last executing test programs: 4m3.597148678s ago: executing program 32 (id=2770): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x248, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x21c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x20c, 0x1, [@m_tunnel_key={0x208, 0xf, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x512c, 0x10000000, 0x9a46, 0x6}, 0x2}}]}, {0x17f, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3m21.493460079s ago: executing program 4 (id=3185): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 3m21.241662486s ago: executing program 4 (id=3195): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m18.454397412s ago: executing program 4 (id=3212): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}, @NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4000023}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x3caa}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3m18.236284547s ago: executing program 4 (id=3215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073"], 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x24044010) 3m18.059774372s ago: executing program 4 (id=3217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m17.849851628s ago: executing program 4 (id=3219): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.596388078s ago: executing program 33 (id=3219): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.569300859s ago: executing program 5 (id=4413): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000085c0200280012800b000100697036746e6c00001800028014000300ff00ffffffed00000000000000000001080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 1m22.495437571s ago: executing program 5 (id=4416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001200)={@void, @void, @ipv4=@dccp={{0x6, 0x4, 0x2, 0x3d, 0x28, 0x65, 0x0, 0x7f, 0x21, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_addr={0x44, 0x4, 0x44, 0x1, 0x2}]}}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x2, "d22dbf", 0xe, "3638a6"}}}}, 0x28) 1m22.426808313s ago: executing program 5 (id=4418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[], 0x3c}}, 0x0) 1m22.397682454s ago: executing program 5 (id=4419): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x9, 0xb) 1m22.245422708s ago: executing program 5 (id=4422): syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m21.957688707s ago: executing program 5 (id=4438): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, 0x0}, 0x4000000) 1m21.931408698s ago: executing program 34 (id=4438): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, 0x0}, 0x4000000) 1m13.856280675s ago: executing program 2 (id=4599): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffb, 0x0, 0xffd}}}}}}}, 0x0) 1m13.499258406s ago: executing program 2 (id=4608): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 1m13.389724769s ago: executing program 2 (id=4610): openat(0xffffffffffffffff, 0x0, 0x400002, 0x0) getpid() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3, 0x8000000000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@private, 0x4d6, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0xfff}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400010c, 0x0) 1m13.327359001s ago: executing program 2 (id=4612): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xdc}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1m12.322641401s ago: executing program 2 (id=4629): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9}) 1m12.141768626s ago: executing program 2 (id=4634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)='6', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) shutdown(r0, 0x1) 1m12.141598626s ago: executing program 35 (id=4634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)='6', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) shutdown(r0, 0x1) 55.69514765s ago: executing program 8 (id=5018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) close_range(r0, 0xffffffffffffffff, 0x0) 55.637754241s ago: executing program 8 (id=5021): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x29, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) 54.765271267s ago: executing program 8 (id=5039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 54.550085494s ago: executing program 8 (id=5043): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$eJzs3c9rXNUeAPDvnUnatM1r8t7r67O11WgVgz+SJv1hFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakoRO6duUnmZ6dN4jTJ5wPTOefOufeec+85mXPPmXsbwJY1kP6TRPRGxI8R0VeOVicYKL8tzM+O35yfHU9icfHVX5Ms3Y352fE8ab7erkpksBBR+DCJp5P6/U5funx2rFSavFCJD8+ce3t4+tLlJ86cGzs9eXry/OiJE0ePjDx5fPRY1XoNNlVnR4Nlablu7H936sC+F16/+vL4yatvfPt5uq29B8ufV8qxrY3NR9ysy8WLEXN1yQbSo/bbYqb2s4fb2tHG8a8V4aSrgxnhthQjIj1d3Vn774tiLJ+8vnj+g45mDlhX6XfT9uYfzy0Cm1gSnc4B0Bn5F316/Zu/4q9/qPNxF7j+zPJF/8L87PjC0nhGVxQqy7vXcf8DEXFy7o9P0lfUjKcAAKyHrG/zeE3/L1OIvdl7ea5jd2UOpT8i/h0R/4mI/0bEnoj4X0SW9v8RcU955cW+Nvc/UBOv7/8UrjXM8xpJ+39Prej7LczPVg+HFaK/mL2V5zj6ozs5daY0ebhyTAaje3saH2mxj6+eaz6ttLL/l77SPNRk4FpXecHSRibGZsbW6iBcfz9if1dV+SvHP1maCUhrwL6I2H97m96dB848+tmBZokalT/vC9/SGswzLX4a8Uj5/M9FTflzSZP5ybSOHx89NtwTpcnDw3mtqPfdD1deabb/VZV/DaTnf2d1/a9J0fd7Up6v7Y5SafLC9O3v48pPHzW9psnaf8vyL9X/JWn935a8ls1Zf/9mednFsZmZCyMR25KXsnilsfREunx0ed2LlXiePi3/4KFG9b+Q/Y2Lyvm/NyLSSnwwYvd9EXF/Je8PRMSDEXGoRfm/efaht1qUP4kkOnr+J6Jx+6/oT1bO199BoHj26y+bzdvfuv6n5/9oNrs+WFmS/f2LnpblajeDqz+CAAAAcPcrRERvJIWhcnigNwqFoaHyb/j3xM5CaWp65rFTU++cnyjfI9Af3YV8pKtvxXjoSJL//r0cH62MFeefH6mMG39c3JHFh8anShMdLjtsdbuq23/k7T/1S7HTuQPWXfN5tBa3BgCbQm37L9SlSNq68RbYeNr5HY1rAdicGrT/Fc/Q+LP6VqH651wAG1hXgxCwNTRq9e/VxOv6/42esgVsOPXt/+cGj6wDNiO9fti6tH/YurR/2JJWc1//nQfymwVaJs6z2DBNT9t3+G+VQP54mPXc145YXhKFLNAbTdfa2amjkY9Vt0zc184GI+KLVeenuAblSltM9ZLirQq4ykC7/xkGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3e3vAAAA//+EGt/a") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x30, r0, &(0x7f0000000000), 0x100000, 0x100fbff}]) 53.461715826s ago: executing program 8 (id=5057): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000"], 0x88) 53.205632943s ago: executing program 8 (id=5063): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)={0x104, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 53.205413663s ago: executing program 36 (id=5063): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)={0x104, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 49.426397234s ago: executing program 9 (id=5139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x0, @val=@perf_event={0xba6}}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) 49.389154526s ago: executing program 9 (id=5141): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xd0, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x9b) 49.363905486s ago: executing program 9 (id=5142): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) time(0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 48.428971574s ago: executing program 9 (id=5164): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 48.099754703s ago: executing program 9 (id=5179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r2, 0x4, 0x20, 0x100000000, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x4f, 0x0, 0x1, 0x2}, 0x28) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 45.797364441s ago: executing program 9 (id=5214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) setsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) close_range(r0, 0xffffffffffffffff, 0x0) 45.481916511s ago: executing program 37 (id=5214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) setsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) close_range(r0, 0xffffffffffffffff, 0x0) 4.127473638s ago: executing program 0 (id=5649): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socket(0x21, 0x3, 0x20000000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x40400) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x4000000000010046) 3.849037576s ago: executing program 0 (id=5651): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 3.739397569s ago: executing program 0 (id=5652): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) tkill(r1, 0x7) 3.628358753s ago: executing program 0 (id=5654): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x75653100}, 0x0, {0x3}}) 3.349975431s ago: executing program 6 (id=5660): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1218048, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f81972", 0x9) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) 3.292341582s ago: executing program 6 (id=5661): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@nolazytime}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) fallocate(r0, 0x20, 0x4000, 0x8000) 3.179440876s ago: executing program 6 (id=5662): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) 2.800032057s ago: executing program 6 (id=5666): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) time(0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 2.549713375s ago: executing program 1 (id=5667): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c7, &(0x7f0000000280)="$eJzs3buLXFUcB/Df3Z2XEZwprETwgilsDNm0NrPIBAanEGUKtdBgEpCdQUhgwQeOqWxtLP0LBMHOf8LGwj5gK9i5YODKfe08MjPJBCfr4/MpkrPnnO85v3v3zi5bzJkPXpye3Ezj9r3P70enk8RBP/pxlkQvDqL2ZSzpfx0AwL/ZWZbF71lpeSTZmstHO/stDQDYk82//zf4Ye8lAQB79vY7775xPBoN3krTTlyffnU6zv+yz/8vx49vx0cxiVtxNbrxICI7V7avZ1k2a6S5Xlyezk7HeXL6/k/V+se/RRT5o+hGr+hazg9Hg6O0tJCf5XVcqvbv5/lr0Y3n1+w/HA2urcnHuBWvvLxQ/5Xoxs8fxscxiZtFEUX+1T+Ho8EXR2n6evbNH5+9l5eX55PZ6bhdzJvLDp/ytwYAAAAAAAAAAAAAAAAAAAAAgP+wK2najrT4pxeXp3lXdf7O4YP8i2aktd7y+Txl/vyU4JXzgWZZfFufz3M1TdOsmjjPN+KFRjQu5qoBAAAAAAAAAAAAAAAAAADgn+XuJ5+e3JhMbt35Wxr1aQD12/qfdJ3+Qs9LsWZOL8572vMtD6ptt6wch/WcJGJrGfmKOxXffPTuGxrPbEp99/2ut67z6DnNJ6hwx0b9dJ3cSNbfw3bUPZ36IflxcU4rHnOv1qahbKfHr7V2qPu48fuXqldT69miZ7ZlciTbCnvt13KlqidZvYpWcVfXxptVo3wtVEPPLcQ7Oz3PD/+sSJzWAQAAAAAAAAAAAAAAAAAAezV/0++awXsbQr8Myw/5j96eqwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp2P++f+bGmfZQ0OzKrwyOeLNWI234s7dC75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gf+CgAA//8tV14E") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) 1.669775631s ago: executing program 7 (id=5668): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)="34ca8a", 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240c8011}, 0x40) 1.565350684s ago: executing program 6 (id=5672): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1218048, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") write(0xffffffffffffffff, &(0x7f0000000100)="f0d319933f17f819727b", 0xa) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) 1.550928694s ago: executing program 0 (id=5673): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.487369486s ago: executing program 1 (id=5674): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) poll(0x0, 0x0, 0x2000009d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1.487105576s ago: executing program 7 (id=5675): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) tkill(r1, 0x7) 1.448732677s ago: executing program 7 (id=5677): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") 1.448230337s ago: executing program 6 (id=5678): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) splice(r1, 0x0, r3, 0x0, 0x6, 0xc) ioctl$FIONREAD(r2, 0x541b, 0x0) 1.385694389s ago: executing program 7 (id=5679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4403, 0x0) 1.36483813s ago: executing program 3 (id=5680): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="20c879ebbdc50bcd6d000000", 0xc) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(0xffffffffffffffff) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x1, 0xffffffff, 0x94, 0x7, 0x80000000}}, 0x120) 1.33760362s ago: executing program 3 (id=5681): syz_open_procfs(0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001700), 0x40000, 0x0) poll(&(0x7f0000001980)=[{0xffffffffffffffff, 0x20}, {r0, 0x200}], 0x2, 0x4) 1.283319912s ago: executing program 3 (id=5682): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) time(0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 656.96037ms ago: executing program 0 (id=5683): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x42) 433.817877ms ago: executing program 7 (id=5684): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c7, &(0x7f0000000280)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) 367.922499ms ago: executing program 1 (id=5685): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) 289.644801ms ago: executing program 1 (id=5686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x22852, r0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 229.561023ms ago: executing program 7 (id=5687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000040, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$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") link(&(0x7f00000001c0)='./file1\x00', 0x0) 215.019753ms ago: executing program 1 (id=5688): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000000c0)={0x6f7928f4, 0x9, 0x9, 0xfffffffc, 0x80, 0x3}) tkill(r1, 0x7) 169.336945ms ago: executing program 3 (id=5689): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") 73.779817ms ago: executing program 1 (id=5690): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x30, 0x79, 0x1}, 0x7) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 73.585857ms ago: executing program 3 (id=5691): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="20c879ebbdc50bcd6d000000", 0xc) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(0xffffffffffffffff) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x1, 0xffffffff, 0x94, 0x7, 0x80000000}}, 0x120) 0s ago: executing program 3 (id=5692): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0x248c0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000200)) kernel console output (not intermixed with test programs): : avc: denied { write } for pid=17914 comm="syz.3.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.060877][ T28] audit: type=1400 audit(1786043662.857:548): avc: denied { write } for pid=17921 comm="syz.0.4235" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.089961][ T28] audit: type=1400 audit(1786043662.857:549): avc: denied { add_name } for pid=17921 comm="syz.0.4235" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.134477][ T28] audit: type=1400 audit(1786043662.857:550): avc: denied { write open } for pid=17921 comm="syz.0.4235" path="/246/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 400.176357][ T28] audit: type=1400 audit(1786043662.857:551): avc: denied { read } for pid=17921 comm="syz.0.4235" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 400.221855][ T28] audit: type=1400 audit(1786043663.137:552): avc: denied { ioctl } for pid=17939 comm="syz.2.4240" path="socket:[50368]" dev="sockfs" ino=50368 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 400.265641][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.393575][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4248'. [ 400.409817][ T28] audit: type=1400 audit(1786043663.377:553): avc: denied { write } for pid=17946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.479504][T17985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.507679][T17985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.084492][T18005] Mass Storage Function, version: 2009/09/11 [ 401.090621][T18005] LUN: removable file: (no medium) [ 401.945069][T18033] loop0: detected capacity change from 0 to 512 [ 402.174541][T18033] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 402.462624][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.473846][T18043] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.481248][T18043] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.496982][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.512654][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.542681][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.568989][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.594696][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.609242][T18043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.621700][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.639864][T18043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.652248][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.670927][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.696792][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: unknown main item tag 0x0 [ 402.727524][T18043] ip6gre1: left promiscuous mode [ 402.734130][ T3396] hid-generic 0001:FFFFFFFF:0094.0001: hidraw0: HID v0.07 Device [syz1] on syz1 [ 402.750703][T18043] ip6gre1: left allmulticast mode [ 402.780671][ T147] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.823842][ T147] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.854960][T18052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4271'. [ 402.920438][T18057] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4271'. [ 402.937522][ T147] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.950758][T18050] fido_id[18050]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 403.004085][ T147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.160263][T18073] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 403.194295][T18071] syz.6.4280: vmalloc error: size 4096, failed to allocate pages, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 403.242125][T18071] CPU: 0 UID: 0 PID: 18071 Comm: syz.6.4280 Not tainted syzkaller #0 PREEMPT(lazy) [ 403.242154][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.242170][T18071] Call Trace: [ 403.242248][T18071] [ 403.242256][T18071] __dump_stack+0x1d/0x30 [ 403.242280][T18071] dump_stack_lvl+0x95/0xd0 [ 403.242305][T18071] dump_stack+0x15/0x1b [ 403.242379][T18071] warn_alloc+0x145/0x1c0 [ 403.242411][T18071] ? alloc_pages_mpol+0xd9/0x1d0 [ 403.242503][T18071] ? alloc_pages_noprof+0xb6/0x140 [ 403.242542][T18071] __vmalloc_node_range_noprof+0xdfd/0x11e0 [ 403.242579][T18071] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 403.242645][T18071] __vmalloc_noprof+0xa4/0xf0 [ 403.242676][T18071] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 403.242713][T18071] bpf_prog_alloc_no_stats+0x47/0x390 [ 403.242819][T18071] ? bpf_prog_alloc+0x2a/0x150 [ 403.242897][T18071] bpf_prog_alloc+0x3c/0x150 [ 403.242933][T18071] bpf_prog_load+0x54b/0x1100 [ 403.242963][T18071] ? avc_has_perm_noaudit+0xa3/0x120 [ 403.243078][T18071] __sys_bpf+0xbae/0xc30 [ 403.243149][T18071] ? do_futex+0x350/0x460 [ 403.243280][T18071] __x64_sys_bpf+0x69/0x80 [ 403.243310][T18071] x64_sys_call+0x10cb/0x3020 [ 403.243337][T18071] do_syscall_64+0x136/0x3c0 [ 403.243373][T18071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.243435][T18071] RIP: 0033:0x7fa09377e0d9 [ 403.243453][T18071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.243627][T18071] RSP: 002b:00007fa0921d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.243650][T18071] RAX: ffffffffffffffda RBX: 00007fa093a05fa0 RCX: 00007fa09377e0d9 [ 403.243669][T18071] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 403.243687][T18071] RBP: 00007fa093815024 R08: 0000000000000000 R09: 0000000000000000 [ 403.243704][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.243745][T18071] R13: 00007fa093a06038 R14: 00007fa093a05fa0 R15: 00007ffc0ced39c8 [ 403.243773][T18071] [ 403.246939][T18071] Mem-Info: [ 403.461141][T18071] active_anon:9585 inactive_anon:1 isolated_anon:0 [ 403.461141][T18071] active_file:0 inactive_file:31262 isolated_file:0 [ 403.461141][T18071] unevictable:0 dirty:241 writeback:0 [ 403.461141][T18071] slab_reclaimable:3459 slab_unreclaimable:19189 [ 403.461141][T18071] mapped:30453 shmem:1052 pagetables:1469 [ 403.461141][T18071] sec_pagetables:0 bounce:0 [ 403.461141][T18071] kernel_misc_reclaimable:0 [ 403.461141][T18071] free:1819644 free_pcp:31920 free_cma:0 [ 403.507210][T18071] Node 0 active_anon:38340kB inactive_anon:4kB active_file:0kB inactive_file:125048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121812kB dirty:964kB writeback:0kB shmem:4208kB kernel_stack:4032kB pagetables:5876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 403.539461][T18071] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.570049][T18071] lowmem_reserve[]: 0 2878 7857 7857 [ 403.575736][T18071] Node 0 DMA32 free:2944004kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947632kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 403.620638][T18071] lowmem_reserve[]: 0 0 4978 4978 [ 403.626119][T18071] Node 0 Normal free:4319212kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37992kB inactive_anon:4kB active_file:0kB inactive_file:125048kB unevictable:0kB writepending:964kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:124604kB local_pcp:102504kB free_cma:0kB [ 403.668058][T18071] lowmem_reserve[]: 0 0 0 0 [ 403.673287][T18071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 403.687037][T18071] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944004kB [ 403.704963][T18071] Node 0 Normal: 93*4kB (UME) 33*8kB (UM) 79*16kB (UM) 3*32kB (UME) 7*64kB (UME) 221*128kB (UME) 107*256kB (UM) 21*512kB (UME) 30*1024kB (UME) 11*2048kB (UM) 1025*4096kB (M) = 4320524kB [ 403.731506][T18071] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 403.741583][T18071] 32461 total pagecache pages [ 403.746341][T18071] 1 pages in swap cache [ 403.750802][T18071] Free swap = 124992kB [ 403.755241][T18071] Total swap = 124996kB [ 403.759475][T18071] 2097051 pages RAM [ 403.764689][T18071] 0 pages HighMem/MovableOnly [ 403.770094][T18071] 81744 pages reserved [ 403.935145][T18095] loop5: detected capacity change from 0 to 512 [ 403.949412][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 403.949437][ T28] audit: type=1400 audit(1786043666.917:571): avc: denied { mounton } for pid=18094 comm="syz.5.4288" path="/299/file0" dev="tmpfs" ino=1631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 403.949685][T18095] EXT4-fs: Ignoring removed nobh option [ 404.040512][T18095] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 404.108089][T18095] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #3: comm syz.5.4288: corrupted inode contents [ 404.128592][T18095] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 404.129215][T18095] EXT4-fs (loop5): Remounting filesystem read-only [ 404.138751][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 404.138779][ C1] EXT4-fs (loop5): initial error at time 1786043667: ext4_do_update_inode:5742: inode 3 [ 404.138812][ C1] EXT4-fs (loop5): last error at time 1786043667: ext4_do_update_inode:5742: inode 3 [ 404.186424][T18095] Quota error (device loop5): write_blk: dquota write failed [ 404.203816][T18095] Quota error (device loop5): qtree_write_dquot: Error -30 occurred while creating quota [ 404.253331][T18095] EXT4-fs (loop5): 1 truncate cleaned up [ 404.278213][T18095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.312705][T18095] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.325388][T18095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.439939][T18125] netlink: 'syz.0.4297': attribute type 1 has an invalid length. [ 404.466864][T18125] netlink: 'syz.0.4297': attribute type 2 has an invalid length. [ 404.682260][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4301'. [ 404.715943][ T28] audit: type=1400 audit(1786043667.687:572): avc: denied { getopt } for pid=18129 comm="syz.6.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.762089][T18151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.779261][T18151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.853473][ T28] audit: type=1400 audit(1786043667.827:573): avc: denied { map } for pid=18164 comm="syz.6.4315" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.878703][ T28] audit: type=1400 audit(1786043667.827:574): avc: denied { read write } for pid=18164 comm="syz.6.4315" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.931656][ T28] audit: type=1400 audit(1786043667.907:575): avc: denied { setopt } for pid=18169 comm="syz.6.4317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.957493][ T28] audit: type=1400 audit(1786043667.927:576): avc: denied { ioctl } for pid=18169 comm="syz.6.4317" path="socket:[49837]" dev="sockfs" ino=49837 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 405.010373][T18172] loop2: detected capacity change from 0 to 1024 [ 405.061894][T18177] loop3: detected capacity change from 0 to 1024 [ 405.068788][T18177] EXT4-fs: Ignoring removed orlov option [ 405.083994][T18172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.098898][T18177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.111955][ T28] audit: type=1400 audit(1786043668.087:577): avc: denied { read write } for pid=18169 comm="syz.6.4317" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 405.168285][T13568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.247569][ T28] audit: type=1400 audit(1786043668.087:578): avc: denied { open } for pid=18169 comm="syz.6.4317" path="/184/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 405.553158][T18186] loop5: detected capacity change from 0 to 1024 [ 405.593022][T18186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.698792][T13123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.776567][T18190] netlink: 'syz.0.4325': attribute type 13 has an invalid length. [ 405.845579][T18195] ieee802154 phy0 wpan0: encryption failed: -22 [ 405.853966][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4324'. [ 405.911384][T18194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.962130][T18200] lo: entered allmulticast mode [ 405.983561][T13917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.985799][T18200] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 406.022185][T18200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.039022][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.050144][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.060317][T18200] bond1: (slave lo): Enslaving as an active interface with an up link [ 406.173562][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4338'. [ 406.198930][T18227] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.220658][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.238335][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4338'. [ 406.261370][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.280969][T18232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4338'. [ 406.380619][ T3389] IPVS: starting estimator thread 0... [ 406.445772][T18259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.458893][T18259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.470701][T18252] IPVS: using max 1536 ests per chain, 76800 per kthread [ 406.894211][T18291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.938552][T18291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.913934][T18323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.966083][T18323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.194778][T18340] loop6: detected capacity change from 0 to 1024 [ 408.238542][T18340] EXT4-fs: Ignoring removed orlov option [ 408.354435][T18340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.552326][T18359] netlink: 'syz.2.4382': attribute type 1 has an invalid length. [ 408.581906][T18359] netlink: 'syz.2.4382': attribute type 2 has an invalid length. [ 409.363762][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.372851][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 409.372935][ T28] audit: type=1400 audit(1786043672.337:714): avc: denied { write } for pid=18358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.441966][T18394] loop6: detected capacity change from 0 to 512 [ 409.449817][T18394] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 409.463485][T18394] EXT4-fs (loop6): 1 truncate cleaned up [ 409.469818][T18394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.489496][ T28] audit: type=1400 audit(1786043672.467:715): avc: denied { write } for pid=18393 comm="syz.6.4390" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.535810][ T28] audit: type=1400 audit(1786043672.467:716): avc: denied { append } for pid=18393 comm="syz.6.4390" path="/194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 409.628178][ T28] audit: type=1400 audit(1786043672.577:717): avc: denied { map } for pid=18393 comm="syz.6.4390" path="/194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 409.708670][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.748374][ T28] audit: type=1400 audit(1786043672.707:718): avc: denied { write } for pid=18402 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.949180][T18409] netlink: 'syz.2.4398': attribute type 1 has an invalid length. [ 410.005686][T18409] netlink: 'syz.2.4398': attribute type 2 has an invalid length. [ 410.385993][T18416] loop0: detected capacity change from 0 to 1024 [ 410.418352][T18418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.449687][T18418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.459434][T18416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.501795][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.549302][T18432] loop5: detected capacity change from 0 to 512 [ 410.565651][T18432] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 410.616584][T18438] xt_hashlimit: size too large, truncated to 1048576 [ 410.624168][ T28] audit: type=1400 audit(1786043673.587:719): avc: denied { setopt } for pid=18437 comm="syz.0.4410" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.733547][T18449] loop2: detected capacity change from 0 to 1024 [ 410.754134][T18449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.803331][T13568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.872090][T18460] loop5: detected capacity change from 0 to 256 [ 410.890147][ T28] audit: type=1400 audit(1786043673.857:720): avc: denied { mounton } for pid=18459 comm="syz.5.4419" path="/331/file0/bus" dev="loop5" ino=1402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 410.929062][ T28] audit: type=1400 audit(1786043673.887:721): avc: denied { append } for pid=18459 comm="syz.5.4419" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.954896][T13123] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 410.956367][ T28] audit: type=1326 audit(1786043673.937:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.2.4421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f22e0d9 code=0x7ffc0000 [ 410.972058][T13123] FAT-fs (loop5): Filesystem has been set read-only [ 410.994400][ T28] audit: type=1326 audit(1786043673.937:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.2.4421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba0f22e0d9 code=0x7ffc0000 [ 411.023006][T13123] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 411.366451][T18500] loop0: detected capacity change from 0 to 1764 [ 411.428536][T18502] loop2: detected capacity change from 0 to 1024 [ 411.453944][T18502] EXT4-fs: Ignoring removed orlov option [ 411.855822][T18502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.095610][T18527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.112389][T18527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.285244][T13568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.410517][T18505] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.445385][T18505] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.456514][T18505] bridge_slave_0: entered allmulticast mode [ 412.464659][T18505] bridge_slave_0: entered promiscuous mode [ 412.473611][T18505] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.481144][T18505] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.488707][T18505] bridge_slave_1: entered allmulticast mode [ 412.497257][T18505] bridge_slave_1: entered promiscuous mode [ 412.579219][T18505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.623915][T18505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.743055][T18505] team0: Port device team_slave_0 added [ 412.802946][T18505] team0: Port device team_slave_1 added [ 412.879220][T18505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.903609][T18505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.935370][T18551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4453'. [ 412.944647][T18505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.957524][T18505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.964930][T18505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.073643][T18505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.107022][T18505] hsr_slave_0: entered promiscuous mode [ 413.115128][T18505] hsr_slave_1: entered promiscuous mode [ 413.125985][T18559] loop2: detected capacity change from 0 to 1024 [ 413.133085][T18505] debugfs: 'hsr0' already exists in 'hsr' [ 413.139590][T18505] Cannot create hsr debugfs directory [ 413.166723][T18559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.209024][T13568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.266664][T18505] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 413.287894][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.319322][T18505] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 413.343839][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.351785][T18505] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 413.389359][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.401097][T18505] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 413.410252][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.581506][T18505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.632418][T18505] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.678310][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.685499][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.701839][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4466'. [ 413.723574][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.730740][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.814012][T18505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.831569][T18505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.947561][T18592] loop6: detected capacity change from 0 to 1024 [ 413.971254][T18592] EXT4-fs: Ignoring removed orlov option [ 414.015240][T18592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.074514][T18602] loop3: detected capacity change from 0 to 1024 [ 414.122709][T18602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.178380][T13917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.299329][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.311018][T18625] loop2: detected capacity change from 0 to 512 [ 414.330463][T18625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 414.341034][T18505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.360541][T18625] EXT4-fs (loop2): 1 truncate cleaned up [ 414.367849][T18625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.396107][ T28] kauditd_printk_skb: 177 callbacks suppressed [ 414.396128][ T28] audit: type=1400 audit(1786043677.367:901): avc: denied { write } for pid=18624 comm="syz.2.4475" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.564409][ T28] audit: type=1400 audit(1786043677.537:902): avc: denied { lock } for pid=18651 comm="syz.3.4485" path="socket:[51699]" dev="sockfs" ino=51699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 414.618448][T13568] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.666824][T18663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4488'. [ 414.723940][T18670] loop6: detected capacity change from 0 to 512 [ 414.746764][T18670] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 414.777904][T18670] EXT4-fs (loop6): 1 truncate cleaned up [ 414.784709][T18670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.808635][ T28] audit: type=1400 audit(1786043677.777:903): avc: denied { write } for pid=18668 comm="syz.6.4492" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.846117][ T28] audit: type=1400 audit(1786043677.807:904): avc: denied { write } for pid=18668 comm="syz.6.4492" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.874571][T18505] veth0_vlan: entered promiscuous mode [ 414.883841][T18505] veth1_vlan: entered promiscuous mode [ 414.898573][T18505] veth0_macvtap: entered promiscuous mode [ 414.906519][T18505] veth1_macvtap: entered promiscuous mode [ 414.918283][T18505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.927475][T18505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.944268][ T28] audit: type=1400 audit(1786043677.917:905): avc: denied { write } for pid=18668 comm="syz.6.4492" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.001601][ T28] audit: type=1400 audit(1786043677.917:906): avc: denied { create } for pid=18668 comm="syz.6.4492" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 415.060851][ T5281] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.069670][ T5281] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.078709][ T28] audit: type=1400 audit(1786043677.917:907): avc: denied { write } for pid=18668 comm="syz.6.4492" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.115938][ T28] audit: type=1400 audit(1786043677.967:908): avc: denied { mount } for pid=18505 comm="syz-executor" name="/" dev="gadgetfs" ino=4018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 415.149177][ T147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.165422][ T147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.174468][ T28] audit: type=1400 audit(1786043677.987:909): avc: denied { cmd } for pid=18680 comm="syz.2.4495" path="socket:[51803]" dev="sockfs" ino=51803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 415.198596][ T28] audit: type=1400 audit(1786043678.087:910): avc: denied { mount } for pid=18688 comm="syz.0.4497" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 415.253486][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.347961][T18701] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.364377][T18703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4503'. [ 415.376752][T18691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.394877][T18691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.409129][T18703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4503'. [ 415.640159][T18735] team0: Port device syz_tun added [ 415.704498][T18743] loop3: detected capacity change from 0 to 512 [ 415.731429][T18743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 415.749097][T18743] EXT4-fs (loop3): 1 truncate cleaned up [ 415.772553][T18743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.829032][T13917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.928166][T18769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.937621][T18769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.981142][T18777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4539'. [ 416.017521][T18773] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.024836][T18773] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.114773][T18773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.125762][T18773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.151970][T18790] loop6: detected capacity change from 0 to 164 [ 416.159564][T18790] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 416.175792][T18790] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 416.250774][ T147] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.288865][ T147] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.320901][ T147] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.363907][ T5281] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.381922][T18813] tipc: Can't bind to reserved service type 0 [ 416.616458][T18831] tmpfs: Unknown parameter 'usrquota' [ 417.050917][T18835] xt_hashlimit: size too large, truncated to 1048576 [ 417.430398][T18826] loop0: detected capacity change from 0 to 1024 [ 417.440881][T18826] EXT4-fs: Ignoring removed orlov option [ 417.505922][T18826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.712118][T18848] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.719416][T18848] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.754622][T18860] loop6: detected capacity change from 0 to 512 [ 417.781730][T18860] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 417.832157][T18860] EXT4-fs (loop6): 1 truncate cleaned up [ 417.838396][T18860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.880532][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4568'. [ 417.897811][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.901082][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.912817][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.923933][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.930667][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4568'. [ 417.961440][T18866] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 417.963427][T18870] loop6: detected capacity change from 0 to 256 [ 418.081296][ T5281] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.094764][ T5281] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.127752][ T5281] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.149290][T18870] FAT-fs (loop6): codepage cp1251 not found [ 418.199149][T18880] team0 (unregistering): Port device team_slave_0 removed [ 418.215986][T18880] team0 (unregistering): Port device team_slave_1 removed [ 418.421137][ T4599] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.981478][T18919] program syz.3.4586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.206268][T18929] loop0: detected capacity change from 0 to 512 [ 419.224306][T18929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.243036][T18929] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.296380][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.414445][T18954] xt_hashlimit: size too large, truncated to 1048576 [ 419.469821][T18960] loop0: detected capacity change from 0 to 512 [ 419.502498][T18960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 419.536323][T18960] EXT4-fs (loop0): 1 truncate cleaned up [ 419.559146][T18960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.581239][T18956] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.588635][T18956] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.607794][T18971] loop3: detected capacity change from 0 to 1024 [ 419.630874][T18971] EXT4-fs: Ignoring removed orlov option [ 419.654859][T18971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.671321][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.690446][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 419.690462][ T28] audit: type=1400 audit(1786043682.657:1023): avc: denied { write } for pid=18969 comm="syz.3.4606" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.732826][T18975] loop0: detected capacity change from 0 to 1024 [ 419.754799][T18956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.765470][T18956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.775891][T13917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.793344][T18975] EXT4-fs: Ignoring removed orlov option [ 419.834951][T18975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.848015][ T4599] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.858209][ T4599] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.873555][ T28] audit: type=1400 audit(1786043682.847:1024): avc: denied { write } for pid=18974 comm="syz.0.4607" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.898430][ T4599] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.909376][ T4599] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.944965][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.956688][ T28] audit: type=1326 audit(1786043682.937:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 419.983566][ T28] audit: type=1326 audit(1786043682.937:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 420.009899][ T28] audit: type=1326 audit(1786043682.947:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 420.036626][ T28] audit: type=1326 audit(1786043682.947:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 420.068533][ T28] audit: type=1326 audit(1786043682.947:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 420.094392][ T28] audit: type=1326 audit(1786043682.947:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 420.133040][ T28] audit: type=1326 audit(1786043682.947:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 420.159694][ T28] audit: type=1326 audit(1786043682.947:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18984 comm="syz.3.4613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9044e0d9 code=0x7ffc0000 [ 420.226453][T18988] loop2: detected capacity change from 0 to 4096 [ 420.324062][T19004] loop3: detected capacity change from 0 to 1024 [ 420.332764][T19004] EXT4-fs: Ignoring removed orlov option [ 420.341659][T18988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.366081][T18988] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 420.377971][T19004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.464576][T13917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.606913][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4625'. [ 420.941321][T13568] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 420.954058][T13568] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 420.977139][T13568] team0: Port device syz_tun removed [ 421.013766][T19031] program syz.3.4631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.054141][T19033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.066789][T19033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.373784][T19038] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.380958][T19038] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.388334][T19038] bridge_slave_0: entered allmulticast mode [ 421.395209][T19038] bridge_slave_0: entered promiscuous mode [ 421.402675][T19038] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.409828][T19038] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.417264][T19038] bridge_slave_1: entered allmulticast mode [ 421.424093][T19038] bridge_slave_1: entered promiscuous mode [ 421.448912][T19038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.461027][T19038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.492453][T19038] team0: Port device team_slave_0 added [ 421.499449][T19038] team0: Port device team_slave_1 added [ 421.527502][T19073] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 421.537074][T19038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.559289][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.592302][T19038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.620419][T19038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.627662][T19038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.661532][T19038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.751981][T19038] hsr_slave_0: entered promiscuous mode [ 421.772387][T19038] hsr_slave_1: entered promiscuous mode [ 421.789577][T19038] debugfs: 'hsr0' already exists in 'hsr' [ 421.797037][T19038] Cannot create hsr debugfs directory [ 421.984833][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4659'. [ 422.004856][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4659'. [ 422.049968][T19112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.061560][T19112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.064073][T19038] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 422.078669][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.086748][T19038] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 422.095953][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.103974][T19038] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 422.113207][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.121285][T19038] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 422.130961][T19038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.150900][T19038] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.158128][T19038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.165534][T19038] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.172649][T19038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.209422][T19038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.223182][ T5270] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.232362][ T5270] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.246710][T19038] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.258319][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.265476][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.276565][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.283707][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.381136][T19126] xt_hashlimit: size too large, truncated to 1048576 [ 422.898360][T19136] program syz.6.4664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.037171][T19153] loop6: detected capacity change from 0 to 1024 [ 423.045464][T19153] EXT4-fs: Ignoring removed orlov option [ 423.090356][T19153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.091490][T19161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4673'. [ 423.132322][T19038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.160326][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.293727][T19190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.333187][T19190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.377917][T19199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.398636][T19199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.425028][T19202] loop7: detected capacity change from 0 to 1024 [ 423.436798][T19202] EXT4-fs: Ignoring removed orlov option [ 423.466128][T19202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.546668][T19038] veth0_vlan: entered promiscuous mode [ 423.564765][T19038] veth1_vlan: entered promiscuous mode [ 423.607696][T19038] veth0_macvtap: entered promiscuous mode [ 423.621388][T19038] veth1_macvtap: entered promiscuous mode [ 423.738572][T19038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.747984][T19038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.782264][ T147] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.791335][ T147] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.289657][T19218] program syz.3.4690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.314673][ T147] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.323863][ T147] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.404638][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.541902][T19243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.612681][T19243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.679810][T19264] mmap: syz.8.4708 (19264) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 424.701367][T19243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.788641][T19243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.879090][ T4615] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.896674][ T4615] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.920684][ T4595] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.929426][ T4595] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.086485][T19306] loop0: detected capacity change from 0 to 1024 [ 425.093654][T19306] EXT4-fs: Ignoring removed orlov option [ 425.124691][T19306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.150476][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 425.150493][ T28] audit: type=1400 audit(1786043688.117:1205): avc: denied { write } for pid=19305 comm="syz.0.4724" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.433805][ T28] audit: type=1400 audit(1786043688.407:1206): avc: denied { read } for pid=19338 comm="syz.7.4738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.729895][ T28] audit: type=1326 audit(1786043688.697:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.766074][ T28] audit: type=1326 audit(1786043688.697:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.792371][ T28] audit: type=1326 audit(1786043688.697:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.818717][ T28] audit: type=1326 audit(1786043688.697:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.844772][ T28] audit: type=1326 audit(1786043688.697:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.872440][ T28] audit: type=1326 audit(1786043688.697:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.898805][ T28] audit: type=1326 audit(1786043688.697:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.928493][ T28] audit: type=1326 audit(1786043688.697:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19353 comm="syz.8.4743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782354e0d9 code=0x7ffc0000 [ 425.972961][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.194494][T19376] xt_hashlimit: size too large, truncated to 1048576 [ 426.689001][T19389] loop7: detected capacity change from 0 to 512 [ 426.701698][T19389] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 426.721544][T19389] EXT4-fs (loop7): 1 truncate cleaned up [ 426.728391][T19389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.800858][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.944335][T19409] vlan2: entered promiscuous mode [ 426.959373][T19409] bond0: entered promiscuous mode [ 426.977470][T19409] bond_slave_0: entered promiscuous mode [ 426.985939][T19409] bond_slave_1: entered promiscuous mode [ 427.029166][T19428] loop3: detected capacity change from 0 to 512 [ 427.045415][T19428] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 427.059495][T19428] EXT4-fs (loop3): 1 truncate cleaned up [ 427.076524][T19428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.224334][T13917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.268702][T19440] Cannot find add_set index 0 as target [ 427.394258][T19454] xt_hashlimit: size too large, truncated to 1048576 [ 427.702518][T19458] program syz.0.4783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.021215][T19474] loop7: detected capacity change from 0 to 512 [ 428.041407][T19474] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 428.067533][T19474] EXT4-fs (loop7): 1 truncate cleaned up [ 428.099709][T19474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.187026][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.694777][T19529] syzkaller0: entered promiscuous mode [ 428.700693][T19529] syzkaller0: entered allmulticast mode [ 428.985373][T19558] program syz.7.4826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.182788][T19584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.192911][T19584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.725096][T19460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.907618][T19661] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4871'. [ 432.265862][T19731] binfmt_misc: register: failed to install interpreter file ./file2 [ 432.274400][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 432.274415][ T28] audit: type=1400 audit(1786043695.247:1251): avc: denied { remount } for pid=19730 comm="syz.8.4905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 432.461678][T19761] program syz.0.4917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.522314][T19765] xt_hashlimit: size too large, truncated to 1048576 [ 432.614137][T19778] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 432.779817][T19795] loop0: detected capacity change from 0 to 512 [ 432.787368][T19795] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 432.799897][T19795] EXT4-fs (loop0): 1 truncate cleaned up [ 432.808169][T19795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.829481][ T28] audit: type=1400 audit(1786043695.797:1252): avc: denied { write } for pid=19794 comm="syz.0.4931" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 432.900132][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.104665][T19816] xt_hashlimit: size too large, truncated to 1048576 [ 433.303087][T19821] xt_hashlimit: size too large, truncated to 1048576 [ 433.800110][T19839] Cannot find add_set index 0 as target [ 433.852222][T19842] loop8: detected capacity change from 0 to 1024 [ 433.863849][T19842] EXT4-fs: Ignoring removed orlov option [ 433.899594][T19842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.915296][ T28] audit: type=1400 audit(1786043696.887:1253): avc: denied { write } for pid=19841 comm="syz.8.4950" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.583986][T19888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.593407][T19888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.081625][T19891] program syz.6.4968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.115350][T19038] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.206435][T19895] loop8: detected capacity change from 0 to 128 [ 435.213840][T19895] EXT4-fs: Ignoring removed orlov option [ 435.223183][T19895] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.237414][T19895] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.263591][ T28] audit: type=1400 audit(1786043698.237:1254): avc: denied { write } for pid=19894 comm="syz.8.4969" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.285868][ T28] audit: type=1400 audit(1786043698.237:1255): avc: denied { create } for pid=19894 comm="syz.8.4969" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 435.331341][ T28] audit: type=1400 audit(1786043698.307:1256): avc: denied { write } for pid=19894 comm="syz.8.4969" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.354266][ T28] audit: type=1400 audit(1786043698.337:1257): avc: denied { write } for pid=19894 comm="syz.8.4969" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.380242][ T28] audit: type=1400 audit(1786043698.337:1258): avc: denied { create } for pid=19894 comm="syz.8.4969" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 435.425991][ T28] audit: type=1400 audit(1786043698.357:1259): avc: denied { write } for pid=19894 comm="syz.8.4969" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.448176][ T28] audit: type=1400 audit(1786043698.357:1260): avc: denied { write } for pid=19894 comm="syz.8.4969" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.494170][T19905] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4973'. [ 435.511903][T19038] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.543871][T19911] 8021q: VLANs not supported on vcan0 [ 435.623829][T19919] program syz.7.4980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.931838][T19941] program syz.8.4991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.945577][T19942] 8021q: VLANs not supported on vcan0 [ 436.228858][T19968] program syz.6.5003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.368294][T19876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.819198][T20027] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5029'. [ 437.829430][T20027] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5029'. [ 438.812572][T20060] loop8: detected capacity change from 0 to 512 [ 438.887721][T20060] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.5043: inode has both inline data and extents flags [ 438.997287][T20060] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 438.998855][T20060] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5043: couldn't read orphan inode 15 (err -117) [ 439.008150][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 439.008168][ C1] EXT4-fs (loop8): initial error at time 1786043701: ext4_orphan_get:1399: inode 15 [ 439.008220][ C1] EXT4-fs (loop8): last error at time 1786043701: ext4_orphan_get:1399: inode 15 [ 439.139840][T20066] 8021q: VLANs not supported on vcan0 [ 439.153771][T20060] loop8: lost filesystem error report for type 5 error -117 [ 439.154505][T20060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.206198][T20070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5047'. [ 439.235346][T20070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5047'. [ 439.252743][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 439.252763][ T28] audit: type=1400 audit(1786043702.227:1262): avc: denied { write } for pid=20059 comm="syz.8.5043" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.288840][ T28] audit: type=1400 audit(1786043702.257:1263): avc: denied { mounton } for pid=20059 comm="syz.8.5043" path="/58/bus/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 439.341044][T20060] loop8: detected capacity change from 512 to 0 [ 439.341939][T20081] EXT4-fs error (device loop8): ext4_get_inode_loc:5024: inode #18: block 9: comm syz.8.5043: unable to read itable block [ 439.372130][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.380884][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.388226][T20081] EXT4-fs error (device loop8): ext4_get_inode_loc:5024: inode #18: block 9: comm syz.8.5043: unable to read itable block [ 439.401668][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.414039][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.421900][T20081] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: IO failure [ 439.431026][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.440110][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.447355][T20081] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #18: comm syz.8.5043: mark_inode_dirty error [ 439.459590][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.468309][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.475700][T20081] EXT4-fs error (device loop8): ext4_get_inode_loc:5024: inode #18: block 9: comm syz.8.5043: unable to read itable block [ 439.488770][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.497357][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.504429][T20081] EXT4-fs error (device loop8): ext4_get_max_inline_size:121: inode #18: comm syz.8.5043: can't get inode location 18 [ 439.517142][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.525652][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.532932][T20081] EXT4-fs error (device loop8): ext4_get_inode_loc:5024: inode #18: block 9: comm syz.8.5043: unable to read itable block [ 439.546471][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.555092][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.562723][T20081] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: IO failure [ 439.572131][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.580974][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.588030][T20081] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #18: comm syz.8.5043: mark_inode_dirty error [ 439.599871][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.613304][T20081] EXT4-fs (loop8): I/O error while writing superblock [ 439.620349][T20081] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.5043: Error while async write back metadata [ 439.633559][T20081] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 439.753599][T19038] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 439.991819][ T147] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.064539][ T147] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.658650][ T147] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.689608][T20124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.698832][T20124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.720225][ T147] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.838644][ T147] bridge_slave_1: left allmulticast mode [ 440.844561][ T147] bridge_slave_1: left promiscuous mode [ 440.859970][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.874641][ T147] bridge_slave_0: left allmulticast mode [ 440.880486][ T147] bridge_slave_0: left promiscuous mode [ 440.886748][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.974517][T20147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.983848][T20147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.008017][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.018438][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.028805][ T147] bond0 (unregistering): Released all slaves [ 441.070069][T20105] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.077340][T20105] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.086475][T20105] bridge_slave_0: entered allmulticast mode [ 441.093384][T20105] bridge_slave_0: entered promiscuous mode [ 441.104127][ T147] hsr_slave_0: left promiscuous mode [ 441.110145][ T147] hsr_slave_1: left promiscuous mode [ 441.116304][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.124260][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.132008][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.139550][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.151594][ T147] veth1_macvtap: left promiscuous mode [ 441.157286][ T147] veth0_macvtap: left promiscuous mode [ 441.163053][ T147] veth1_vlan: left promiscuous mode [ 441.168387][ T147] veth0_vlan: left promiscuous mode [ 441.188002][ T28] audit: type=1400 audit(1786043704.157:1264): avc: denied { write } for pid=20152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.233229][ T28] audit: type=1400 audit(1786043704.207:1265): avc: denied { write } for pid=20164 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.307291][ T147] team0 (unregistering): Port device team_slave_1 removed [ 441.322211][ T147] team0 (unregistering): Port device team_slave_0 removed [ 441.372732][T20105] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.380046][T20105] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.388999][T20105] bridge_slave_1: entered allmulticast mode [ 441.396077][T20105] bridge_slave_1: entered promiscuous mode [ 441.403520][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 441.441783][T20105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.453498][T20105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.475750][T20105] team0: Port device team_slave_0 added [ 441.482574][T20105] team0: Port device team_slave_1 added [ 441.567979][T20105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.568059][T20192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.568263][T20192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.591198][T20105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.642623][T20105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.656881][T20200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.666700][T20200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.676155][T20105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.692476][T20105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.699742][ T28] audit: type=1400 audit(1786043704.667:1266): avc: denied { write } for pid=20179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.719188][T20105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.856480][T20105] hsr_slave_0: entered promiscuous mode [ 441.879154][T20105] hsr_slave_1: entered promiscuous mode [ 441.886655][T20105] debugfs: 'hsr0' already exists in 'hsr' [ 441.893473][T20105] Cannot create hsr debugfs directory [ 442.315099][T20105] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 442.334292][T20211] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5093'. [ 442.344325][T20105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.366132][ T28] audit: type=1400 audit(1786043705.337:1267): avc: denied { write } for pid=20209 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.391222][T20105] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 442.417582][T20105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.439857][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 442.453978][T20105] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 442.513943][T20105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.533614][T20105] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 442.555926][T20232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.573295][T20105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.574159][T20232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.636001][T20245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.654041][T20245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.668186][T20105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.685573][T20105] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.696315][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.703452][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.716068][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.723373][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.834383][ T28] audit: type=1400 audit(1786043705.797:1268): avc: denied { write } for pid=20246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.890203][ T28] audit: type=1400 audit(1786043705.857:1269): avc: denied { write } for pid=20271 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.946591][ T28] audit: type=1400 audit(1786043705.917:1270): avc: denied { map } for pid=20276 comm="syz.6.5113" path="socket:[58770]" dev="sockfs" ino=58770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 442.947649][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 443.074539][T20105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.177721][ T28] audit: type=1400 audit(1786043706.147:1271): avc: denied { write } for pid=20284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.298181][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 443.316847][T20322] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 443.372235][T20332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.392582][T20332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.523637][T20105] veth0_vlan: entered promiscuous mode [ 443.553786][T20105] veth1_vlan: entered promiscuous mode [ 443.599252][T20105] veth0_macvtap: entered promiscuous mode [ 443.616583][T20105] veth1_macvtap: entered promiscuous mode [ 443.631232][T20105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.640753][T20105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.701116][ T5286] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.722075][ T5286] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.774476][ T4615] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.793027][ T4615] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.815183][T20362] 8021q: VLANs not supported on vcan0 [ 443.938816][T20376] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 444.226465][T20396] can0: slcan on ttyS3. [ 444.671621][T20396] can0 (unregistered): slcan off ttyS3. [ 444.781117][T20425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20425 comm=syz.0.5161 [ 444.851331][T20428] loop6: detected capacity change from 0 to 512 [ 444.870810][T20432] loop9: detected capacity change from 0 to 2048 [ 444.926837][T20432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.943718][T20445] loop7: detected capacity change from 0 to 128 [ 444.950149][T20443] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 444.958031][T20432] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.982832][T20445] EXT4-fs: Ignoring removed orlov option [ 445.003205][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 445.003224][ T28] audit: type=1400 audit(1786043707.967:1273): avc: denied { write } for pid=20431 comm="syz.9.5164" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.071936][T20445] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.085365][T20432] loop9: detected capacity change from 2048 to 64 [ 445.105717][T20445] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.126076][ T28] audit: type=1400 audit(1786043708.097:1274): avc: denied { write } for pid=20441 comm="syz.7.5168" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.167491][ T28] audit: type=1400 audit(1786043708.097:1275): avc: denied { write } for pid=20441 comm="syz.7.5168" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.190283][ T28] audit: type=1400 audit(1786043708.097:1276): avc: denied { write } for pid=20441 comm="syz.7.5168" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.212635][ T28] audit: type=1400 audit(1786043708.097:1277): avc: denied { write } for pid=20441 comm="syz.7.5168" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.246017][T18505] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.255734][T20105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.321365][T20440] kmmpd-loop9: attempt to access beyond end of device [ 445.321365][T20440] loop9: rw=8402945, sector=512, nr_sectors = 8 limit=64 [ 445.335228][T20440] buffer_io_error: 41 callbacks suppressed [ 445.335246][T20440] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 446.180126][T20498] serio: Serial port ptm0 [ 446.191282][T20500] loop0: detected capacity change from 0 to 128 [ 446.209476][T20500] EXT4-fs: Ignoring removed orlov option [ 446.241133][T20500] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.266994][T20500] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.280724][ T28] audit: type=1400 audit(1786043709.247:1278): avc: denied { write } for pid=20499 comm="syz.0.5192" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.315543][T14536] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.339550][ T28] audit: type=1400 audit(1786043709.277:1279): avc: denied { write } for pid=20499 comm="syz.0.5192" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.365419][ T28] audit: type=1400 audit(1786043709.277:1280): avc: denied { write } for pid=20499 comm="syz.0.5192" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.387951][ T28] audit: type=1400 audit(1786043709.277:1281): avc: denied { write } for pid=20499 comm="syz.0.5192" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.563444][T20528] loop3: detected capacity change from 0 to 128 [ 446.680078][T20535] loop7: detected capacity change from 0 to 512 [ 446.698400][T20535] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.5207: Unrecognised inode hash code 255 [ 446.710283][T20535] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5207: Corrupt directory, running e2fsck is recommended [ 446.743671][T20535] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 446.752097][T20535] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.5207: corrupted in-inode xattr: invalid ea_ino [ 446.765784][T20535] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 446.766064][T20535] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.5207: couldn't read orphan inode 15 (err -117) [ 446.775264][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 446.775284][ C0] EXT4-fs (loop7): initial error at time 1786043709: ext4_iget_extra_inode:5180: inode 15 [ 446.775332][ C0] EXT4-fs (loop7): last error at time 1786043709: ext4_iget_extra_inode:5180: inode 15 [ 446.813690][T20535] loop7: lost filesystem error report for type 5 error -117 [ 446.814411][T20535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.841728][T20535] EXT4-fs (loop7): shut down requested (2) [ 446.851869][ T28] audit: type=1400 audit(1786043709.827:1282): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 446.882012][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.454831][ T5270] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.964014][ T5270] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.981833][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5219'. [ 447.995408][T20568] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5219'. [ 448.006734][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5219'. [ 448.016156][T20568] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5219'. [ 448.058540][ T5270] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.080135][T20458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.124010][ T5270] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.190045][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5221'. [ 448.270681][ T5270] bridge_slave_1: left allmulticast mode [ 448.302902][ T5270] bridge_slave_1: left promiscuous mode [ 448.319817][ T5270] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.338732][ T5270] bridge_slave_0: left allmulticast mode [ 448.355553][ T5270] bridge_slave_0: left promiscuous mode [ 448.367732][ T5270] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.510273][ T5270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.527231][ T5270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.537536][ T5270] bond0 (unregistering): Released all slaves [ 448.548108][T20582] 8021q: VLANs not supported on vcan0 [ 448.558556][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 448.656569][ T5270] hsr_slave_0: left promiscuous mode [ 448.696654][ T5270] hsr_slave_1: left promiscuous mode [ 448.717038][ T5270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.744860][ T5270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.755942][ T5270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.770637][ T5270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.787070][T20610] loop3: detected capacity change from 0 to 128 [ 448.801034][ T5270] veth1_macvtap: left promiscuous mode [ 448.810783][ T5270] veth0_macvtap: left promiscuous mode [ 448.815731][T20610] EXT4-fs: Ignoring removed orlov option [ 448.825481][ T5270] veth1_vlan: left promiscuous mode [ 448.834884][ T5270] veth0_vlan: left promiscuous mode [ 448.860027][T20610] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.907151][T20610] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.989466][T13917] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.000678][ T5270] team0 (unregistering): Port device team_slave_1 removed [ 449.056941][ T5270] team0 (unregistering): Port device team_slave_0 removed [ 449.212947][T20655] loop6: detected capacity change from 0 to 128 [ 449.228742][T20655] EXT4-fs: Ignoring removed orlov option [ 449.249026][T20655] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 449.261487][T20555] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.268717][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.276179][T20555] bridge_slave_0: entered allmulticast mode [ 449.283227][T20555] bridge_slave_0: entered promiscuous mode [ 449.291393][T20555] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.298867][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.306206][T20555] bridge_slave_1: entered allmulticast mode [ 449.313009][T20555] bridge_slave_1: entered promiscuous mode [ 449.313944][T20655] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.363527][T20555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.400981][T15383] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.427315][T20555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.487595][T20679] xt_hashlimit: size too large, truncated to 1048576 [ 449.531504][T20555] team0: Port device team_slave_0 added [ 449.549111][T20555] team0: Port device team_slave_1 added [ 449.642963][T20555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.662428][T20555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.689537][T20555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.704154][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 449.712790][T20555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.719906][T20555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.787169][T20555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.930488][T20704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5253'. [ 450.307192][T20555] hsr_slave_0: entered promiscuous mode [ 450.499551][T20555] hsr_slave_1: entered promiscuous mode [ 450.505827][T20555] debugfs: 'hsr0' already exists in 'hsr' [ 450.511761][T20555] Cannot create hsr debugfs directory [ 450.873175][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 450.873207][ T28] audit: type=1400 audit(1786043713.847:1301): avc: denied { write } for pid=20705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.986546][ T28] audit: type=1400 audit(1786043713.957:1302): avc: denied { write } for pid=20725 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.077021][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 451.187333][T20738] netlink: 4548 bytes leftover after parsing attributes in process `syz.7.5261'. [ 451.458722][ T28] audit: type=1400 audit(1786043714.427:1303): avc: denied { write } for pid=20753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.267989][T20763] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5267'. [ 452.496275][ T28] audit: type=1400 audit(1786043715.467:1304): avc: denied { write } for pid=20768 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.675996][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 452.834790][T20555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 452.882187][T20555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.924550][T20555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.955150][T20799] loop6: detected capacity change from 0 to 128 [ 452.972291][T20555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.007178][T20555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 453.038359][T20555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.072289][T20555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 453.099630][T20555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.121512][ T28] audit: type=1400 audit(1786043715.997:1305): avc: denied { write } for pid=20782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.162924][ T28] audit: type=1400 audit(1786043716.067:1306): avc: denied { write } for pid=20808 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.227659][T20799] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 453.252267][T20814] can0: slcan on ttyS3. [ 453.303998][T20799] ext4 filesystem being mounted at /421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 453.365957][ T28] audit: type=1400 audit(1786043716.337:1307): avc: denied { setattr } for pid=20798 comm="syz.6.5277" path="/421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.420704][T20777] can0 (unregistered): slcan off ttyS3. [ 453.454473][T15383] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.535475][T20555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.558217][T20839] loop3: detected capacity change from 0 to 256 [ 453.565049][T20555] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.592685][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.599837][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.623520][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.630884][ T4599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.655605][T20555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.666828][ T28] audit: type=1400 audit(1786043716.637:1308): avc: denied { write } for pid=20819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.677323][T20555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.787468][ T28] audit: type=1400 audit(1786043716.757:1309): avc: denied { write } for pid=20857 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.830116][T20867] loop6: detected capacity change from 0 to 128 [ 453.848913][T20867] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 453.871552][T20867] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 453.927793][T15383] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.943956][T20875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.985980][T20875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.012587][T20555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.030379][T20859] loop0: detected capacity change from 0 to 4096 [ 454.097630][T20859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.112175][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5299'. [ 454.123785][ T28] audit: type=1400 audit(1786043717.097:1310): avc: denied { execute } for pid=20858 comm="syz.0.5293" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 454.147710][T20859] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 454.223329][T20555] veth0_vlan: entered promiscuous mode [ 454.233027][T20555] veth1_vlan: entered promiscuous mode [ 454.249630][T20555] veth0_macvtap: entered promiscuous mode [ 454.258018][T20555] veth1_macvtap: entered promiscuous mode [ 454.269208][T20555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.278268][T20555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.322001][ T4599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.322346][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.322390][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.322494][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.561210][T20932] loop7: detected capacity change from 0 to 128 [ 454.579086][T20932] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.665127][T20932] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 454.816806][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.103675][T18505] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.319938][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5309'. [ 455.485077][T20999] 8021q: VLANs not supported on vcan0 [ 455.549411][T21006] can0: slcan on ttyS3. [ 455.695689][T20995] loop1: detected capacity change from 0 to 4096 [ 455.712123][T20995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.725269][T21006] can0 (unregistered): slcan off ttyS3. [ 455.757160][T20995] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 455.799805][T21033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5328'. [ 456.201901][T21041] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5330'. [ 456.379294][T20555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.470047][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 456.470065][ T28] audit: type=1400 audit(1786043719.437:1324): avc: denied { write } for pid=21032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.529204][ T28] audit: type=1400 audit(1786043719.497:1325): avc: denied { write } for pid=21052 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.673716][T21076] loop6: detected capacity change from 0 to 128 [ 456.691441][T21076] EXT4-fs: Ignoring removed orlov option [ 456.741201][T21076] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.767096][ T28] audit: type=1400 audit(1786043719.727:1326): avc: denied { write } for pid=21059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.806543][T21076] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.880225][ T28] audit: type=1400 audit(1786043719.827:1327): avc: denied { write } for pid=21073 comm="syz.6.5338" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.909734][T15383] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.922583][ T28] audit: type=1400 audit(1786043719.837:1328): avc: denied { write } for pid=21073 comm="syz.6.5338" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.947359][ T28] audit: type=1400 audit(1786043719.837:1329): avc: denied { write } for pid=21073 comm="syz.6.5338" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.972507][ T28] audit: type=1400 audit(1786043719.837:1330): avc: denied { write } for pid=21073 comm="syz.6.5338" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.996178][ T28] audit: type=1400 audit(1786043719.847:1331): avc: denied { write } for pid=21094 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.039631][T21087] loop7: detected capacity change from 0 to 4096 [ 457.077279][T21087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 457.106143][T21087] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 457.284757][ T28] audit: type=1400 audit(1786043720.257:1332): avc: denied { write } for pid=21098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.364486][ T28] audit: type=1400 audit(1786043720.337:1333): avc: denied { write } for pid=21125 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.663733][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.882048][T21168] loop7: detected capacity change from 0 to 1024 [ 457.906486][T21168] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 457.951919][T21168] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.5359: lblock 2 mapped to illegal pblock 2 (length 1) [ 458.015108][T21168] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 458.016508][T21168] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.5359: lblock 0 mapped to illegal pblock 48 (length 1) [ 458.025742][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 458.025786][ C0] EXT4-fs (loop7): initial error at time 1786043720: ext4_map_blocks:791: inode 3: block 2 [ 458.025834][ C0] EXT4-fs (loop7): last error at time 1786043720: ext4_map_blocks:791: inode 3: block 2 [ 458.066906][T21168] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 458.099116][T21168] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.5359: Failed to acquire dquot type 0 [ 458.148558][T21168] loop7: lost filesystem error report for type 5 error -117 [ 458.148767][T21168] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 458.169590][T21168] loop7: lost filesystem error report for type 5 error -117 [ 458.169729][T21168] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.5359: mark_inode_dirty error [ 458.218855][T21168] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 458.220136][T21168] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 458.250130][T21168] EXT4-fs (loop7): 1 orphan inode deleted [ 458.262168][T21168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.282925][ T147] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 458.297602][ T147] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 458.369031][ T147] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 458.970954][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.985197][T18505] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 458.998515][T18505] loop7: lost filesystem error report for type 5 error -117 [ 458.998641][T18505] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 459.002874][T21224] loop0: detected capacity change from 0 to 128 [ 459.007854][T18505] loop7: lost filesystem error report for type 5 error -117 [ 459.042026][T21224] EXT4-fs: Ignoring removed orlov option [ 459.062760][T18505] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 459.081795][T18505] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 459.146293][T21224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 459.196939][T21224] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.215430][T21245] loop6: detected capacity change from 0 to 128 [ 459.248507][T14536] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.159481][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5396'. [ 460.240668][ T147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.270765][ T5281] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.280956][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5396'. [ 460.290270][T21311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5397'. [ 460.308911][ T5281] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.340646][ T5281] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.379197][T21314] can0: slcan on ttyS3. [ 460.555618][T21342] 8021q: VLANs not supported on vcan0 [ 461.140891][T21292] can0 (unregistered): slcan off ttyS3. [ 461.533750][T21373] loop1: detected capacity change from 0 to 1024 [ 461.633327][T21373] EXT4-fs: inline encryption not supported [ 461.651353][T21373] EXT4-fs: Ignoring removed bh option [ 461.669771][T21373] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 461.709538][T21373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.778928][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 461.778949][ T28] audit: type=1400 audit(1786043724.747:1353): avc: denied { write } for pid=21372 comm="syz.1.5413" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 461.865388][ T28] audit: type=1400 audit(1786043724.797:1354): avc: denied { map } for pid=21372 comm="syz.1.5413" path="/24/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 461.866047][T21405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.892805][ T28] audit: type=1400 audit(1786043724.817:1355): avc: denied { write } for pid=21375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.922575][T20555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.935381][T21405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.960827][ T28] audit: type=1400 audit(1786043724.927:1356): avc: denied { write } for pid=21408 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.393177][T21426] can0: slcan on ttyS3. [ 462.500843][T21426] can0 (unregistered): slcan off ttyS3. [ 462.953389][T21446] loop0: detected capacity change from 0 to 128 [ 462.983557][T21446] EXT4-fs: Ignoring removed orlov option [ 463.029259][T21446] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.044043][T21464] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 463.063091][T21446] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.105245][ T28] audit: type=1400 audit(1786043726.077:1357): avc: denied { write } for pid=21443 comm="syz.0.5432" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.174574][T14536] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.210859][ T28] audit: type=1400 audit(1786043726.107:1358): avc: denied { write } for pid=21443 comm="syz.0.5432" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.243328][T21479] loop0: detected capacity change from 0 to 256 [ 464.125500][ T28] audit: type=1400 audit(1786043727.097:1359): avc: denied { write } for pid=21502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.163108][ T28] audit: type=1400 audit(1786043727.137:1360): avc: denied { write } for pid=21513 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.844323][ T28] audit: type=1400 audit(1786043728.817:1361): avc: denied { write } for pid=21532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.878275][ T28] audit: type=1400 audit(1786043728.847:1362): avc: denied { write } for pid=21548 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.972361][T21452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.031572][T21558] loop7: detected capacity change from 0 to 256 [ 466.297090][T21567] vlan2: entered allmulticast mode [ 466.302388][T21567] veth0_vlan: entered allmulticast mode [ 466.781938][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 466.878413][T21590] loop0: detected capacity change from 0 to 256 [ 466.903486][T21591] loop7: detected capacity change from 0 to 7 [ 467.035676][T21596] loop1: detected capacity change from 0 to 1024 [ 467.052127][T21596] EXT4-fs: Ignoring removed orlov option [ 467.064351][T21596] EXT4-fs: Ignoring removed nobh option [ 467.110927][T21596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.147947][ T28] audit: type=1400 audit(1786043730.117:1363): avc: denied { setattr } for pid=21595 comm="syz.1.5475" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.249166][T20555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.488017][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5479'. [ 467.950473][T21618] loop6: detected capacity change from 0 to 256 [ 468.168207][T21634] loop6: detected capacity change from 0 to 128 [ 468.830941][ T28] audit: type=1400 audit(1786043731.807:1364): avc: denied { ioctl } for pid=21653 comm="syz.0.5496" path="net:[4026532373]" dev="nsfs" ino=4026532373 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 468.872896][T21656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.881948][T21656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.966229][T21662] can0: slcan on ttyS3. [ 468.984830][T21664] 8021q: VLANs not supported on vcan0 [ 469.000870][T21662] can0 (unregistered): slcan off ttyS3. [ 469.209208][T21679] loop6: detected capacity change from 0 to 128 [ 469.329469][T21667] loop7: detected capacity change from 0 to 7 [ 470.020116][T21679] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.241199][T21679] ext4 filesystem being mounted at /478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 470.427655][T15383] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.443100][ T28] audit: type=1400 audit(1786043733.417:1365): avc: denied { audit_write } for pid=21691 comm="syz.1.5510" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 470.472530][ T28] audit: type=1107 audit(1786043733.417:1366): pid=21691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 470.536856][T21702] can0: slcan on ttyS3. [ 470.610851][T21702] can0 (unregistered): slcan off ttyS3. [ 471.954368][T21749] loop6: detected capacity change from 0 to 256 [ 472.057988][T21757] loop7: detected capacity change from 0 to 128 [ 472.078878][T21757] EXT4-fs: Ignoring removed orlov option [ 472.096760][T21757] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.112972][T21757] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.138135][ T28] audit: type=1400 audit(1786043735.107:1367): avc: denied { write } for pid=21756 comm="syz.7.5532" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.171635][ T28] audit: type=1400 audit(1786043735.147:1368): avc: denied { write } for pid=21756 comm="syz.7.5532" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.201524][ T28] audit: type=1400 audit(1786043735.147:1369): avc: denied { write } for pid=21756 comm="syz.7.5532" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 472.250924][T18505] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 472.390842][ T28] audit: type=1400 audit(1786043735.337:1370): avc: denied { write } for pid=21709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.511018][ T28] audit: type=1400 audit(1786043735.407:1371): avc: denied { write } for pid=21775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.637642][T21795] loop1: detected capacity change from 0 to 128 [ 472.691335][ T28] audit: type=1400 audit(1786043735.667:1372): avc: denied { write } for pid=21786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.747345][ T28] audit: type=1400 audit(1786043735.707:1373): avc: denied { write } for pid=21804 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.104067][T21817] xt_hashlimit: size too large, truncated to 1048576 [ 473.477597][ T28] audit: type=1400 audit(1786043736.447:1374): avc: denied { bind } for pid=21824 comm="syz.7.5550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 473.501457][ T28] audit: type=1400 audit(1786043736.447:1375): avc: denied { name_bind } for pid=21824 comm="syz.7.5550" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 473.526959][ T28] audit: type=1400 audit(1786043736.447:1376): avc: denied { node_bind } for pid=21824 comm="syz.7.5550" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 473.994155][ T28] audit: type=1400 audit(1786043736.967:1377): avc: denied { write } for pid=21766 comm="syz.3.5536" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 474.032290][T21828] can0: slcan on ttyS3. [ 474.120813][T21828] can0 (unregistered): slcan off ttyS3. [ 474.368441][T21854] loop1: detected capacity change from 0 to 2048 [ 474.397338][T21854] EXT4-fs: Ignoring removed oldalloc option [ 474.424556][T21860] loop7: detected capacity change from 0 to 512 [ 474.456575][T21854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.492959][T21860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.507935][T21854] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.520083][T21860] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.553701][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.942435][T21911] loop6: detected capacity change from 0 to 4096 [ 475.968981][T21911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 475.992883][T21911] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 476.604964][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.142839][T20555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.263522][T21915] can0: slcan on ttyS3. [ 477.310830][T21915] can0 (unregistered): slcan off ttyS3. [ 477.373304][T21927] loop1: detected capacity change from 0 to 128 [ 477.867445][T21937] loop0: detected capacity change from 0 to 256 [ 479.078036][ T11] hid_parser_main: 40 callbacks suppressed [ 479.078055][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 479.093541][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 479.132676][ T11] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 479.421914][T21964] fido_id[21964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 479.964405][T21971] can0: slcan on ttyS3. [ 480.080994][T21971] can0 (unregistered): slcan off ttyS3. [ 480.414913][T21983] loop7: detected capacity change from 0 to 256 [ 480.600509][T21989] can0: slcan on ttyS3. [ 481.140678][T21990] can0 (unregistered): slcan off ttyS3. [ 481.612561][T22002] loop0: detected capacity change from 0 to 512 [ 482.967425][T22002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.988777][T22002] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.045518][T22026] can0: slcan on ttyS3. [ 483.154474][T22029] netlink: 'syz.3.5596': attribute type 4 has an invalid length. [ 483.273302][T22031] netlink: 'syz.3.5596': attribute type 4 has an invalid length. [ 483.464414][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 483.464444][ T28] audit: type=1400 audit(1786043746.437:1387): avc: denied { write } for pid=22001 comm="syz.0.5591" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.466352][T22002] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters [ 483.494081][ T28] audit: type=1400 audit(1786043746.437:1388): avc: denied { create } for pid=22001 comm="syz.0.5591" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 483.547575][T22002] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 483.570704][T22026] can0 (unregistered): slcan off ttyS3. [ 483.585353][T14536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.602570][T22033] loop6: detected capacity change from 0 to 512 [ 483.640056][T22037] loop0: detected capacity change from 0 to 256 [ 483.649825][T22033] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.5597: dx entry: limit 1024 != root limit 124 [ 483.726676][T22033] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5597: Corrupt directory, running e2fsck is recommended [ 483.740748][T22033] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 483.749534][T22033] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.5597: corrupted in-inode xattr: invalid ea_ino [ 483.763107][T22033] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 483.763579][T22033] EXT4-fs (loop6): Remounting filesystem read-only [ 483.772743][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 483.772771][ C1] EXT4-fs (loop6): initial error at time 1786043746: ext4_iget_extra_inode:5180: inode 15 [ 483.772803][ C1] EXT4-fs (loop6): last error at time 1786043746: ext4_iget_extra_inode:5180: inode 15 [ 483.806247][T22033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.819287][T22043] loop1: detected capacity change from 0 to 128 [ 483.836147][T22033] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.5597: dx entry: limit 1024 != root limit 124 [ 483.848542][T22033] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.5597: Corrupt directory, running e2fsck is recommended [ 483.869445][ T28] audit: type=1400 audit(1786043746.837:1389): avc: denied { write } for pid=22032 comm="syz.6.5597" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.986510][T15383] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.127011][T22053] loop3: detected capacity change from 0 to 4096 [ 484.184902][T22053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.208748][ T28] audit: type=1400 audit(1786043747.177:1390): avc: denied { write } for pid=22051 comm="syz.3.5605" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.232221][T13917] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.301528][T22068] futex_wake_op: syz.0.5609 tries to shift op by 144; fix this program [ 484.768537][T22064] can0: slcan on ttyS3. [ 484.978570][T22078] loop7: detected capacity change from 0 to 256 [ 485.040914][T22064] can0 (unregistered): slcan off ttyS3. [ 485.232536][T22082] loop1: detected capacity change from 0 to 128 [ 485.578266][T22097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5622'. [ 485.637742][T22103] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.645125][T22103] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.539645][T22113] loop3: detected capacity change from 0 to 256 [ 486.882568][T22117] loop3: detected capacity change from 0 to 128 [ 486.985941][T22119] can0: slcan on ttyS3. [ 487.100706][T22119] can0 (unregistered): slcan off ttyS3. [ 487.124483][ T28] audit: type=1326 audit(1786043750.097:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22124 comm="syz.1.5631" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c974e0d9 code=0x0 [ 488.252290][ T28] audit: type=1400 audit(1786043750.537:1392): avc: denied { watch watch_reads } for pid=22142 comm="syz.3.5638" path="/562" dev="tmpfs" ino=2974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 488.318915][T22152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.348088][T22152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.505243][T22158] loop7: detected capacity change from 0 to 256 [ 488.693587][T22161] can0: slcan on ttyS3. [ 488.705393][T22158] FAT-fs (loop7): data area starts beyond volume (32 > 0) [ 488.816499][T22158] FAT-fs (loop7): Can't find a valid FAT filesystem [ 489.071005][T22161] can0 (unregistered): slcan off ttyS3. [ 489.086285][T22165] loop0: detected capacity change from 0 to 128 [ 489.149855][T22170] loop1: detected capacity change from 0 to 512 [ 489.156854][T22170] EXT4-fs: Ignoring removed i_version option [ 489.171113][T22170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 489.271783][T22170] EXT4-fs (loop1): 1 truncate cleaned up [ 489.383466][T22170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.413803][ T28] audit: type=1400 audit(1786043752.387:1393): avc: denied { write } for pid=22168 comm="syz.1.5648" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.588351][ T5281] Bluetooth: hci0: Frame reassembly failed (-84) [ 489.601332][ T28] audit: type=1400 audit(1786043752.577:1394): avc: denied { ioctl } for pid=22183 comm="syz.0.5654" path="socket:[64858]" dev="sockfs" ino=64858 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 489.721744][T20555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.794583][T22190] loop6: detected capacity change from 0 to 256 [ 489.920162][T22198] loop6: detected capacity change from 0 to 128 [ 489.986486][T22200] loop6: detected capacity change from 0 to 128 [ 490.005314][T22200] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.026235][T22200] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.039954][ T28] audit: type=1400 audit(1786043753.017:1395): avc: denied { write } for pid=22199 comm="syz.6.5661" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.076751][T15383] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 490.466809][T22207] loop7: detected capacity change from 0 to 1024 [ 491.232051][T22207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.258049][T22220] loop1: detected capacity change from 0 to 256 [ 491.517710][ T28] audit: type=1400 audit(1786043754.477:1396): avc: denied { write } for pid=22206 comm="syz.7.5665" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.587009][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.641790][ T8606] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 491.648010][T22185] Bluetooth: hci0: command 0x1003 tx timeout [ 491.683815][T22184] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 491.730018][T22237] loop6: detected capacity change from 0 to 128 [ 492.897779][T22268] loop7: detected capacity change from 0 to 256 [ 493.020340][T22274] loop7: detected capacity change from 0 to 512 [ 493.041754][T22266] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 493.075319][T22274] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 493.095060][T22274] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 493.110684][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 493.117239][ C1] EXT4-fs (loop7): initial error at time 1786043756: ext4_mb_generate_buddy:1317 [ 493.126440][ C1] EXT4-fs (loop7): last error at time 1786043756: ext4_mb_generate_buddy:1317 [ 493.159311][T22274] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5687: attempt to clear invalid blocks 2 len 1 [ 493.207374][T22274] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 493.207639][T22274] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5687: invalid indirect mapped block 1819239214 (level 0) [ 493.260121][T22274] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 493.285752][T22266] ================================================================== [ 493.303094][T22266] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 493.310268][T22266] [ 493.312624][T22266] write to 0xffff88811c709a5a of 2 bytes by task 22287 on cpu 1: [ 493.320371][T22266] fat16_ent_put+0x28/0x60 [ 493.324826][T22266] fat_alloc_clusters+0x55e/0xc40 [ 493.329884][T22266] fat_get_block+0x252/0x5e0 [ 493.334514][T22266] __block_write_begin_int+0x400/0xf90 [ 493.340012][T22266] cont_write_begin+0x5bf/0x920 [ 493.344936][T22266] fat_write_begin+0x52/0xe0 [ 493.349555][T22266] generic_perform_write+0x186/0x490 [ 493.354870][T22266] __generic_file_write_iter+0x9e/0x120 [ 493.360446][T22266] generic_file_write_iter+0x77/0x1f0 [ 493.365842][T22266] __kernel_write_iter+0x30f/0x590 [ 493.370980][T22266] dump_user_range+0xa73/0xd00 [ 493.375790][T22266] elf_core_dump+0x21c0/0x2340 [ 493.380607][T22266] coredump_write+0xaf9/0xdd0 [ 493.385322][T22266] vfs_coredump+0x2770/0x3290 [ 493.390036][T22266] get_signal+0xd33/0xf10 [ 493.394398][T22266] arch_do_signal_or_restart+0x96/0x480 [ 493.399974][T22266] irqentry_exit+0x14d/0x610 [ 493.404607][T22266] asm_exc_page_fault+0x26/0x30 [ 493.409492][T22266] [ 493.409501][T22266] read to 0xffff88811c709a00 of 512 bytes by task 22266 on cpu 0: [ 493.414004][T22274] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5687: invalid indirect mapped block 1819239214 (level 1) [ 493.420012][T22266] fat_mirror_bhs+0x1df/0x330 [ 493.438636][T22266] fat_ent_write+0xd0/0xe0 [ 493.443108][T22266] fat_chain_add+0x174/0x4a0 [ 493.447846][T22266] fat_get_block+0x468/0x5e0 [ 493.452499][T22266] __block_write_begin_int+0x400/0xf90 [ 493.458024][T22266] cont_write_begin+0x5bf/0x920 [ 493.460423][T22274] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 493.462927][T22266] fat_write_begin+0x52/0xe0 [ 493.462956][T22266] cont_write_begin+0x18d/0x920 [ 493.481541][T22266] fat_write_begin+0x52/0xe0 [ 493.486163][T22266] generic_cont_expand_simple+0xb0/0x150 [ 493.491834][T22266] fat_cont_expand+0x3e/0x170 [ 493.496554][T22266] fat_setattr+0x2a4/0x850 [ 493.501011][T22266] notify_change+0x842/0x8c0 [ 493.505638][T22266] do_ftruncate+0x344/0x410 [ 493.510249][T22266] __x64_sys_ftruncate+0x65/0xc0 [ 493.515316][T22266] x64_sys_call+0x2beb/0x3020 [ 493.520121][T22266] do_syscall_64+0x136/0x3c0 [ 493.524837][T22266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.530765][T22266] [ 493.533110][T22266] Reported by Kernel Concurrency Sanitizer on: [ 493.539279][T22266] CPU: 0 UID: 0 PID: 22266 Comm: syz.0.5683 Not tainted syzkaller #0 PREEMPT(lazy) [ 493.548686][T22266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.558771][T22266] ================================================================== [ 493.722380][T22274] EXT4-fs (loop7): 1 truncate cleaned up [ 493.734897][T22290] can0: slcan on ttyS3. [ 493.742331][T22274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.758490][T22274] EXT4-fs error (device loop7): ext4_lookup:1782: inode #2: comm syz.7.5687: 'file1' linked to parent dir [ 493.794525][T18505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.878957][ T28] audit: type=1400 audit(1786043756.847:1397): avc: denied { write } for pid=22292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.933595][ T28] audit: type=1400 audit(1786043756.887:1398): avc: denied { write } for pid=22303 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.330731][T22288] can0 (unregistered): slcan off ttyS3. [ 494.430864][ T28] audit: type=1400 audit(1786043757.397:1399): avc: denied { write } for pid=22305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.473973][ T28] audit: type=1400 audit(1786043757.447:1400): avc: denied { write } for pid=22316 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.582492][ T28] audit: type=1400 audit(1786043757.557:1401): avc: denied { write } for pid=22318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.629376][ T28] audit: type=1400 audit(1786043757.587:1402): avc: denied { write } for pid=22329 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1