576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7dd3c629 code=0x0 [ 107.743161][ T28] audit: type=1326 audit(2000001097.917:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 107.784822][ T8074] loop5: detected capacity change from 0 to 1024 [ 107.834148][ T28] audit: type=1326 audit(2000001097.917:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 107.876065][ T8074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.931314][ T28] audit: type=1326 audit(2000001097.917:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 108.008159][ T28] audit: type=1326 audit(2000001097.917:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 108.041539][ T28] audit: type=1326 audit(2000001097.917:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 108.095461][ T28] audit: type=1326 audit(2000001097.917:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 108.109952][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.128022][ T28] audit: type=1326 audit(2000001097.917:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 108.151926][ T28] audit: type=1326 audit(2000001097.917:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 108.175564][ T28] audit: type=1326 audit(2000001097.917:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8067 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f941a13c629 code=0x7ffc0000 [ 108.898217][ T8112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=8112 comm=syz.3.1599 [ 109.171596][ T8116] loop3: detected capacity change from 0 to 2048 [ 109.241837][ T8116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.290195][ T8123] loop5: detected capacity change from 0 to 512 [ 109.338253][ T8123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.369803][ T8119] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 109.600767][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.118437][ T8116] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 864 with error 28 [ 110.168047][ T8116] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.168047][ T8116] [ 110.177729][ T8116] EXT4-fs (loop3): Total free blocks count 0 [ 110.280184][ T8116] EXT4-fs (loop3): Free/Dirty block details [ 110.286125][ T8116] EXT4-fs (loop3): free_blocks=2415919504 [ 110.291986][ T8116] EXT4-fs (loop3): dirty_blocks=864 [ 110.297305][ T8116] EXT4-fs (loop3): Block reservation details [ 110.313568][ T8116] EXT4-fs (loop3): i_reserved_data_blocks=54 [ 110.407470][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.340686][ T8145] loop1: detected capacity change from 0 to 512 [ 111.364630][ T8145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.375288][ T8148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.395610][ T8145] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1624: invalid indirect mapped block 4294967295 (level 0) [ 111.446162][ T8145] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.446337][ T8145] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1624: invalid indirect mapped block 4294967295 (level 1) [ 111.455644][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 111.455669][ C1] EXT4-fs (loop1): initial error at time 2000001101: ext4_free_branches:1023: inode 16 [ 111.455709][ C1] EXT4-fs (loop1): last error at time 2000001101: ext4_free_branches:1023: inode 16 [ 111.538510][ T8145] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.538917][ T8145] EXT4-fs (loop1): 1 orphan inode deleted [ 111.596767][ T8145] EXT4-fs (loop1): 1 truncate cleaned up [ 111.618883][ T8145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.730880][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.287389][ T8165] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 113.150513][ T8170] loop1: detected capacity change from 0 to 2048 [ 113.428655][ T8170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.059151][ T8170] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 114.260277][ T8170] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 114.385114][ T8170] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.385114][ T8170] [ 114.432025][ T8170] EXT4-fs (loop1): Total free blocks count 0 [ 114.598296][ T8170] EXT4-fs (loop1): Free/Dirty block details [ 114.604252][ T8170] EXT4-fs (loop1): free_blocks=2415919504 [ 114.678407][ T8170] EXT4-fs (loop1): dirty_blocks=64 [ 114.691826][ T8182] sit2: entered promiscuous mode [ 114.704243][ T8170] EXT4-fs (loop1): Block reservation details [ 114.718725][ T8170] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 114.748646][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.930011][ T8220] sit1: entered promiscuous mode [ 115.955646][ T8221] loop1: detected capacity change from 0 to 512 [ 115.970745][ T8223] loop4: detected capacity change from 0 to 512 [ 115.993378][ T8221] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 116.034944][ T8223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.091430][ T8223] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.179912][ T3312] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 116.238674][ T3312] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 116.309350][ T6094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.469337][ T5241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.498110][ T5241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.529765][ T5241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.548015][ T5241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.579416][ T5241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.598098][ T5241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.649512][ T5241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.660305][ T5241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.748575][ T5241] bridge_slave_1: left allmulticast mode [ 116.754451][ T5241] bridge_slave_1: left promiscuous mode [ 116.764829][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.778656][ T5241] bridge_slave_0: left allmulticast mode [ 116.784420][ T5241] bridge_slave_0: left promiscuous mode [ 116.800430][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.950492][ T5241] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 116.964065][ T5241] bridge1 (unregistering): left promiscuous mode [ 117.039869][ T5241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.058780][ T5241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.067861][ T5241] bond0 (unregistering): Released all slaves [ 117.076149][ T5241] bond1 (unregistering): Released all slaves [ 117.161233][ T5241] hsr_slave_0: left promiscuous mode [ 117.178341][ T5241] hsr_slave_1: left promiscuous mode [ 117.194268][ T5241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.298216][ T5241] team0 (unregistering): Port device team_slave_1 removed [ 117.318991][ T5241] team0 (unregistering): Port device team_slave_0 removed [ 118.060544][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 118.238624][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.256126][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.264176][ T8290] bridge_slave_0: entered allmulticast mode [ 118.279145][ T8290] bridge_slave_0: entered promiscuous mode [ 118.286147][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.293602][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.302292][ T8290] bridge_slave_1: entered allmulticast mode [ 118.309089][ T8290] bridge_slave_1: entered promiscuous mode [ 118.327327][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.337828][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.359951][ T8290] team0: Port device team_slave_0 added [ 118.366566][ T8290] team0: Port device team_slave_1 added [ 118.393462][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.408087][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.458734][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.483021][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.501058][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.558497][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.619826][ T8290] hsr_slave_0: entered promiscuous mode [ 118.646276][ T8290] hsr_slave_1: entered promiscuous mode [ 118.656192][ T8290] debugfs: 'hsr0' already exists in 'hsr' [ 118.678659][ T8290] Cannot create hsr debugfs directory [ 119.122761][ T8338] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.210234][ T8290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.240098][ T8290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.264343][ T8290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.310382][ T8290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.430332][ T8290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.444398][ T8290] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.461037][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.468185][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.497279][ T8290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.508934][ T8290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.522913][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.530034][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.653752][ T8290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.923013][ T8290] veth0_vlan: entered promiscuous mode [ 119.943745][ T8290] veth1_vlan: entered promiscuous mode [ 119.981655][ T8290] veth0_macvtap: entered promiscuous mode [ 119.990671][ T8290] veth1_macvtap: entered promiscuous mode [ 120.021971][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.042789][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.064281][ T5241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.075098][ T5241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.096640][ T5241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.115768][ T5241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.733910][ T8481] loop1: detected capacity change from 0 to 128 [ 121.739169][ T8485] sit2: entered promiscuous mode [ 121.955555][ T8481] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 121.977502][ T8481] FAT-fs (loop1): Filesystem has been set read-only [ 122.008049][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.008049][ T8481] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 122.058473][ T8481] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 122.083308][ T8481] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 122.115747][ T8481] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 122.123666][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.123666][ T8481] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 122.151320][ T8481] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 122.169121][ T8481] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 122.188142][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.188142][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.218161][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.218161][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.250034][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.250034][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.284667][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.284667][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.318159][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.318159][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.350255][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.350255][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.383628][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.383628][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.416876][ T8481] syz.1.1663: attempt to access beyond end of device [ 122.416876][ T8481] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 122.604277][ T8497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.630268][ T8522] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1679'. [ 124.216485][ T8540] loop1: detected capacity change from 0 to 1024 [ 124.253515][ T8540] EXT4-fs: inline encryption not supported [ 124.302449][ T8540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.335751][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 124.335771][ T28] audit: type=1400 audit(2000001114.507:704): avc: denied { rename } for pid=8539 comm="syz.1.1688" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.439976][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.557419][ T28] audit: type=1400 audit(2000001114.507:705): avc: denied { unlink } for pid=8539 comm="syz.1.1688" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.263505][ T8552] loop3: detected capacity change from 0 to 1024 [ 125.496266][ T8552] EXT4-fs: inline encryption not supported [ 125.541731][ T8552] EXT4-fs: Ignoring removed nobh option [ 125.551641][ T8552] EXT4-fs: Ignoring removed bh option [ 125.691574][ T8552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.884953][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.092244][ T8585] loop1: detected capacity change from 0 to 1024 [ 126.153825][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 126.173791][ T8585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.196281][ T8585] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.293142][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.463057][ T8587] loop5: detected capacity change from 0 to 1024 [ 126.481556][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 126.494264][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.501924][ T8587] EXT4-fs: inline encryption not supported [ 126.517142][ T8587] EXT4-fs: Ignoring removed nobh option [ 126.523983][ T8607] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 126.543507][ T8587] EXT4-fs: Ignoring removed bh option [ 126.570970][ T8608] loop1: detected capacity change from 0 to 764 [ 126.577508][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 126.586699][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 126.601056][ T8608] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 126.625961][ T8614] loop4: detected capacity change from 0 to 1024 [ 126.634812][ T8614] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.642509][ T8587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.658938][ T8614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.679373][ T28] audit: type=1400 audit(2000001116.857:706): avc: denied { read write } for pid=8613 comm="syz.4.1715" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.705050][ T8614] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1715: Allocating blocks 497-513 which overlap fs metadata [ 126.709424][ T28] audit: type=1400 audit(2000001116.877:707): avc: denied { open } for pid=8613 comm="syz.4.1715" path="/13/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.743568][ T8614] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1715: Allocating blocks 497-513 which overlap fs metadata [ 126.766272][ T8613] EXT4-fs (loop4): pa ffff888105d4ed90: logic 0, phys. 113, len 25 [ 126.774466][ T8613] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 126.791849][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.802299][ T8290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.822594][ T28] audit: type=1400 audit(2000001116.997:708): avc: denied { create } for pid=8617 comm="syz.5.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.084119][ T28] audit: type=1400 audit(2000001117.257:709): avc: denied { write } for pid=8633 comm="syz.5.1722" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.147070][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 127.179270][ T8638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.199524][ T8641] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 127.516150][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1735'. [ 127.553835][ T8645] loop2: detected capacity change from 0 to 1024 [ 127.557000][ T8671] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 127.572853][ T8645] EXT4-fs: inline encryption not supported [ 127.581871][ T8668] bond2: entered promiscuous mode [ 127.583537][ T8645] EXT4-fs: Ignoring removed nobh option [ 127.591042][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1735'. [ 127.603673][ T8645] EXT4-fs: Ignoring removed bh option [ 127.619583][ T8668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.633884][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1735'. [ 127.650115][ T8671] bond2: entered promiscuous mode [ 127.660037][ T8671] bond2: entered allmulticast mode [ 127.681856][ T8676] bond2: (slave ip6gretap1): making interface the new active one [ 127.708162][ T8676] ip6gretap1: entered promiscuous mode [ 127.713846][ T8676] ip6gretap1: entered allmulticast mode [ 127.721244][ T8645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.761045][ T8676] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 127.855831][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.912695][ T8689] sock: sock_set_timeout: `syz.3.1743' (pid 8689) tries to set negative timeout [ 127.949430][ T28] audit: type=1400 audit(2000001118.127:710): avc: denied { read } for pid=8688 comm="syz.3.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.985003][ T8691] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1741'. [ 128.009612][ T8691] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 128.041402][ T8697] macvlan3: entered promiscuous mode [ 128.060855][ T8697] macvlan4: entered promiscuous mode [ 128.477400][ T8712] loop1: detected capacity change from 0 to 1024 [ 128.527773][ T8712] EXT4-fs: inline encryption not supported [ 128.536632][ T8712] EXT4-fs: Ignoring removed nobh option [ 128.545109][ T8712] EXT4-fs: Ignoring removed bh option [ 128.635241][ T8712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.656922][ T5233] Bluetooth: hci0: Frame reassembly failed (-84) [ 128.726331][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.424604][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 129.468607][ T8755] erspan0: entered promiscuous mode [ 129.495202][ T8755] macvtap1: entered promiscuous mode [ 129.522551][ T8755] macvtap1: entered allmulticast mode [ 129.620005][ T8755] erspan0: entered allmulticast mode [ 129.645948][ T8756] erspan0: left allmulticast mode [ 129.661827][ T8756] erspan0: left promiscuous mode [ 129.833041][ T8750] loop5: detected capacity change from 0 to 1024 [ 129.833461][ T8762] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 129.862504][ T8762] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 129.870093][ T8750] EXT4-fs: inline encryption not supported [ 129.886067][ T8762] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 129.933940][ T8750] EXT4-fs: Ignoring removed nobh option [ 129.942514][ T8750] EXT4-fs: Ignoring removed bh option [ 130.061196][ T8750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.155041][ T28] audit: type=1326 audit(2000001120.327:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.2.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f941a13c629 code=0x7fc00000 [ 130.251466][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.311403][ T28] audit: type=1400 audit(2000001120.477:712): avc: denied { setopt } for pid=8776 comm="syz.5.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.658134][ T3633] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 130.819568][ T28] audit: type=1326 audit(2000001120.997:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.2.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f941a0dda19 code=0x7fc00000 [ 131.899034][ T8799] loop2: detected capacity change from 0 to 1024 [ 131.907612][ T8799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 131.916695][ T8799] System zones: 0-1, 3-36 [ 131.920590][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 131.921917][ T8799] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1786: bad orphan inode 134217728 [ 131.941577][ T8799] loop2: lost filesystem error report for type 5 error -117 [ 131.947999][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 131.961990][ C1] EXT4-fs (loop2): initial error at time 2000001122: ext4_orphan_get:1417 [ 131.970816][ C1] EXT4-fs (loop2): last error at time 2000001122: ext4_orphan_get:1417 [ 131.971791][ T8799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.068809][ T28] audit: type=1400 audit(2000001122.247:714): avc: denied { mount } for pid=8807 comm="syz.4.1790" name="/" dev="hugetlbfs" ino=20515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 132.119167][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.168035][ T28] audit: type=1400 audit(2000001122.327:715): avc: denied { cmd } for pid=8811 comm="syz.4.1793" path="socket:[20045]" dev="sockfs" ino=20045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.170232][ T8814] loop2: detected capacity change from 0 to 128 [ 132.294653][ T8816] loop4: detected capacity change from 0 to 1024 [ 132.363854][ T8816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 132.383686][ T8804] loop1: detected capacity change from 0 to 1024 [ 132.385417][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.410024][ T8804] EXT4-fs: inline encryption not supported [ 132.411112][ T8816] System zones: 0-1, 3-36 [ 132.412172][ T8816] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1794: bad orphan inode 134217728 [ 132.422260][ T8804] EXT4-fs: Ignoring removed nobh option [ 132.422529][ T8804] EXT4-fs: Ignoring removed bh option [ 132.429669][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.453618][ T8816] loop4: lost filesystem error report for type 5 error -117 [ 132.455136][ T8816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.689778][ T8804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.746206][ T8828] all: renamed from lo (while UP) [ 132.784569][ T8290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.816313][ T8830] loop3: detected capacity change from 0 to 128 [ 132.858983][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.876800][ T8830] bio_check_eod: 2112 callbacks suppressed [ 132.876820][ T8830] syz.3.1799: attempt to access beyond end of device [ 132.876820][ T8830] loop3: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 132.915235][ T8830] syz.3.1799: attempt to access beyond end of device [ 132.915235][ T8830] loop3: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 132.929485][ T8830] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 132.939086][ T8830] syz.3.1799: attempt to access beyond end of device [ 132.939086][ T8830] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 132.952864][ T8830] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 132.968030][ T8830] syz.3.1799: attempt to access beyond end of device [ 132.968030][ T8830] loop3: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 132.998004][ T8830] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 133.033696][ T8830] syz.3.1799: attempt to access beyond end of device [ 133.033696][ T8830] loop3: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 133.052746][ T5237] kworker/u8:10: attempt to access beyond end of device [ 133.052746][ T5237] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 133.067996][ T8830] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 133.085512][ T8830] syz.3.1799: attempt to access beyond end of device [ 133.085512][ T8830] loop3: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 133.095221][ T5237] kworker/u8:10: attempt to access beyond end of device [ 133.095221][ T5237] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 133.120079][ T8830] syz.3.1799: attempt to access beyond end of device [ 133.120079][ T8830] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 133.156905][ T5237] kworker/u8:10: attempt to access beyond end of device [ 133.156905][ T5237] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 133.158567][ T8830] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 133.190068][ T8830] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 133.219820][ T8841] loop2: detected capacity change from 0 to 256 [ 133.232922][ T8830] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 133.246290][ T8841] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.273088][ T8830] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 133.288244][ T8841] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.304603][ T8830] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 133.319541][ T28] audit: type=1400 audit(2000001123.497:716): avc: denied { watch watch_reads } for pid=8840 comm="syz.2.1801" path="/384/file0/control" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 133.349873][ T8830] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 133.526696][ T8846] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 133.820127][ T8873] sock: sock_timestamping_bind_phc: sock not bind to device [ 133.879415][ T8875] netlink: 'syz.3.1817': attribute type 2 has an invalid length. [ 133.884362][ T8870] Process accounting resumed [ 133.938902][ T28] audit: type=1400 audit(2000001124.117:717): avc: denied { write } for pid=8879 comm="syz.3.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.467622][ T8860] loop1: detected capacity change from 0 to 1024 [ 134.483609][ T8860] EXT4-fs: inline encryption not supported [ 134.542197][ T8860] EXT4-fs: Ignoring removed nobh option [ 134.554036][ T8860] EXT4-fs: Ignoring removed bh option [ 134.650616][ T8908] loop3: detected capacity change from 0 to 512 [ 134.657289][ T8908] EXT4-fs: Ignoring removed bh option [ 134.757353][ T8860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.781601][ T8908] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.809283][ T8908] EXT4-fs (loop3): 1 truncate cleaned up [ 134.815594][ T8908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.857620][ T28] audit: type=1400 audit(2000001125.027:718): avc: denied { create } for pid=8907 comm="syz.3.1828" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 134.888695][ T28] audit: type=1400 audit(2000001125.027:719): avc: denied { rename } for pid=8907 comm="syz.3.1828" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.900845][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.912163][ T28] audit: type=1400 audit(2000001125.027:720): avc: denied { reparent } for pid=8907 comm="syz.3.1828" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.035477][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.338746][ T8937] netlink: 'syz.1.1840': attribute type 3 has an invalid length. [ 135.347759][ T8937] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 135.355965][ T8937] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.1840'. [ 136.089332][ T8968] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 136.097168][ T8968] netlink: 'syz.4.1852': attribute type 4 has an invalid length. [ 136.114969][ T8968] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1852'. [ 136.157735][ T8950] loop5: detected capacity change from 0 to 1024 [ 136.228414][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 136.228434][ T28] audit: type=1400 audit(2000001126.397:723): avc: denied { create } for pid=8971 comm="syz.4.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.248033][ T8950] EXT4-fs: inline encryption not supported [ 136.287936][ T8950] EXT4-fs: Ignoring removed nobh option [ 136.295883][ T8950] EXT4-fs: Ignoring removed bh option [ 136.309244][ T28] audit: type=1400 audit(2000001126.437:724): avc: denied { write } for pid=8971 comm="syz.4.1854" path="socket:[20365]" dev="sockfs" ino=20365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.553670][ T8950] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.636457][ T8994] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.695992][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1862'. [ 136.782288][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1873'. [ 137.044631][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.056963][ T28] audit: type=1326 audit(2000001127.207:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.4.1867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00228cc629 code=0x0 [ 137.158267][ T28] audit: type=1400 audit(2000001127.337:726): avc: denied { mounton } for pid=9013 comm="syz.5.1868" path="/236/file0" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 137.293365][ T9017] hub 8-0:1.0: USB hub found [ 137.300885][ T9017] hub 8-0:1.0: 8 ports detected [ 137.501425][ T77] nci: nci_ntf_packet: unknown ntf opcode 0x503 [ 138.278244][ T9027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.432185][ T9045] loop3: detected capacity change from 0 to 1024 [ 138.455521][ T9045] EXT4-fs: inline encryption not supported [ 138.464273][ T9045] EXT4-fs: Ignoring removed nobh option [ 138.473311][ T9045] EXT4-fs: Ignoring removed bh option [ 138.496034][ T9062] syzkaller0: entered promiscuous mode [ 138.503560][ T9062] syzkaller0: entered allmulticast mode [ 138.554603][ T28] audit: type=1400 audit(2000001128.727:727): avc: denied { map } for pid=9068 comm="syz.1.1889" path="socket:[20889]" dev="sockfs" ino=20889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.581560][ T9045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.609350][ T28] audit: type=1400 audit(2000001128.787:728): avc: denied { open } for pid=9044 comm="syz.3.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.629646][ T28] audit: type=1400 audit(2000001128.787:729): avc: denied { kernel } for pid=9044 comm="syz.3.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.696220][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.166008][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 139.188612][ T28] audit: type=1326 audit(2000001129.367:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9075 comm="syz.4.1894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00228cc629 code=0x0 [ 139.249510][ T28] audit: type=1400 audit(2000001129.367:731): avc: denied { kexec_image_load } for pid=9080 comm="syz.1.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 139.291182][ T9085] Invalid argument reading file caps for ./file0 [ 139.537212][ T9083] loop2: detected capacity change from 0 to 32768 [ 139.783104][ T28] audit: type=1400 audit(2000001129.957:732): avc: denied { write } for pid=9094 comm="syz.2.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 140.247154][ T9095] loop2: detected capacity change from 0 to 1024 [ 140.286026][ T9095] EXT4-fs: inline encryption not supported [ 140.308753][ T9095] EXT4-fs: Ignoring removed nobh option [ 140.324660][ T9095] EXT4-fs: Ignoring removed bh option [ 140.376734][ T9081] kexec: Could not allocate control_code_buffer [ 140.450561][ T9095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.516549][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.552984][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 141.266552][ T9144] netlink: 'syz.5.1919': attribute type 11 has an invalid length. [ 141.274619][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 141.284707][ T9113] 9pnet_fd: p9_fd_create_tcp (9113): problem connecting socket to 127.0.0.1 [ 141.305934][ T9144] netlink: 'syz.5.1919': attribute type 11 has an invalid length. [ 141.318869][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1919'. [ 141.590788][ T9154] loop3: detected capacity change from 0 to 512 [ 141.628955][ T9154] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 141.662050][ T9142] loop4: detected capacity change from 0 to 1024 [ 141.675995][ T9154] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1924: bg 0: block 288: padding at end of block bitmap is not set [ 141.739239][ T9154] loop3: lost filesystem error report for type 5 error -117 [ 141.740610][ T9154] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 141.748092][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 141.748116][ C1] EXT4-fs (loop3): initial error at time 2000001131: ext4_validate_block_bitmap:441 [ 141.748148][ C1] EXT4-fs (loop3): last error at time 2000001131: ext4_validate_block_bitmap:441 [ 141.783162][ T9154] loop3: lost filesystem error report for type 5 error -117 [ 141.783908][ T9142] EXT4-fs: inline encryption not supported [ 141.803630][ T9142] EXT4-fs: Ignoring removed nobh option [ 141.811340][ T9154] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1924: attempt to clear invalid blocks 1024 len 1 [ 141.813569][ T28] audit: type=1400 audit(2000001131.987:733): avc: denied { read write } for pid=9159 comm="syz.5.1926" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 141.828369][ T9142] EXT4-fs: Ignoring removed bh option [ 141.857771][ T9154] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 141.858660][ T9154] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1924: invalid indirect mapped block 1819239214 (level 0) [ 141.882258][ T28] audit: type=1400 audit(2000001131.987:734): avc: denied { open } for pid=9159 comm="syz.5.1926" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 141.911211][ T9162] xt_hashlimit: size too large, truncated to 1048576 [ 141.949839][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1928'. [ 141.959674][ T9154] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 141.960107][ T9154] EXT4-fs (loop3): 1 truncate cleaned up [ 142.050759][ T9154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.137030][ T9142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.283580][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.327019][ T8290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.471490][ T9197] netlink: 'syz.5.1940': attribute type 29 has an invalid length. [ 142.480915][ T28] audit: type=1400 audit(2000001132.657:735): avc: denied { cpu } for pid=9195 comm="syz.3.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.659348][ T9207] loop4: detected capacity change from 0 to 128 [ 142.849037][ T9207] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.893946][ T9207] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.989180][ T8290] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.185600][ T9224] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1952'. [ 143.196465][ T9222] loop4: detected capacity change from 0 to 512 [ 143.248324][ T9222] EXT4-fs: Ignoring removed bh option [ 143.253842][ T9222] EXT4-fs: inline encryption not supported [ 143.267188][ T9226] loop1: detected capacity change from 0 to 128 [ 143.284236][ T9222] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.359854][ T9222] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 143.411856][ T9222] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1950: bg 0: block 248: padding at end of block bitmap is not set [ 143.467050][ T9222] loop4: lost filesystem error report for type 5 error -117 [ 143.467398][ T9222] Quota error (device loop4): write_blk: dquota write failed [ 143.474835][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 143.474862][ C1] EXT4-fs (loop4): last error at time 2000001133: ext4_validate_block_bitmap:441 [ 143.507427][ T9215] loop5: detected capacity change from 0 to 1024 [ 143.525005][ T9215] EXT4-fs: inline encryption not supported [ 143.533194][ T9222] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 143.549279][ T9222] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1950: Failed to acquire dquot type 1 [ 143.580159][ T9232] loop1: detected capacity change from 0 to 512 [ 143.588519][ T9215] EXT4-fs: Ignoring removed nobh option [ 143.595630][ T9215] EXT4-fs: Ignoring removed bh option [ 143.606802][ T9222] loop4: lost filesystem error report for type 5 error -117 [ 143.610476][ T9222] EXT4-fs (loop4): 1 truncate cleaned up [ 143.623478][ T28] audit: type=1326 audit(2000001133.787:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2600b56417 code=0x7ffc0000 [ 143.662958][ T9222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 143.676513][ T28] audit: type=1326 audit(2000001133.787:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2600afda19 code=0x7ffc0000 [ 143.705742][ T28] audit: type=1326 audit(2000001133.787:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2600b56417 code=0x7ffc0000 [ 143.730988][ T28] audit: type=1326 audit(2000001133.787:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2600afda19 code=0x7ffc0000 [ 143.770701][ T28] audit: type=1326 audit(2000001133.787:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9202 comm="syz.3.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2600b56417 code=0x7ffc0000 [ 143.773062][ T9232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.859949][ T8290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 143.888085][ T9232] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.897193][ T9215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.034420][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.101313][ T9243] loop5: detected capacity change from 0 to 512 [ 144.138378][ T9243] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.163732][ T9243] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1958: bad orphan inode 131083 [ 144.196197][ T9243] loop5: lost filesystem error report for type 5 error -117 [ 144.196771][ T9243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.257896][ T9243] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.1958: path /255/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 144.304962][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 144.403470][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.522038][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.603975][ T9259] loop4: detected capacity change from 0 to 256 [ 144.662289][ T9259] FAT-fs (loop4): Directory bread(block 64) failed [ 144.680105][ T9259] FAT-fs (loop4): Directory bread(block 65) failed [ 144.690179][ T9259] FAT-fs (loop4): Directory bread(block 66) failed [ 144.700203][ T9259] FAT-fs (loop4): Directory bread(block 67) failed [ 144.706978][ T9259] FAT-fs (loop4): Directory bread(block 68) failed [ 144.720064][ T9259] FAT-fs (loop4): Directory bread(block 69) failed [ 144.728763][ T9259] FAT-fs (loop4): Directory bread(block 70) failed [ 144.735706][ T9259] FAT-fs (loop4): Directory bread(block 71) failed [ 144.748015][ T9259] FAT-fs (loop4): Directory bread(block 72) failed [ 144.768011][ T9259] FAT-fs (loop4): Directory bread(block 73) failed [ 145.075580][ T9282] loop4: detected capacity change from 0 to 512 [ 145.122501][ T9267] loop5: detected capacity change from 0 to 1024 [ 145.151992][ T9267] EXT4-fs: inline encryption not supported [ 145.161940][ T9267] EXT4-fs: Ignoring removed nobh option [ 145.186485][ T9282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.219956][ T9267] EXT4-fs: Ignoring removed bh option [ 145.227843][ T9282] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.284669][ T8290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.354373][ T9267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.432012][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1982'. [ 145.445739][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 145.554342][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.625525][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1987'. [ 145.761184][ T9315] syzkaller0: entered promiscuous mode [ 145.767332][ T9315] syzkaller0: entered allmulticast mode [ 146.327603][ T9334] loop3: detected capacity change from 0 to 1024 [ 146.334924][ T9346] loop2: detected capacity change from 0 to 128 [ 146.376653][ T9334] EXT4-fs: inline encryption not supported [ 146.388569][ T9346] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 146.396872][ T9346] FAT-fs (loop2): Filesystem has been set read-only [ 146.411533][ T9334] EXT4-fs: Ignoring removed nobh option [ 146.447943][ T9334] EXT4-fs: Ignoring removed bh option [ 146.547607][ T9334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.733612][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.848885][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.857601][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.072128][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2013'. [ 147.543686][ T9388] loop3: detected capacity change from 0 to 128 [ 147.578816][ T9388] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.648924][ T9388] ext4 filesystem being mounted at /402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.778022][ T9388] EXT4-fs (loop3): shut down requested (2) [ 147.798639][ T28] kauditd_printk_skb: 6076 callbacks suppressed [ 147.798720][ T28] audit: type=1400 audit(2000001137.977:6817): avc: denied { ioctl } for pid=9387 comm="syz.3.2019" path="/402/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.852418][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.180589][ T9396] loop5: detected capacity change from 0 to 512 [ 148.225837][ T9396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.311972][ T9396] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.370394][ T9400] netlink: 'syz.2.2023': attribute type 3 has an invalid length. [ 148.379722][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 148.449811][ T9396] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.2022: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 148.499509][ T9396] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 12: comm syz.5.2022: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 148.542836][ T9396] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.2022: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 148.544682][ T9392] loop3: detected capacity change from 0 to 1024 [ 148.589996][ T9404] loop2: detected capacity change from 0 to 512 [ 148.649133][ T9404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.658007][ T9392] EXT4-fs: inline encryption not supported [ 148.671003][ T9392] EXT4-fs: Ignoring removed nobh option [ 148.677823][ T9392] EXT4-fs: Ignoring removed bh option [ 148.719265][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.737111][ T9392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.847227][ T9404] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.892766][ T28] audit: type=1400 audit(2000001139.067:6818): avc: denied { ioctl } for pid=9403 comm="syz.2.2025" path="/434/bus/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.927346][ T28] audit: type=1326 audit(2000001139.097:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 148.953856][ T28] audit: type=1326 audit(2000001139.097:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 148.979444][ T28] audit: type=1326 audit(2000001139.097:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 149.003505][ T28] audit: type=1326 audit(2000001139.097:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 149.028323][ T28] audit: type=1326 audit(2000001139.097:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 149.054293][ T28] audit: type=1326 audit(2000001139.097:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 149.079711][ T28] audit: type=1326 audit(2000001139.097:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 149.104238][ T28] audit: type=1326 audit(2000001139.097:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1938ac629 code=0x7fc00000 [ 149.132897][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.175376][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.260340][ T9431] xt_limit: Overflow, try lower: 65536/2147483648 [ 149.308811][ T9433] all: renamed from lo (while UP) [ 149.789774][ T9444] loop5: detected capacity change from 0 to 1024 [ 149.800523][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.834947][ T9444] EXT4-fs: inline encryption not supported [ 149.856980][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.872573][ T9444] EXT4-fs: Ignoring removed nobh option [ 149.894310][ T9444] EXT4-fs: Ignoring removed bh option [ 149.966818][ T9444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.002393][ T9457] xt_limit: Overflow, try lower: 65536/2147483648 [ 150.081386][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.221571][ T9463] all: renamed from lo (while UP) [ 150.531163][ T9465] loop5: detected capacity change from 0 to 1024 [ 150.630718][ T9465] EXT4-fs: inline encryption not supported [ 150.660315][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2055'. [ 150.674507][ T9465] EXT4-fs: Ignoring removed nobh option [ 150.685285][ T9465] EXT4-fs: Ignoring removed bh option [ 150.810772][ T9465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.166086][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.434352][ T9524] loop3: detected capacity change from 0 to 128 [ 152.091014][ T9539] loop2: detected capacity change from 0 to 512 [ 152.099975][ T9539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.169668][ T9539] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2082: bad orphan inode 131083 [ 152.190743][ T9539] loop2: lost filesystem error report for type 5 error -117 [ 152.197774][ T9539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.307026][ T9539] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.2082: path /438/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 152.439326][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.561394][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 153.030883][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 153.050093][ T9594] xt_hashlimit: size too large, truncated to 1048576 [ 153.390959][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 153.812613][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 154.767630][ T9682] syzkaller0: entered promiscuous mode [ 154.777627][ T9682] syzkaller0: entered allmulticast mode [ 154.787583][ T9668] loop5: detected capacity change from 0 to 32768 [ 154.918287][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 154.918306][ T28] audit: type=1326 audit(2000001145.087:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9691 comm="syz.1.2145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e2ce9c629 code=0x0 [ 155.412143][ T9716] hub 8-0:1.0: USB hub found [ 155.416983][ T9716] hub 8-0:1.0: 8 ports detected [ 155.531373][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2161'. [ 155.810380][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2168'. [ 155.884889][ T9755] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 155.894337][ T9755] netlink: 'syz.1.2172': attribute type 4 has an invalid length. [ 155.905022][ T9755] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2172'. [ 156.051229][ T9764] netlink: 'syz.4.2180': attribute type 3 has an invalid length. [ 156.065109][ T9764] netlink: 'syz.4.2180': attribute type 1 has an invalid length. [ 156.082445][ T9764] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.2180'. [ 156.182424][ T9769] netlink: 'syz.5.2193': attribute type 3 has an invalid length. [ 156.221803][ T9769] netlink: 'syz.5.2193': attribute type 1 has an invalid length. [ 156.237730][ T9769] netlink: 198116 bytes leftover after parsing attributes in process `syz.5.2193'. [ 156.581187][ T9807] loop4: detected capacity change from 0 to 512 [ 156.594936][ T9807] EXT4-fs: Ignoring removed bh option [ 156.625300][ T9807] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 156.690793][ T9807] EXT4-fs (loop4): 1 truncate cleaned up [ 156.696920][ T9807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.734342][ T8290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.929111][ T9836] netlink: 'syz.2.2210': attribute type 2 has an invalid length. [ 156.937728][ T9837] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.344278][ T9869] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.559255][ T9881] loop4: detected capacity change from 0 to 256 [ 157.578610][ T9876] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 157.594247][ T9880] netlink: 'syz.5.2226': attribute type 2 has an invalid length. [ 157.618252][ T9881] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.663338][ T9881] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.843867][ T9887] Process accounting resumed [ 158.532522][ T9916] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 159.071417][ T9933] loop5: detected capacity change from 0 to 256 [ 159.108700][ T9933] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.129217][ T9933] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.219625][ T9937] loop4: detected capacity change from 0 to 128 [ 159.341336][ T9937] bio_check_eod: 86 callbacks suppressed [ 159.341373][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.341373][ T9937] loop4: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 159.375085][ T9943] loop5: detected capacity change from 0 to 128 [ 159.449387][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.449387][ T9937] loop4: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 159.468537][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.486943][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.518866][ T9947] loop3: detected capacity change from 0 to 1024 [ 159.585761][ T9937] buffer_io_error: 7 callbacks suppressed [ 159.585777][ T9937] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 159.588588][ T9947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 159.598042][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.598042][ T9937] loop4: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 159.622420][ T9937] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 159.630965][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.630965][ T9937] loop4: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 159.645321][ T9937] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 159.654007][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.654007][ T9937] loop4: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 159.665071][ T9947] System zones: 0-1, 3-36 [ 159.667777][ T9937] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 159.668153][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.668153][ T9937] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 159.696187][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.696187][ T9937] loop4: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 159.711135][ T9937] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 159.724954][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.724954][ T9937] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 159.739490][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.739490][ T9937] loop4: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 159.753255][ T9947] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2256: bad orphan inode 134217728 [ 159.764260][ T9947] loop3: lost filesystem error report for type 5 error -117 [ 159.764329][ T9937] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 159.771664][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 159.771692][ C0] EXT4-fs (loop3): initial error at time 2000001149: ext4_orphan_get:1417 [ 159.771716][ C0] EXT4-fs (loop3): last error at time 2000001149: ext4_orphan_get:1417 [ 159.805177][ T9937] syz.4.2250: attempt to access beyond end of device [ 159.805177][ T9937] loop4: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 159.828766][ T9937] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 159.868564][ T9947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.868839][ T9937] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 159.929036][ T9937] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 159.948689][ T9937] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 159.960914][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.194714][ T9951] Process accounting resumed [ 160.234451][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 160.395057][ T9965] loop5: detected capacity change from 0 to 1024 [ 160.439437][ T9965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 160.447661][ T9965] System zones: 0-1, 3-36 [ 160.508331][ T9965] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2263: bad orphan inode 134217728 [ 160.527859][ T9965] loop5: lost filesystem error report for type 5 error -117 [ 160.527981][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 160.541785][ C1] EXT4-fs (loop5): initial error at time 2000001150: ext4_orphan_get:1417 [ 160.550358][ C1] EXT4-fs (loop5): last error at time 2000001150: ext4_orphan_get:1417 [ 160.605917][ T9965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.711115][ T9965] ================================================================== [ 160.719259][ T9965] BUG: KCSAN: data-race in filemap_read / filemap_read [ 160.726220][ T9965] [ 160.728575][ T9965] write to 0xffff8881034f5fa8 of 8 bytes by task 9979 on cpu 0: [ 160.736224][ T9965] filemap_read+0x98d/0xa10 [ 160.740756][ T9965] generic_file_read_iter+0x79/0x330 [ 160.746065][ T9965] ext4_file_read_iter+0x1cc/0x290 [ 160.751206][ T9965] copy_splice_read+0x471/0x6c0 [ 160.756086][ T9965] splice_direct_to_actor+0x28f/0x670 [ 160.761479][ T9965] do_splice_direct+0x119/0x1a0 [ 160.766361][ T9965] do_sendfile+0x382/0x650 [ 160.770802][ T9965] __x64_sys_sendfile64+0x105/0x150 [ 160.776032][ T9965] x64_sys_call+0x2dc4/0x3020 [ 160.780751][ T9965] do_syscall_64+0x12c/0x370 [ 160.785369][ T9965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.791279][ T9965] [ 160.793628][ T9965] read to 0xffff8881034f5fa8 of 8 bytes by task 9965 on cpu 1: [ 160.801195][ T9965] filemap_read+0x6f/0xa10 [ 160.805632][ T9965] generic_file_read_iter+0x79/0x330 [ 160.810933][ T9965] ext4_file_read_iter+0x1cc/0x290 [ 160.816083][ T9965] copy_splice_read+0x471/0x6c0 [ 160.820976][ T9965] splice_direct_to_actor+0x28f/0x670 [ 160.826374][ T9965] do_splice_direct+0x119/0x1a0 [ 160.831243][ T9965] do_sendfile+0x382/0x650 [ 160.835694][ T9965] __x64_sys_sendfile64+0x105/0x150 [ 160.840999][ T9965] x64_sys_call+0x2dc4/0x3020 [ 160.845721][ T9965] do_syscall_64+0x12c/0x370 [ 160.850356][ T9965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.856290][ T9965] [ 160.858635][ T9965] value changed: 0x00000000000000a5 -> 0x00000000000000a6 [ 160.865756][ T9965] [ 160.868101][ T9965] Reported by Kernel Concurrency Sanitizer on: [ 160.874277][ T9965] CPU: 1 UID: 0 PID: 9965 Comm: syz.5.2263 Not tainted syzkaller #0 PREEMPT(full) [ 160.883594][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.893693][ T9965] ================================================================== [ 160.992827][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.