last executing test programs: 1m9.476428444s ago: executing program 1 (id=1311): setfsgid(0xee00) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/3\x00') 1m9.433733076s ago: executing program 1 (id=1312): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0x7, 0x4) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xb, 0x29, 0x2, {0x2}}, 0xb) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) recvmsg$inet_nvme(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2) 1m9.411440218s ago: executing program 1 (id=1314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m9.340907392s ago: executing program 1 (id=1315): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nombcache}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@errors_remount}, {@usrjquota}, {@acl}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$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") socket$inet6(0xa, 0x2, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 1m9.265511606s ago: executing program 1 (id=1316): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@private1, @local}) 1m9.065812838s ago: executing program 1 (id=1321): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa0022, r1}) 1m9.02736901s ago: executing program 32 (id=1321): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa0022, r1}) 52.694171996s ago: executing program 3 (id=1754): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.653518187s ago: executing program 3 (id=1775): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 51.43166256s ago: executing program 3 (id=1781): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 50.459545206s ago: executing program 3 (id=1791): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nombcache}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@errors_remount}, {@usrjquota}, {@acl}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$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") socket$inet6(0xa, 0x2, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 50.22786774s ago: executing program 3 (id=1795): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) capset(0x0, 0x0) 49.937450267s ago: executing program 3 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x802) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 49.936050237s ago: executing program 33 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x802) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 3.591121933s ago: executing program 6 (id=2751): unshare(0x24060400) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) 3.584560453s ago: executing program 0 (id=2752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x100}, 0x0) 3.502431957s ago: executing program 0 (id=2755): setrlimit(0x40000000000008, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb33}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x40000) 3.409374433s ago: executing program 6 (id=2759): r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) 3.406680553s ago: executing program 0 (id=2760): r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 3.258262372s ago: executing program 0 (id=2761): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x5c, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x8af, 0x7, 0x2, 0x401, 0x7fffffff}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814) 3.166486857s ago: executing program 0 (id=2772): ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 2.285192598s ago: executing program 6 (id=2779): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 1.767319468s ago: executing program 2 (id=2786): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 1.700949872s ago: executing program 2 (id=2787): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x4000002) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) 1.617224876s ago: executing program 2 (id=2789): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$inet6(r1, 0x0, 0x0, 0x80000) 1.616879337s ago: executing program 2 (id=2790): r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) 1.532212002s ago: executing program 5 (id=2791): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0xe}, 0x10400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x20000000000000db, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.356156632s ago: executing program 6 (id=2792): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3}}, 0x0, 0x4}, 0x94) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1.281591416s ago: executing program 5 (id=2793): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="d546", 0x2) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0x1}], 0x1) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40002002, 0x0) close(r0) 1.281288116s ago: executing program 6 (id=2794): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x6) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xc4) getdents64(r2, &(0x7f0000000340)=""/244, 0xf4) getdents64(r2, 0x0, 0x57) 1.237442679s ago: executing program 5 (id=2795): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.230304689s ago: executing program 6 (id=2796): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x8d0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x1, 0x1}, 0x4) 1.165448293s ago: executing program 5 (id=2798): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 1.108031436s ago: executing program 5 (id=2800): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) epoll_pwait(r1, &(0x7f0000000580)=[{}], 0x1, 0xcab, 0x0, 0x0) 1.091557997s ago: executing program 5 (id=2801): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.001756312s ago: executing program 4 (id=2805): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup3(r2, r1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0}}], 0x1, 0x810) 977.093804ms ago: executing program 4 (id=2806): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000002240)='./file1\x00', 0xc004, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64, @ANYBLOB="1b742fa579e3655868a62360590e954d4a3e"], 0x1, 0x2c7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 794.462034ms ago: executing program 4 (id=2807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000b40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1) 122.826183ms ago: executing program 0 (id=2808): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 122.652823ms ago: executing program 2 (id=2809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 122.559853ms ago: executing program 4 (id=2810): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff02000000000000000000000000000178ff"], 0xfdef) 32.589329ms ago: executing program 4 (id=2811): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) epoll_pwait(r1, &(0x7f0000000580)=[{}], 0x1, 0xcab, 0x0, 0x0) 31.981439ms ago: executing program 2 (id=2812): r0 = memfd_create(&(0x7f00000000c0)='\xe1Ro\x1b\xf8@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x009\xb7\xa8\x818\xf8\x8d\xf0w\xe4t\xd7\xc6\x8c\xb3\xd5\xf7\xaf\x9f\x803\xf7\xd5\xef\x97mZ\xc0\xd4\x83\xa8)\xd6u3\xd5\xa0\x8cV\x9cM!\x1c\xd0\x7f\f\xc5\xe2\x19D\xe2\xa0\n\"\xc7\xab\xf9ZXPP\x8f\x81\x81\x82/\x89\xf7\xa0q0&', 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x4) 0s ago: executing program 4 (id=2813): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): romiscuous mode [ 91.590571][ T6679] veth1_macvtap: entered promiscuous mode [ 91.603560][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.616695][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.624851][ T6905] delete_channel: no stack [ 91.646742][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 91.682470][ T1651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.705360][ T1651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708882][ T6914] loop4: detected capacity change from 0 to 512 [ 91.714644][ T1651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.766149][ T1651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.780369][ T6920] loop2: detected capacity change from 0 to 512 [ 91.789377][ T6914] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1381: inode has both inline data and extents flags [ 91.845673][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.897496][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 91.912926][ T6914] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1381: couldn't read orphan inode 15 (err -117) [ 91.927691][ T6920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.939235][ T6933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1387'. [ 91.955465][ T6920] EXT4-fs (loop2): shut down requested (1) [ 91.970942][ T6914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.997034][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1391'. [ 92.025620][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.061375][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.116444][ T6947] loop2: detected capacity change from 0 to 128 [ 92.152785][ T6947] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.192500][ T6947] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.224197][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 92.271480][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.385822][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 92.499020][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1406'. [ 92.511721][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 92.594728][ T6994] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 92.637908][ T6999] loop0: detected capacity change from 0 to 128 [ 92.651113][ T6999] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.663977][ T6999] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.709236][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.908155][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 92.922301][ T2594] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.114565][ T7040] batadv_slave_1: entered promiscuous mode [ 93.122208][ T7038] batadv_slave_1: left promiscuous mode [ 93.152206][ T7042] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 93.210133][ T7049] loop0: detected capacity change from 0 to 512 [ 93.217385][ T7049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.238233][ T7049] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1429: inode has both inline data and extents flags [ 93.252063][ T7049] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1429: couldn't read orphan inode 15 (err -117) [ 93.266813][ T7049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.303786][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.394957][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 93.422921][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 93.560632][ T7088] batadv_slave_1: entered promiscuous mode [ 93.580011][ T7086] batadv_slave_1: left promiscuous mode [ 93.642630][ T7097] loop5: detected capacity change from 0 to 512 [ 93.658174][ T7097] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 93.669852][ T7097] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1447: inode has both inline data and extents flags [ 93.683623][ T7097] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1447: couldn't read orphan inode 15 (err -117) [ 93.705497][ T7097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.754923][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.762136][ T7106] netlink: 'syz.3.1451': attribute type 1 has an invalid length. [ 93.772313][ T7106] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1451'. [ 93.835451][ T1651] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.847462][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 93.847546][ T29] audit: type=1400 audit(1769827237.725:656): avc: denied { ioctl } for pid=7109 comm="syz.5.1450" path="socket:[16883]" dev="sockfs" ino=16883 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.949323][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 93.983511][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 94.029064][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 94.074940][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 94.084102][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 94.093069][ T7130] netlink: 'syz.4.1462': attribute type 7 has an invalid length. [ 94.153592][ T824] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.162698][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 94.171819][ T7130] netlink: 'syz.4.1462': attribute type 7 has an invalid length. [ 94.180334][ T824] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.205195][ T824] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.224532][ T824] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.836599][ T29] audit: type=1326 audit(1769827238.705:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff04e8aeb9 code=0x7ffc0000 [ 94.860134][ T29] audit: type=1326 audit(1769827238.705:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7eff04e8aeb9 code=0x7ffc0000 [ 94.883596][ T29] audit: type=1326 audit(1769827238.705:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff04e8aeb9 code=0x7ffc0000 [ 94.907019][ T29] audit: type=1326 audit(1769827238.705:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7159 comm="syz.3.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff04e8aeb9 code=0x7ffc0000 [ 95.024248][ T7176] loop3: detected capacity change from 0 to 256 [ 95.047736][ T7172] loop4: detected capacity change from 0 to 128 [ 95.068725][ T7172] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 95.311917][ T7188] loop4: detected capacity change from 0 to 8192 [ 95.326472][ T7188] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.582152][ T7214] loop4: detected capacity change from 0 to 128 [ 95.606046][ T7216] loop2: detected capacity change from 0 to 512 [ 95.661663][ T7216] EXT4-fs (loop2): 1 orphan inode deleted [ 95.675198][ T3460] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.685198][ T3460] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 95.697275][ T7216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.718645][ T7226] loop0: detected capacity change from 0 to 512 [ 95.727080][ T7216] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.759706][ T7226] EXT4-fs: Ignoring removed orlov option [ 95.782683][ T7226] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 95.796016][ T7226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 95.804383][ T7226] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1502: corrupted in-inode xattr: e_value size too large [ 95.852439][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.863467][ T7231] loop4: detected capacity change from 0 to 512 [ 95.867596][ T7226] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1502: couldn't read orphan inode 15 (err -117) [ 95.892074][ T7231] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.903614][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 95.904101][ T7226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.925081][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.941170][ T7231] EXT4-fs (loop4): 1 truncate cleaned up [ 95.947637][ T7231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.972926][ T7231] SELinux: policydb table sizes (-1,0) do not match mine (8,7) [ 95.981000][ T7231] SELinux: failed to load policy [ 95.986962][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.012191][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.041479][ T29] audit: type=1400 audit(1769827239.905:661): avc: denied { bind } for pid=7235 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.061376][ T29] audit: type=1400 audit(1769827239.905:662): avc: denied { listen } for pid=7235 comm="syz.2.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.144355][ T7249] loop0: detected capacity change from 0 to 128 [ 96.172064][ T7249] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.227267][ T29] audit: type=1400 audit(1769827240.095:663): avc: denied { execute } for pid=7254 comm="syz.2.1516" path="/316/cpu.stat" dev="tmpfs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.250348][ T29] audit: type=1400 audit(1769827240.095:664): avc: denied { create } for pid=7254 comm="syz.2.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.663381][ T7299] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 96.671216][ T7299] netlink: 'syz.2.1537': attribute type 4 has an invalid length. [ 97.056208][ T7339] loop5: detected capacity change from 0 to 4096 [ 97.070470][ T7339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.123459][ T7351] loop2: detected capacity change from 0 to 512 [ 97.139990][ T7351] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1558: iget: bad i_size value: 38620345925642 [ 97.153058][ T7351] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1558: couldn't read orphan inode 15 (err -117) [ 97.166068][ T7351] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.183489][ T7351] Direct I/O collision with buffered writes! File: /file1 Comm: syz.2.1558 [ 97.204513][ T824] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 97.220438][ T824] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 97.232729][ T824] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.232729][ T824] [ 97.242633][ T824] EXT4-fs (loop2): Total free blocks count 0 [ 97.248758][ T824] EXT4-fs (loop2): Free/Dirty block details [ 97.254703][ T824] EXT4-fs (loop2): free_blocks=0 [ 97.259807][ T824] EXT4-fs (loop2): dirty_blocks=5 [ 97.264886][ T824] EXT4-fs (loop2): Block reservation details [ 97.271019][ T824] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 97.277954][ T824] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 97.296439][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.507223][ T7385] loop5: detected capacity change from 0 to 1024 [ 97.524516][ T7385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.609385][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.295906][ T7451] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 98.310729][ T7441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.323555][ T7451] SELinux: failed to load policy [ 98.371325][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.380943][ T1651] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.667158][ T7480] __nla_validate_parse: 6 callbacks suppressed [ 98.667182][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 98.706197][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 98.726182][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 98.822469][ T7492] SELinux: failed to load policy [ 98.975889][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 98.975907][ T29] audit: type=1400 audit(1769827242.855:766): avc: denied { create } for pid=7507 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.004337][ T7508] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 99.014907][ T29] audit: type=1400 audit(1769827242.885:767): avc: denied { write } for pid=7507 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.202844][ T29] audit: type=1400 audit(1769827243.075:768): avc: denied { write } for pid=7519 comm="syz.0.1628" path="socket:[18436]" dev="sockfs" ino=18436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.226659][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1629'. [ 99.280143][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1629'. [ 99.305605][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1629'. [ 99.360078][ T7526] SELinux: failed to load policy [ 99.382224][ T29] audit: type=1400 audit(1769827243.255:769): avc: denied { read write } for pid=7531 comm="syz.4.1634" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.394841][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 99.436659][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.453729][ T29] audit: type=1400 audit(1769827243.255:770): avc: denied { open } for pid=7531 comm="syz.4.1634" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.547090][ T29] audit: type=1400 audit(1769827243.415:771): avc: denied { bind } for pid=7542 comm="syz.2.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.629819][ T29] audit: type=1400 audit(1769827243.495:772): avc: denied { read write } for pid=7538 comm="syz.3.1637" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.653279][ T29] audit: type=1400 audit(1769827243.495:773): avc: denied { open } for pid=7538 comm="syz.3.1637" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.690611][ T29] audit: type=1400 audit(1769827243.565:774): avc: denied { ioctl } for pid=7538 comm="syz.3.1637" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.735949][ T29] audit: type=1400 audit(1769827243.565:775): avc: denied { create } for pid=7547 comm="syz.5.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.894562][ T7559] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 100.684475][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.694451][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.997373][ T7636] set_capacity_and_notify: 1 callbacks suppressed [ 100.997394][ T7636] loop0: detected capacity change from 0 to 4096 [ 101.077352][ T7636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.477895][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.609990][ T7669] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 101.617972][ T7669] netlink: 'syz.0.1685': attribute type 4 has an invalid length. [ 101.625794][ T7669] netlink: 15586 bytes leftover after parsing attributes in process `syz.0.1685'. [ 101.907468][ T7688] loop3: detected capacity change from 0 to 4096 [ 101.964543][ T7688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.381280][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.407384][ T7731] loop0: detected capacity change from 0 to 512 [ 102.419383][ T7731] FAT-fs (loop0): error, corrupted file size (i_pos 51, 9216) [ 102.435351][ T7731] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 102.445676][ T7731] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 102.534187][ T7731] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 102.957583][ T7771] loop4: detected capacity change from 0 to 4096 [ 102.976577][ T7771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.097087][ T7785] loop2: detected capacity change from 0 to 512 [ 103.152241][ T7785] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 103.175376][ T7785] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 103.185192][ T7785] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 103.286336][ T7783] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 103.428442][ T2594] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 103.457500][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1727'. [ 103.466137][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.496671][ T3460] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.669104][ T7832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1744'. [ 103.821408][ T7840] loop5: detected capacity change from 0 to 512 [ 103.841316][ T7840] EXT4-fs (loop5): 1 orphan inode deleted [ 103.847830][ T7840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.860481][ T2594] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 103.861331][ T7840] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.914606][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.979314][ T7853] loop5: detected capacity change from 0 to 4096 [ 104.001104][ T7853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.218659][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 104.218674][ T29] audit: type=1400 audit(1769827248.095:850): avc: denied { mount } for pid=7865 comm="syz.0.1747" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.315396][ T29] audit: type=1400 audit(1769827248.195:851): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.431974][ T7882] loop3: detected capacity change from 0 to 512 [ 104.442920][ T7882] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1764: inode has both inline data and extents flags [ 104.464733][ T7882] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1764: couldn't read orphan inode 15 (err -117) [ 104.484250][ T7872] loop0: detected capacity change from 0 to 8192 [ 104.525323][ T7872] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.525644][ T7882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.576206][ T29] audit: type=1400 audit(1769827248.455:852): avc: denied { setattr } for pid=7881 comm="syz.3.1764" path="/361/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.610347][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.633518][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 104.642531][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 104.651492][ T7894] netlink: 'syz.3.1754': attribute type 7 has an invalid length. [ 104.701476][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.701562][ T824] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.721280][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 104.730262][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 104.739262][ T7894] netlink: 'syz.3.1754': attribute type 7 has an invalid length. [ 104.748197][ T824] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.786274][ T7902] loop4: detected capacity change from 0 to 512 [ 104.802123][ T824] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.811197][ T824] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.841242][ T7902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.871061][ T7902] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.903511][ T7898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.944020][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.987775][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 104.995115][ T29] audit: type=1400 audit(1769827248.865:853): avc: denied { ioctl } for pid=7912 comm="syz.4.1761" path="socket:[20136]" dev="sockfs" ino=20136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.266628][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.656853][ T29] audit: type=1400 audit(1769827249.535:854): avc: denied { create } for pid=7916 comm="syz.5.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.678797][ T29] audit: type=1400 audit(1769827249.555:855): avc: denied { setopt } for pid=7916 comm="syz.5.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.705382][ T29] audit: type=1400 audit(1769827249.555:856): avc: denied { write } for pid=7916 comm="syz.5.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.724898][ T29] audit: type=1400 audit(1769827249.575:857): avc: denied { name_connect } for pid=7915 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 105.765591][ T29] audit: type=1400 audit(1769827249.635:858): avc: denied { shutdown } for pid=7915 comm="syz.2.1765" lport=44904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.786607][ T29] audit: type=1400 audit(1769827249.635:859): avc: denied { read } for pid=7915 comm="syz.2.1765" lport=44904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.983661][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 105.992737][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 106.001700][ T7944] netlink: 'syz.2.1774': attribute type 7 has an invalid length. [ 106.018396][ T3460] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.018502][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 106.034781][ T3460] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.036187][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 106.036216][ T7944] netlink: 'syz.2.1774': attribute type 7 has an invalid length. [ 106.062586][ T3460] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.071480][ T3460] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.080708][ T7943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.096304][ T7943] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1787: iget: bad i_size value: 38620345925642 [ 106.109436][ T7943] EXT4-fs (loop4): Remounting filesystem read-only [ 106.116680][ T7943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.221566][ T5012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.427486][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 106.787467][ T7958] chnl_net:caif_netlink_parms(): no params data found [ 106.797703][ T7983] netlink: 'syz.2.1789': attribute type 83 has an invalid length. [ 106.849259][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.856502][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.875621][ T7958] bridge_slave_0: entered allmulticast mode [ 106.882381][ T7958] bridge_slave_0: entered promiscuous mode [ 106.903687][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.911040][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.911134][ T7992] set_capacity_and_notify: 2 callbacks suppressed [ 106.911191][ T7992] loop3: detected capacity change from 0 to 512 [ 106.922059][ T7958] bridge_slave_1: entered allmulticast mode [ 106.937790][ T7992] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.947806][ T7992] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1791: iget: bad i_size value: 38620345925642 [ 106.976558][ T7958] bridge_slave_1: entered promiscuous mode [ 106.988950][ T7992] EXT4-fs (loop3): Remounting filesystem read-only [ 107.006485][ T7992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.042464][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.085953][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.143213][ T7958] team0: Port device team_slave_0 added [ 107.150169][ T7958] team0: Port device team_slave_1 added [ 107.169309][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.176487][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.202496][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.214479][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.221634][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.247696][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.267834][ T4519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.292868][ T7958] hsr_slave_0: entered promiscuous mode [ 107.299207][ T7958] hsr_slave_1: entered promiscuous mode [ 107.305345][ T7958] debugfs: 'hsr0' already exists in 'hsr' [ 107.311134][ T7958] Cannot create hsr debugfs directory [ 107.322222][ T1651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.376606][ T1651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.460984][ T1651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.518336][ T1651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.563475][ T7958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.646887][ T1651] bridge_slave_1: left allmulticast mode [ 107.652602][ T1651] bridge_slave_1: left promiscuous mode [ 107.658573][ T1651] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.681415][ T1651] bridge_slave_0: left allmulticast mode [ 107.687238][ T1651] bridge_slave_0: left promiscuous mode [ 107.693028][ T1651] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.786877][ T1651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.796982][ T1651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.806839][ T1651] bond0 (unregistering): Released all slaves [ 107.814658][ T1651] bond1 (unregistering): Released all slaves [ 107.835927][ T7958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.898061][ T1651] hsr_slave_0: left promiscuous mode [ 107.909318][ T1651] hsr_slave_1: left promiscuous mode [ 107.920222][ T1651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.927885][ T1651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.999834][ T7958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.076542][ T7958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.097853][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 108.184652][ T8058] netlink: 'syz.0.1804': attribute type 83 has an invalid length. [ 108.230417][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.237671][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.271497][ T8004] bridge_slave_0: entered allmulticast mode [ 108.278356][ T8004] bridge_slave_0: entered promiscuous mode [ 108.286495][ T8069] loop0: detected capacity change from 0 to 512 [ 108.297848][ T8069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.302082][ T7958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.318044][ T8069] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1807: iget: bogus i_mode (3355) [ 108.332763][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.339957][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.345488][ T8069] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1807: couldn't read orphan inode 15 (err -117) [ 108.363972][ T8004] bridge_slave_1: entered allmulticast mode [ 108.372137][ T8004] bridge_slave_1: entered promiscuous mode [ 108.380009][ T8069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.396447][ T7958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.412466][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.425925][ T7958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.438466][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.448106][ T7958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.448774][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.494057][ T8004] team0: Port device team_slave_0 added [ 108.524328][ T8004] team0: Port device team_slave_1 added [ 108.561718][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.569192][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.595257][ T8004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.626812][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.633837][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.636386][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 108.659909][ T8004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.686090][ T2594] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.797266][ T8004] hsr_slave_0: entered promiscuous mode [ 108.803706][ T8004] hsr_slave_1: entered promiscuous mode [ 108.815987][ T8004] debugfs: 'hsr0' already exists in 'hsr' [ 108.821781][ T8004] Cannot create hsr debugfs directory [ 108.834555][ T7958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.839914][ T8080] loop0: detected capacity change from 0 to 512 [ 108.864225][ T8080] EXT4-fs: Ignoring removed i_version option [ 108.876090][ T7958] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.894842][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.902006][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.933397][ T8080] EXT4-fs (loop0): 1 truncate cleaned up [ 108.941971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.949129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.984038][ T8080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.054404][ T8004] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.068139][ T8004] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.080740][ T8004] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.092962][ T8004] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.148747][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.223526][ T7958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.254048][ T8141] loop0: detected capacity change from 0 to 1024 [ 109.269383][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.276319][ T8141] EXT4-fs: Ignoring removed nobh option [ 109.282005][ T8141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.310522][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.321241][ T8141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.345890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.353029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.362862][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 109.362882][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.362933][ T29] audit: type=1400 audit(1769827253.235:872): avc: denied { create } for pid=8140 comm="syz.0.1815" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 109.372422][ T29] audit: type=1400 audit(1769827253.245:873): avc: denied { add_name } for pid=8140 comm="syz.0.1815" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 109.376428][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.458426][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.581356][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.697716][ T7958] veth0_vlan: entered promiscuous mode [ 109.708144][ T7958] veth1_vlan: entered promiscuous mode [ 109.753998][ T7958] veth0_macvtap: entered promiscuous mode [ 109.765442][ T7958] veth1_macvtap: entered promiscuous mode [ 109.784616][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.793885][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.809977][ T824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.819519][ T824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.838253][ T824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.852629][ T824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.881914][ T29] audit: type=1400 audit(1769827253.745:874): avc: denied { mounton } for pid=7958 comm="syz-executor" path="/root/syzkaller.9Pp0fI/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 109.906557][ T29] audit: type=1400 audit(1769827253.755:875): avc: denied { mounton } for pid=7958 comm="syz-executor" path="/root/syzkaller.9Pp0fI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 109.933399][ T29] audit: type=1400 audit(1769827253.755:876): avc: denied { mounton } for pid=7958 comm="syz-executor" path="/root/syzkaller.9Pp0fI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 109.961913][ T29] audit: type=1400 audit(1769827253.835:877): avc: denied { mounton } for pid=7958 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 109.984829][ T29] audit: type=1400 audit(1769827253.835:878): avc: denied { mount } for pid=7958 comm="syz-executor" name="/" dev="gadgetfs" ino=4576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 110.066505][ T8004] veth0_vlan: entered promiscuous mode [ 110.075263][ T8004] veth1_vlan: entered promiscuous mode [ 110.093448][ T8004] veth0_macvtap: entered promiscuous mode [ 110.102512][ T8004] veth1_macvtap: entered promiscuous mode [ 110.114734][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.127495][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.142028][ T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.151001][ T2594] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.195579][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.204782][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.267371][ T29] audit: type=1400 audit(1769827254.145:879): avc: denied { ioctl } for pid=8191 comm="syz.6.1819" path="/1/file0" dev="tmpfs" ino=23 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.336075][ T29] audit: type=1400 audit(1769827254.215:880): avc: denied { read } for pid=8193 comm="syz.4.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.542566][ T8163] syz.0.1817 (8163) used greatest stack depth: 6296 bytes left [ 110.610659][ T29] audit: type=1400 audit(1769827254.485:881): avc: denied { watch watch_reads } for pid=8204 comm="syz.4.1825" path="/4/file1" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.646624][ T8203] loop0: detected capacity change from 0 to 2048 [ 110.676341][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1826'. [ 110.700131][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.706862][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 110.726026][ T8203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.771199][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.906457][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.974210][ T8234] loop4: detected capacity change from 0 to 1024 [ 110.989964][ T8234] ext4: Bad value for 'resuid' [ 110.994915][ T8234] ext4: Bad value for 'resuid' [ 111.361474][ T8232] syz.6.1835 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 111.375814][ T8232] CPU: 1 UID: 0 PID: 8232 Comm: syz.6.1835 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.375843][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.375857][ T8232] Call Trace: [ 111.375870][ T8232] [ 111.375882][ T8232] __dump_stack+0x1d/0x30 [ 111.375930][ T8232] dump_stack_lvl+0x95/0xd0 [ 111.375961][ T8232] dump_stack+0x15/0x1b [ 111.376061][ T8232] dump_header+0x80/0x240 [ 111.376087][ T8232] oom_kill_process+0x295/0x350 [ 111.376114][ T8232] out_of_memory+0x97d/0xb80 [ 111.376182][ T8232] try_charge_memcg+0x62e/0xa10 [ 111.376291][ T8232] obj_cgroup_charge_pages+0x23/0xc0 [ 111.376329][ T8232] __memcg_kmem_charge_page+0x9e/0x170 [ 111.376374][ T8232] __alloc_frozen_pages_noprof+0x18a/0x350 [ 111.376475][ T8232] alloc_pages_mpol+0xb3/0x260 [ 111.376545][ T8232] alloc_pages_noprof+0x8f/0x130 [ 111.376578][ T8232] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 111.376679][ T8232] __kvmalloc_node_noprof+0x471/0x680 [ 111.376710][ T8232] ? ip_set_alloc+0x24/0x30 [ 111.376748][ T8232] ? ip_set_alloc+0x24/0x30 [ 111.376779][ T8232] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 111.376946][ T8232] ip_set_alloc+0x24/0x30 [ 111.377035][ T8232] hash_netiface_create+0x282/0x740 [ 111.377200][ T8232] ? __pfx_hash_netiface_create+0x10/0x10 [ 111.377239][ T8232] ip_set_create+0x3cf/0x970 [ 111.377266][ T8232] ? __nla_parse+0x40/0x60 [ 111.377292][ T8232] nfnetlink_rcv_msg+0x509/0x5d0 [ 111.377405][ T8232] netlink_rcv_skb+0x123/0x220 [ 111.377446][ T8232] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.377556][ T8232] nfnetlink_rcv+0x167/0x1720 [ 111.377589][ T8232] ? __kfree_skb+0x109/0x150 [ 111.377629][ T8232] ? nlmon_xmit+0x4f/0x60 [ 111.377765][ T8232] ? consume_skb+0x49/0x140 [ 111.377796][ T8232] ? nlmon_xmit+0x4f/0x60 [ 111.377841][ T8232] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 111.377943][ T8232] ? __dev_queue_xmit+0x139a/0x1f20 [ 111.377991][ T8232] ? __dev_queue_xmit+0x148/0x1f20 [ 111.378103][ T8232] ? ref_tracker_free+0x37d/0x3e0 [ 111.378149][ T8232] ? __netlink_deliver_tap+0x4dc/0x500 [ 111.378240][ T8232] netlink_unicast+0x5c0/0x690 [ 111.378283][ T8232] netlink_sendmsg+0x5c8/0x6f0 [ 111.378314][ T8232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.378341][ T8232] ____sys_sendmsg+0x5af/0x600 [ 111.378461][ T8232] ___sys_sendmsg+0x195/0x1e0 [ 111.378552][ T8232] __x64_sys_sendmsg+0xd4/0x160 [ 111.378581][ T8232] x64_sys_call+0x17ba/0x3000 [ 111.378617][ T8232] do_syscall_64+0xc0/0x2a0 [ 111.378689][ T8232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.378721][ T8232] RIP: 0033:0x7fdf34b3aeb9 [ 111.378751][ T8232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.378839][ T8232] RSP: 002b:00007fdf33597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.378864][ T8232] RAX: ffffffffffffffda RBX: 00007fdf34db5fa0 RCX: 00007fdf34b3aeb9 [ 111.378884][ T8232] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 111.378904][ T8232] RBP: 00007fdf34ba8c1f R08: 0000000000000000 R09: 0000000000000000 [ 111.378922][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.378935][ T8232] R13: 00007fdf34db6038 R14: 00007fdf34db5fa0 R15: 00007ffdfa2d7c38 [ 111.378962][ T8232] [ 111.378970][ T8232] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 111.706803][ T8232] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 111.714743][ T8232] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 111.722098][ T8232] Memory cgroup stats for /syz6: [ 111.722499][ T8232] cache 0 [ 111.730588][ T8232] rss 4096 [ 111.733637][ T8232] shmem 0 [ 111.736687][ T8232] mapped_file 0 [ 111.740267][ T8232] dirty 0 [ 111.743240][ T8232] writeback 0 [ 111.746584][ T8232] workingset_refault_anon 59 [ 111.751203][ T8232] workingset_refault_file 0 [ 111.755761][ T8232] swap 176128 [ 111.759156][ T8232] swapcached 8192 [ 111.762884][ T8232] pgpgin 3155 [ 111.766218][ T8232] pgpgout 3153 [ 111.769628][ T8232] pgfault 4282 [ 111.773020][ T8232] pgmajfault 38 [ 111.776584][ T8232] inactive_anon 0 [ 111.780239][ T8232] active_anon 8192 [ 111.783983][ T8232] inactive_file 0 [ 111.787660][ T8232] active_file 0 [ 111.791135][ T8232] unevictable 0 [ 111.794902][ T8232] hierarchical_memory_limit 314572800 [ 111.800372][ T8232] hierarchical_memsw_limit 9223372036854771712 [ 111.806902][ T8232] total_cache 0 [ 111.810483][ T8232] total_rss 4096 [ 111.814059][ T8232] total_shmem 0 [ 111.817667][ T8232] total_mapped_file 0 [ 111.821677][ T8232] total_dirty 0 [ 111.825194][ T8232] total_writeback 0 [ 111.829096][ T8232] total_workingset_refault_anon 59 [ 111.834298][ T8232] total_workingset_refault_file 0 [ 111.839344][ T8232] total_swap 176128 [ 111.843274][ T8232] total_swapcached 8192 [ 111.847553][ T8232] total_pgpgin 3155 [ 111.851444][ T8232] total_pgpgout 3153 [ 111.855397][ T8232] total_pgfault 4282 [ 111.859321][ T8232] total_pgmajfault 38 [ 111.863331][ T8232] total_inactive_anon 0 [ 111.867552][ T8232] total_active_anon 8192 [ 111.871829][ T8232] total_inactive_file 0 [ 111.876082][ T8232] total_active_file 0 [ 111.880098][ T8232] total_unevictable 0 [ 111.884111][ T8232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1835,pid=8231,uid=0 [ 111.898823][ T8232] Memory cgroup out of memory: Killed process 8231 (syz.6.1835) total-vm:96108kB, anon-rss:1328kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 112.072212][ T8245] loop5: detected capacity change from 0 to 512 [ 112.098839][ T8245] EXT4-fs: Ignoring removed i_version option [ 112.131855][ T8245] EXT4-fs (loop5): 1 truncate cleaned up [ 112.143772][ T8245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.184372][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.203068][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1842'. [ 112.213847][ T8135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.336235][ T8272] loop2: detected capacity change from 0 to 512 [ 112.353073][ T8272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.363724][ T8272] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1849: iget: bogus i_mode (3355) [ 112.377548][ T8272] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1849: couldn't read orphan inode 15 (err -117) [ 112.390739][ T8272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.503809][ T8270] loop5: detected capacity change from 0 to 32768 [ 112.511353][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.555839][ T8270] loop5: p1 p3 < > [ 112.602508][ T8278] loop5: detected capacity change from 0 to 1024 [ 112.627835][ T8278] ext4: Bad value for 'resuid' [ 112.632680][ T8278] ext4: Bad value for 'resuid' [ 112.659226][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 112.662297][ T3930] udevd[3930]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 112.806848][ T8281] loop4: detected capacity change from 0 to 1024 [ 112.820009][ T8281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.841307][ T8281] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #2: comm syz.4.1852: missing EA_INODE flag [ 112.853506][ T8281] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1852: error while reading EA inode 2 err=-117 [ 112.888324][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.934917][ T8289] sock: sock_set_timeout: `syz.4.1855' (pid 8289) tries to set negative timeout [ 112.945132][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 112.945536][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.209364][ T8307] loop4: detected capacity change from 0 to 512 [ 113.225903][ T8307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.258464][ T8307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.285293][ T8307] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.336551][ T8292] loop6: detected capacity change from 0 to 512 [ 113.346452][ T8304] loop0: detected capacity change from 0 to 32768 [ 113.365812][ T8292] EXT4-fs: Ignoring removed i_version option [ 113.389886][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.400317][ T3930] loop0: p1 p3 < > [ 113.409823][ T8304] loop0: p1 p3 < > [ 113.465880][ T8292] EXT4-fs (loop6): 1 truncate cleaned up [ 113.481320][ T8315] loop2: detected capacity change from 0 to 1024 [ 113.500601][ T8292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.522091][ T8319] sock: sock_set_timeout: `syz.0.1867' (pid 8319) tries to set negative timeout [ 113.568042][ T8315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.613812][ T8315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #2: comm syz.2.1865: missing EA_INODE flag [ 113.643910][ T8315] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1865: error while reading EA inode 2 err=-117 [ 113.660731][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.702010][ T3877] udevd[3877]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 113.720492][ T3930] udevd[3930]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 113.726889][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.767281][ T3930] udevd[3930]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 113.773756][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 113.818499][ T8342] loop5: detected capacity change from 0 to 512 [ 113.827627][ T8342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.880156][ T8342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.893092][ T8342] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.965763][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.375638][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.415404][ T8357] ext4: Bad value for 'resuid' [ 114.420390][ T8357] ext4: Bad value for 'resuid' [ 114.613939][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 114.613959][ T29] audit: type=1326 audit(1769827258.485:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7fc00000 [ 114.667902][ T8365] sock: sock_set_timeout: `syz.6.1880' (pid 8365) tries to set negative timeout [ 114.979415][ T8367] EXT4-fs: Ignoring removed i_version option [ 115.025869][ T8367] EXT4-fs (loop4): 1 truncate cleaned up [ 115.047073][ T8367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.100098][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.243130][ T29] audit: type=1326 audit(1769827259.115:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.5.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ecb9baeb9 code=0x7fc00000 [ 115.315339][ T8377] netlink: 'syz.4.1887': attribute type 6 has an invalid length. [ 115.330815][ T29] audit: type=1400 audit(1769827259.205:897): avc: denied { bind } for pid=8374 comm="syz.2.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.360486][ T8378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.436759][ T8378] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #2: comm syz.5.1885: missing EA_INODE flag [ 115.457737][ T8378] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1885: error while reading EA inode 2 err=-117 [ 115.506270][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.535281][ T8386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.561273][ T8386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.586055][ T8386] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.600288][ T8386] Quota error (device loop2): do_check_range: Getting block 4095 out of range 0-5 [ 115.636913][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.751850][ T8404] EXT4-fs: Ignoring removed i_version option [ 115.765675][ T8404] EXT4-fs (loop2): 1 truncate cleaned up [ 115.774354][ T8404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.815221][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.922505][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 115.937822][ T8410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.951817][ T8410] bond2: (slave batadv1): Opening slave failed [ 116.557600][ T29] audit: type=1326 audit(1769827260.435:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2d21aeb9 code=0x7fc00000 [ 116.694064][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1915'. [ 117.184250][ T29] audit: type=1326 audit(1769827261.055:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef2d21aeb9 code=0x7fc00000 [ 117.225696][ T29] audit: type=1400 audit(1769827261.085:900): avc: denied { mount } for pid=8472 comm="syz.4.1920" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.247959][ T29] audit: type=1400 audit(1769827261.085:901): avc: denied { unmount } for pid=8472 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.554289][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1928'. [ 117.605789][ T8489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.649136][ T8489] bond1: (slave batadv1): Opening slave failed [ 118.186724][ T8502] set_capacity_and_notify: 5 callbacks suppressed [ 118.186756][ T8502] loop0: detected capacity change from 0 to 512 [ 118.259822][ T8502] EXT4-fs: Ignoring removed i_version option [ 118.417951][ T8502] EXT4-fs (loop0): 1 truncate cleaned up [ 118.480720][ T8502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.562235][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.596119][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1947'. [ 118.613666][ T8542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.630137][ T8542] bond3: (slave batadv1): Opening slave failed [ 119.104712][ T29] audit: type=1326 audit(1769827262.975:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.6.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf34b3aeb9 code=0x7ffc0000 [ 119.128343][ T29] audit: type=1326 audit(1769827262.975:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.6.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf34b3aeb9 code=0x7ffc0000 [ 119.384969][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1970'. [ 119.786153][ T8645] loop4: detected capacity change from 0 to 256 [ 119.794710][ T8645] vfat: Unknown parameter 'y߸2{RKe¯oV -iAv|CK3u E><ȻL0xffffffffffffffff' [ 119.836210][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 119.836271][ T29] audit: type=1400 audit(1769827263.715:912): avc: denied { write } for pid=8647 comm="syz.4.1989" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.074892][ T8668] loop6: detected capacity change from 0 to 512 [ 120.101950][ T8670] loop4: detected capacity change from 0 to 1024 [ 120.128613][ T8668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.140337][ T824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.144948][ T8668] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.163999][ T8670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.228913][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.371135][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.565727][ T29] audit: type=1326 audit(1769827264.435:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.589315][ T29] audit: type=1326 audit(1769827264.435:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.615625][ T29] audit: type=1326 audit(1769827264.495:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.639108][ T29] audit: type=1326 audit(1769827264.495:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.662610][ T29] audit: type=1326 audit(1769827264.495:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.685981][ T29] audit: type=1326 audit(1769827264.495:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.709407][ T29] audit: type=1326 audit(1769827264.495:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.732945][ T29] audit: type=1326 audit(1769827264.495:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 120.756544][ T29] audit: type=1326 audit(1769827264.495:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedce1baeb9 code=0x7ffc0000 [ 122.582221][ T8621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.642344][ T8775] loop2: detected capacity change from 0 to 128 [ 122.662837][ T8775] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.675388][ T8775] ext4 filesystem being mounted at /430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.757286][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.843566][ T8792] loop6: detected capacity change from 0 to 256 [ 122.856230][ T8792] vfat: Unknown parameter 'y߸2{RKe¯oV -iAv|CK3u E><ȻL0xffffffffffffffff' [ 122.906604][ T8795] xt_hashlimit: size too large, truncated to 1048576 [ 122.978343][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 122.987413][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 123.002245][ T52] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.012193][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'. [ 123.021210][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 123.038884][ T52] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.066962][ T52] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.078004][ T52] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.876728][ T8810] loop6: detected capacity change from 0 to 512 [ 123.932017][ T8810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.955288][ T8810] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.989930][ T8810] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2038: corrupted inode contents [ 124.006315][ T8810] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.2038: mark_inode_dirty error [ 124.042041][ T8810] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2038: corrupted inode contents [ 124.079814][ T8829] loop0: detected capacity change from 0 to 256 [ 124.085925][ T8810] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2038: mark_inode_dirty error [ 124.103579][ T8829] vfat: Unknown parameter 'y߸2{RKe¯oV -iAv|CK3u E><ȻL0xffffffffffffffff' [ 124.140150][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.242868][ T8842] sctp: [Deprecated]: syz.5.2049 (pid 8842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.242868][ T8842] Use struct sctp_sack_info instead [ 124.316092][ T8848] loop6: detected capacity change from 0 to 128 [ 124.343177][ T8849] netlink: 'syz.5.2052': attribute type 11 has an invalid length. [ 124.351108][ T8849] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2052'. [ 124.364588][ T8848] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.399419][ T8857] loop0: detected capacity change from 0 to 512 [ 124.408741][ T8848] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.480634][ T8857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.508195][ T8857] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.677045][ T8004] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.812989][ T8872] netlink: 212924 bytes leftover after parsing attributes in process `syz.5.2062'. [ 124.872854][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2067'. [ 124.882016][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2067'. [ 124.914739][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2067'. [ 124.915379][ T2594] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.923773][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2067'. [ 124.942168][ T2594] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.957923][ T2594] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.972398][ T8891] netlink: 'syz.4.2069': attribute type 11 has an invalid length. [ 124.992847][ T2594] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.055748][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.093663][ T8901] loop4: detected capacity change from 0 to 128 [ 125.130976][ T8901] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.180590][ T8901] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.258335][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.284784][ T8921] loop6: detected capacity change from 0 to 1024 [ 125.308414][ T52] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.328486][ T8921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.340913][ T52] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.351888][ T52] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.360727][ T52] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.370477][ T8920] loop0: detected capacity change from 0 to 4096 [ 125.410264][ T8920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.436591][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 125.436608][ T29] audit: type=1400 audit(1769827269.315:951): avc: denied { setattr } for pid=8915 comm="syz.0.2078" name=".log" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.561534][ T8943] sctp: [Deprecated]: syz.4.2087 (pid 8943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.561534][ T8943] Use struct sctp_sack_info instead [ 125.596432][ T8939] netlink: 'syz.6.2085': attribute type 11 has an invalid length. [ 125.769689][ T8958] netlink: 'syz.6.2095': attribute type 15 has an invalid length. [ 125.790060][ T2594] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 125.790110][ T8958] netlink: 'syz.6.2095': attribute type 15 has an invalid length. [ 125.811533][ T2594] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 125.831027][ T2594] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 125.849235][ T2594] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 126.084672][ T8981] sctp: [Deprecated]: syz.6.2102 (pid 8981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.084672][ T8981] Use struct sctp_sack_info instead [ 126.264284][ T8993] loop5: detected capacity change from 0 to 4096 [ 126.331707][ T9000] netlink: 'syz.4.2109': attribute type 15 has an invalid length. [ 126.395122][ T29] audit: type=1400 audit(1769827270.265:952): avc: denied { bind } for pid=9003 comm="syz.6.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.415219][ T1651] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 126.415229][ T9000] netlink: 'syz.4.2109': attribute type 15 has an invalid length. [ 126.435211][ T1651] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 126.444076][ T29] audit: type=1400 audit(1769827270.315:953): avc: denied { setopt } for pid=9003 comm="syz.6.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.463581][ T29] audit: type=1400 audit(1769827270.315:954): avc: denied { read } for pid=9003 comm="syz.6.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.487363][ T1651] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 126.501471][ T1651] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 126.554270][ T29] audit: type=1400 audit(1769827270.315:955): avc: denied { append } for pid=9005 comm="syz.5.2114" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.684068][ T9014] loop2: detected capacity change from 0 to 4096 [ 126.857259][ T9034] loop6: detected capacity change from 0 to 4096 [ 127.132339][ T9060] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.505316][ T29] audit: type=1400 audit(1769827272.375:956): avc: denied { create } for pid=9105 comm="syz.5.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.545323][ T29] audit: type=1400 audit(1769827272.425:957): avc: denied { listen } for pid=9105 comm="syz.5.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.572651][ T29] audit: type=1400 audit(1769827272.445:958): avc: denied { accept } for pid=9105 comm="syz.5.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.649814][ T9112] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.677620][ T9112] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 128.698320][ T9112] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2154: attempt to clear invalid blocks 2 len 1 [ 128.749301][ T29] audit: type=1400 audit(1769827272.625:959): avc: denied { bind } for pid=9119 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.760265][ T9112] EXT4-fs (loop6): Remounting filesystem read-only [ 128.768732][ T29] audit: type=1400 audit(1769827272.625:960): avc: denied { name_bind } for pid=9119 comm="syz.4.2159" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 128.806270][ T9112] EXT4-fs (loop6): 1 truncate cleaned up [ 129.004184][ T9142] __nla_validate_parse: 13 callbacks suppressed [ 129.004207][ T9142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2169'. [ 129.276364][ T9170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2183'. [ 129.305075][ T9172] set_capacity_and_notify: 2 callbacks suppressed [ 129.305094][ T9172] loop4: detected capacity change from 0 to 512 [ 129.322372][ T9172] EXT4-fs (loop4): 1 truncate cleaned up [ 129.342240][ T9172] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2184: bg 0: block 465: padding at end of block bitmap is not set [ 129.363837][ T9172] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2184: invalid indirect mapped block 234881024 (level 0) [ 129.676243][ T9209] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2197'. [ 129.765298][ T9215] loop6: detected capacity change from 0 to 512 [ 129.775035][ T9215] EXT4-fs (loop6): 1 truncate cleaned up [ 129.796083][ T9215] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2201: bg 0: block 465: padding at end of block bitmap is not set [ 129.815423][ T9215] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2201: invalid indirect mapped block 234881024 (level 0) [ 130.031437][ T2594] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.231743][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2217'. [ 130.241369][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'. [ 130.273719][ T9256] loop0: detected capacity change from 0 to 512 [ 130.303418][ T9256] EXT4-fs (loop0): 1 truncate cleaned up [ 130.328848][ T9256] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2218: bg 0: block 465: padding at end of block bitmap is not set [ 130.355987][ T9256] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2218: invalid indirect mapped block 234881024 (level 0) [ 130.487117][ T9273] loop5: detected capacity change from 0 to 512 [ 130.496917][ T9273] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.566126][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 130.566144][ T29] audit: type=1400 audit(1769827274.445:970): avc: denied { read } for pid=9281 comm="syz.0.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 130.596526][ T9282] loop0: detected capacity change from 0 to 128 [ 130.655434][ T9283] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.2226: corrupted inode contents [ 130.725979][ T9283] EXT4-fs (loop5): Remounting filesystem read-only [ 130.732620][ T9283] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 130.776803][ T29] audit: type=1400 audit(1769827274.655:971): avc: denied { map } for pid=9284 comm="syz.0.2240" path="socket:[24785]" dev="sockfs" ino=24785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 130.823189][ T29] audit: type=1400 audit(1769827274.695:972): avc: denied { getopt } for pid=9287 comm="syz.0.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 130.928256][ T29] audit: type=1326 audit(1769827274.805:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 130.953475][ T29] audit: type=1326 audit(1769827274.835:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 130.978157][ T29] audit: type=1326 audit(1769827274.835:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 131.001814][ T29] audit: type=1326 audit(1769827274.835:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 131.025353][ T29] audit: type=1326 audit(1769827274.835:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 131.027240][ T1651] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.048849][ T29] audit: type=1326 audit(1769827274.835:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 131.083240][ T29] audit: type=1326 audit(1769827274.835:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 131.204526][ T9303] loop2: detected capacity change from 0 to 128 [ 131.300580][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2249'. [ 131.309605][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2249'. [ 131.320733][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2249'. [ 131.329796][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2249'. [ 131.436193][ T9326] loop6: detected capacity change from 0 to 128 [ 131.557739][ T9341] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 131.699236][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 131.781066][ T9362] loop0: detected capacity change from 0 to 128 [ 132.035425][ T52] nci: nci_ntf_packet: unknown ntf opcode 0xe15 [ 132.055047][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.055097][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 132.356222][ T9392] loop5: detected capacity change from 0 to 128 [ 132.657694][ T9401] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 132.700866][ T9408] loop6: detected capacity change from 0 to 256 [ 132.862242][ T9414] EXT4-fs mount: 21 callbacks suppressed [ 132.862281][ T9414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.881435][ T9414] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.969010][ T9414] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.2295: corrupted inode contents [ 132.991699][ T9414] EXT4-fs (loop6): Remounting filesystem read-only [ 132.999078][ T9414] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 133.021807][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.055972][ T9426] netlink: 'syz.4.2289': attribute type 6 has an invalid length. [ 133.063772][ T9426] netlink: 'syz.4.2289': attribute type 5 has an invalid length. [ 133.076115][ T9426] netlink: 'syz.4.2289': attribute type 6 has an invalid length. [ 133.083953][ T9426] netlink: 'syz.4.2289': attribute type 5 has an invalid length. [ 133.239436][ T9440] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 133.671490][ T9457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.680942][ T9457] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 133.689055][ T9457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 133.697572][ T9457] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 133.707149][ T9457] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 133.716689][ T9457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 133.734267][ T9457] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2304: dx entry: limit 65535 != root limit 120 [ 133.746478][ T9457] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2304: Corrupt directory, running e2fsck is recommended [ 133.759601][ T9457] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.2304: path /110/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 133.791436][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.859437][ T9466] netlink: 'syz.6.2316': attribute type 29 has an invalid length. [ 133.869306][ T9466] netlink: 'syz.6.2316': attribute type 29 has an invalid length. [ 134.065537][ T9492] __nla_validate_parse: 18 callbacks suppressed [ 134.065559][ T9492] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2312'. [ 134.321321][ T9497] set_capacity_and_notify: 2 callbacks suppressed [ 134.321338][ T9497] loop4: detected capacity change from 0 to 512 [ 134.336026][ T9497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.365332][ T9497] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 134.373431][ T9497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 134.395366][ T9497] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 134.405021][ T9497] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 134.414383][ T9497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.436054][ T9497] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.2329: dx entry: limit 65535 != root limit 120 [ 134.448365][ T9497] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2329: Corrupt directory, running e2fsck is recommended [ 134.468033][ T9497] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.2329: path /116/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 134.500464][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.635877][ T9521] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2328'. [ 134.826695][ T9534] loop2: detected capacity change from 0 to 512 [ 134.835964][ T9534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.853953][ T9534] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 134.862117][ T9534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 134.870757][ T9534] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 134.880616][ T9534] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 134.889926][ T9534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.905253][ T9534] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2335: dx entry: limit 65535 != root limit 120 [ 134.917805][ T9534] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2335: Corrupt directory, running e2fsck is recommended [ 134.931073][ T9534] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.2335: path /493/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 134.971796][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.980900][ T9374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.990338][ T9539] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2336'. [ 135.104048][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 135.113174][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 135.122155][ T9550] netlink: 'syz.2.2341': attribute type 6 has an invalid length. [ 135.130030][ T9550] netlink: 'syz.2.2341': attribute type 5 has an invalid length. [ 135.141439][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 135.150467][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 135.159421][ T9550] netlink: 'syz.2.2341': attribute type 6 has an invalid length. [ 135.167270][ T9550] netlink: 'syz.2.2341': attribute type 5 has an invalid length. [ 135.217014][ T9554] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2343'. [ 135.342466][ T9564] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2347'. [ 135.402505][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2350'. [ 135.890265][ T9600] loop6: detected capacity change from 0 to 1024 [ 135.917744][ T9600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.946149][ T9600] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.2363: Allocating blocks 449-513 which overlap fs metadata [ 135.960364][ T9600] EXT4-fs (loop6): Remounting filesystem read-only [ 135.967629][ T9599] EXT4-fs (loop6): pa ffff8881079d58c0: logic 48, phys. 177, len 21 [ 135.985418][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.137193][ T2594] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.165542][ T9616] loop5: detected capacity change from 0 to 512 [ 136.172573][ T9616] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.185225][ T9616] EXT4-fs (loop5): 1 truncate cleaned up [ 136.192018][ T29] kauditd_printk_skb: 903 callbacks suppressed [ 136.192034][ T29] audit: type=1400 audit(1769827280.065:1883): avc: denied { read } for pid=9617 comm="syz.6.2369" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.206738][ T9616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.240442][ T29] audit: type=1400 audit(1769827280.065:1884): avc: denied { open } for pid=9617 comm="syz.6.2369" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.352683][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.488179][ T29] audit: type=1400 audit(1769827280.365:1885): avc: denied { wake_alarm } for pid=9635 comm="syz.4.2377" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.726038][ T29] audit: type=1400 audit(1769827280.605:1886): avc: denied { bind } for pid=9653 comm="syz.6.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.745864][ T29] audit: type=1400 audit(1769827280.625:1887): avc: denied { listen } for pid=9653 comm="syz.6.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.900427][ T9669] loop6: detected capacity change from 0 to 1024 [ 136.958865][ T9669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.056434][ T29] audit: type=1400 audit(1769827280.935:1888): avc: denied { remove_name } for pid=9666 comm="syz.6.2390" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 137.078950][ T29] audit: type=1400 audit(1769827280.935:1889): avc: denied { rename } for pid=9666 comm="syz.6.2390" name="file0" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 137.101497][ T29] audit: type=1400 audit(1769827280.935:1890): avc: denied { rmdir } for pid=9666 comm="syz.6.2390" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.123766][ T29] audit: type=1400 audit(1769827280.935:1891): avc: denied { rename } for pid=9666 comm="syz.6.2390" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.146093][ T29] audit: type=1400 audit(1769827280.935:1892): avc: denied { reparent } for pid=9666 comm="syz.6.2390" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.169784][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.264061][ T9691] loop6: detected capacity change from 0 to 512 [ 137.307335][ T9691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.321614][ T9698] loop5: detected capacity change from 0 to 1024 [ 137.332333][ T9691] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.356722][ T9698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.369815][ T9698] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.392899][ T9698] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2403: bg 0: block 112: padding at end of block bitmap is not set [ 137.408041][ T9698] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 137.421051][ T9698] EXT4-fs (loop5): This should not happen!! Data will be lost [ 137.421051][ T9698] [ 137.432462][ T9698] EXT4-fs warning (device loop5): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 137.456029][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.466401][ T6679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.545243][ T2594] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.751556][ T9739] loop4: detected capacity change from 0 to 512 [ 137.789132][ T9739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.813987][ T9744] loop2: detected capacity change from 0 to 1024 [ 137.821165][ T9739] EXT4-fs (loop4): 1 truncate cleaned up [ 137.832290][ T9739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.860644][ T9744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.960959][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.032931][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.130409][ T9765] loop2: detected capacity change from 0 to 512 [ 138.191774][ T9765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.215121][ T9765] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.246308][ T9767] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.264515][ T9765] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.281846][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.290742][ T9767] FAT-fs (loop4): Filesystem has been set read-only [ 138.308097][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.319590][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.328798][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.339945][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.372030][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.382393][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.398098][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.428117][ T9775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.454617][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.455229][ T9775] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.478548][ T9775] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2448: bg 0: block 112: padding at end of block bitmap is not set [ 138.484544][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.502400][ T9775] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 138.511602][ T9767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 138.514936][ T9775] EXT4-fs (loop0): This should not happen!! Data will be lost [ 138.514936][ T9775] [ 138.537651][ T9775] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 138.566114][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.645414][ T9789] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.681931][ T9789] EXT4-fs (loop0): 1 truncate cleaned up [ 138.708118][ T9789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.848609][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.920974][ T9796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.955087][ T9796] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.010007][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.119512][ T9816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.186418][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.238321][ T37] nci: nci_ntf_packet: unknown ntf opcode 0xe15 [ 139.352770][ T9843] set_capacity_and_notify: 6 callbacks suppressed [ 139.352791][ T9843] loop4: detected capacity change from 0 to 512 [ 139.382225][ T9843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.401952][ T9843] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.472247][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.490027][ T9854] SELinux: failed to load policy [ 139.567473][ T9866] loop4: detected capacity change from 0 to 1024 [ 139.576629][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 139.582782][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.587594][ T9866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.682445][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.389438][ T9889] loop4: detected capacity change from 0 to 512 [ 140.427803][ T9892] mmap: syz.2.2491 (9892) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.442641][ T9893] loop4: detected capacity change from 0 to 512 [ 140.480740][ T9893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.493522][ T9893] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.513072][ T9893] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 140.587735][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.813178][ T9924] validate_nla: 3 callbacks suppressed [ 140.813197][ T9924] netlink: 'syz.4.2493': attribute type 4 has an invalid length. [ 140.842571][ T9924] netlink: 'syz.4.2493': attribute type 4 has an invalid length. [ 140.879967][ T9926] loop5: detected capacity change from 0 to 8192 [ 140.891467][ T9926] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.904908][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.913993][ T9926] FAT-fs (loop5): Filesystem has been set read-only [ 140.921089][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.929976][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.939292][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.948365][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.957424][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.966278][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.975444][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.984237][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 140.993740][ T9926] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 141.589314][ T9929] sd 0:0:1:0: device reset [ 141.895894][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 142.174795][ T9825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.276322][ T9950] loop6: detected capacity change from 0 to 128 [ 142.294739][ T9950] EXT4-fs: Ignoring removed orlov option [ 142.300520][ T9950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.307272][ T9950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.316595][ T9952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9952 comm=syz.5.2501 [ 142.335396][ T9950] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.385706][ T9950] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.400205][ T9960] loop0: detected capacity change from 0 to 128 [ 142.436731][ T9960] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.461054][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 142.461073][ T29] audit: type=1400 audit(3917310934.338:1901): avc: denied { create } for pid=9962 comm="syz.4.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.493556][ T9960] ext4 filesystem being mounted at /481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.589840][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.676069][ T29] audit: type=1400 audit(3917310934.558:1902): avc: denied { watch } for pid=9969 comm="syz.0.2511" path="/483/file0" dev="tmpfs" ino=2525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 142.768697][ T29] audit: type=1326 audit(3917310934.648:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 142.810367][ T29] audit: type=1326 audit(3917310934.668:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 142.833985][ T29] audit: type=1326 audit(3917310934.668:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 142.857936][ T29] audit: type=1326 audit(3917310934.668:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 142.881480][ T29] audit: type=1326 audit(3917310934.668:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 142.905011][ T29] audit: type=1326 audit(3917310934.668:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 142.928637][ T29] audit: type=1326 audit(3917310934.668:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 142.952372][ T29] audit: type=1326 audit(3917310934.668:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 143.093381][ T8004] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.116290][ T9978] capability: warning: `syz.0.2515' uses 32-bit capabilities (legacy support in use) [ 143.527395][T10010] loop4: detected capacity change from 0 to 128 [ 143.534251][T10010] EXT4-fs: Ignoring removed orlov option [ 143.540111][T10010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.546788][T10010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.607525][T10010] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.625283][T10010] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.679271][T10019] netlink: 'syz.2.2531': attribute type 4 has an invalid length. [ 143.693802][T10019] netlink: 'syz.2.2531': attribute type 4 has an invalid length. [ 144.076611][T10045] loop2: detected capacity change from 0 to 128 [ 144.098033][T10045] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.157770][T10045] ext4 filesystem being mounted at /542/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.275793][T10044] loop0: detected capacity change from 0 to 8192 [ 144.289801][T10044] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.318577][ T7958] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.334174][T10044] vfat filesystem being mounted at /490/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 144.366726][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.375708][T10044] FAT-fs (loop0): Filesystem has been set read-only [ 144.384557][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.395502][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.407000][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.429938][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.462580][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.494254][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.503362][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.518588][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.527667][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 144.564271][T10044] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 145.283346][T10113] netlink: 'syz.2.2569': attribute type 3 has an invalid length. [ 145.661990][T10138] loop6: detected capacity change from 0 to 136 [ 145.671956][T10140] loop0: detected capacity change from 0 to 128 [ 145.694942][T10140] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.807000][T10140] ext4 filesystem being mounted at /496/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.872419][T10148] __nla_validate_parse: 5 callbacks suppressed [ 145.872441][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2583'. [ 145.887819][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2583'. [ 145.948835][T10148] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 145.996102][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.216715][T10158] loop6: detected capacity change from 0 to 8192 [ 146.230420][T10158] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.269110][T10158] vfat filesystem being mounted at /169/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 146.476070][T10172] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2593'. [ 146.555698][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 146.777217][T10194] loop4: detected capacity change from 0 to 8192 [ 146.796054][T10194] vfat filesystem being mounted at /177/bus supports timestamps until 2107-12-31 (0x10391447e) [ 147.025788][ T824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.378775][T10219] loop4: detected capacity change from 0 to 128 [ 147.385557][T10216] netlink: 'syz.6.2608': attribute type 3 has an invalid length. [ 147.415691][T10219] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.446308][T10219] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.500208][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 147.500228][ T29] audit: type=1326 audit(3917310939.378:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.559741][ T29] audit: type=1326 audit(3917310939.418:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.583472][ T29] audit: type=1326 audit(3917310939.418:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.607048][ T29] audit: type=1326 audit(3917310939.418:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.630701][ T29] audit: type=1326 audit(3917310939.418:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.654170][ T29] audit: type=1326 audit(3917310939.418:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.677889][ T29] audit: type=1326 audit(3917310939.418:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.701492][ T29] audit: type=1326 audit(3917310939.418:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.734867][ T7958] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.788725][ T29] audit: type=1326 audit(3917310939.648:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.0.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe12e3aeb9 code=0x7ffc0000 [ 147.861650][ T29] audit: type=1326 audit(3917310939.728:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.6.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf34b3aeb9 code=0x7ffc0000 [ 147.989125][T10240] loop5: detected capacity change from 0 to 136 [ 147.997190][T10242] netlink: 182 bytes leftover after parsing attributes in process `syz.6.2620'. [ 148.159993][T10253] loop2: detected capacity change from 0 to 128 [ 148.182963][T10253] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.236832][T10253] ext4 filesystem being mounted at /557/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.368478][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.479592][T10279] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2636'. [ 148.705583][T10299] loop6: detected capacity change from 0 to 1024 [ 148.715552][T10299] EXT4-fs: Ignoring removed bh option [ 148.738941][T10299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.752878][T10299] EXT4-fs (loop6): shut down requested (0) [ 148.815802][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.081400][T10330] loop0: detected capacity change from 0 to 1024 [ 149.093150][T10330] EXT4-fs: Ignoring removed orlov option [ 149.113758][T10330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.142100][T10335] loop4: detected capacity change from 0 to 512 [ 149.157836][T10335] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.197242][T10335] EXT4-fs (loop4): 1 truncate cleaned up [ 149.232540][T10335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.289574][T10335] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.2658: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 149.333939][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.363598][T10335] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem [ 149.423506][ T7958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.451194][T10350] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.475214][T10350] vfat filesystem being mounted at /511/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 149.795139][T10358] vfat filesystem being mounted at /190/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 150.186537][T10372] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.247040][T10372] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.268101][T10372] vfat filesystem being mounted at /186/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 150.311518][T10381] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2675'. [ 150.436380][T10387] Invalid argument reading file caps for ./file0 [ 150.478507][T10390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10390 comm=syz.0.2679 [ 150.531894][T10388] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.552023][T10388] vfat filesystem being mounted at /197/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 150.655669][T10395] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.670014][T10395] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.682917][T10395] vfat filesystem being mounted at /520/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 150.858644][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2686'. [ 150.881910][T10406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.898435][T10406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.906301][T10406] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 150.943360][T10406] bond1: (slave gre1): Error -95 calling set_mac_address [ 151.136794][T10417] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2692'. [ 151.172974][T10420] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10420 comm=syz.6.2694 [ 151.219979][T10423] set_capacity_and_notify: 5 callbacks suppressed [ 151.220085][T10423] loop6: detected capacity change from 0 to 1024 [ 151.233782][T10423] EXT4-fs: Ignoring removed orlov option [ 151.247382][T10423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.300888][ T8004] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.605332][T10287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.614201][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2660'. [ 151.689083][T10436] loop5: detected capacity change from 0 to 256 [ 151.703940][T10436] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.718232][T10436] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.738359][T10436] vfat filesystem being mounted at /225/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 151.842023][T10450] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2705'. [ 152.086557][T10473] loop2: detected capacity change from 0 to 8192 [ 152.094257][T10473] vfat filesystem being mounted at /576/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 152.523306][T10486] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2721'. [ 152.596851][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 152.596868][ T29] audit: type=1326 audit(3917310944.478:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.626938][ T29] audit: type=1326 audit(3917310944.488:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.650544][ T29] audit: type=1326 audit(3917310944.488:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.674154][ T29] audit: type=1326 audit(3917310944.488:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.697930][ T29] audit: type=1326 audit(3917310944.488:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.722162][ T29] audit: type=1326 audit(3917310944.598:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.745762][ T29] audit: type=1326 audit(3917310944.598:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.776391][ T29] audit: type=1326 audit(3917310944.598:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.800254][ T29] audit: type=1326 audit(3917310944.598:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.824002][ T29] audit: type=1326 audit(3917310944.598:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10489 comm="syz.5.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8ecb9baeb9 code=0x7ffc0000 [ 152.825674][ T2594] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.938932][T10498] ip6gre1: entered promiscuous mode [ 152.944306][T10498] ip6gre1: entered allmulticast mode [ 152.950840][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2727'. [ 152.976212][T10497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.037511][T10497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.070811][T10497] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 153.086765][T10497] bond2: (slave gre1): Error -95 calling set_mac_address [ 153.238878][T10519] loop2: detected capacity change from 0 to 1024 [ 153.302879][T10519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 153.327686][T10519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 153.475667][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2745'. [ 153.492226][T10544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.521182][T10542] loop5: detected capacity change from 0 to 8192 [ 153.529080][T10542] vfat filesystem being mounted at /239/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 153.554433][T10544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.561756][T10544] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 153.573219][T10544] bond4: (slave gre3): Error -95 calling set_mac_address [ 153.672269][T10554] ip6gre1: entered promiscuous mode [ 153.677669][T10554] ip6gre1: entered allmulticast mode [ 153.754583][T10558] loop6: detected capacity change from 0 to 1024 [ 153.777350][T10558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 153.826539][T10558] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 154.160663][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 154.171636][T10587] ip6gre1: entered promiscuous mode [ 154.176990][T10587] ip6gre1: entered allmulticast mode [ 154.249470][T10583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.325546][T10583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.332942][T10583] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 154.445702][T10583] bond1: (slave gre1): Error -95 calling set_mac_address [ 154.649212][T10599] loop5: detected capacity change from 0 to 1024 [ 155.060536][T10621] loop4: detected capacity change from 0 to 8192 [ 155.075905][T10621] vfat filesystem being mounted at /204/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 155.141213][T10630] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 155.147815][T10630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.155460][T10630] vhci_hcd vhci_hcd.0: Device attached [ 155.177668][T10631] usbip_core: unknown command [ 155.182442][T10631] vhci_hcd: unknown pdu 0 [ 155.186901][T10631] usbip_core: unknown command [ 155.201089][T10636] loop2: detected capacity change from 0 to 1024 [ 155.207711][ T52] vhci_hcd vhci_hcd.5: stop threads [ 155.212986][ T52] vhci_hcd vhci_hcd.5: release socket [ 155.218435][ T52] vhci_hcd vhci_hcd.5: disconnect device [ 155.224441][T10636] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.241051][T10636] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.268789][T10636] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 155.277064][T10636] EXT4-fs (loop2): orphan cleanup on readonly fs [ 155.283878][T10636] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.2782: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.297500][T10636] EXT4-fs (loop2): Remounting filesystem read-only [ 155.304201][T10636] EXT4-fs (loop2): 1 orphan inode deleted [ 155.487449][T10643] loop2: detected capacity change from 0 to 1024 [ 155.551283][T10647] vfat filesystem being mounted at /599/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 156.329951][T10698] set_capacity_and_notify: 2 callbacks suppressed [ 156.329967][T10698] loop4: detected capacity change from 0 to 256 [ 156.345938][T10698] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.365619][T10698] vfat filesystem being mounted at /211/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 157.225502][T10707] loop0: detected capacity change from 0 to 8192 [ 157.238337][T10707] vfat filesystem being mounted at /539/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 157.786556][ T824] ================================================================== [ 157.794705][ T824] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 157.803004][ T824] [ 157.805332][ T824] write to 0xffff88811e565dca of 2 bytes by task 10707 on cpu 0: [ 157.813057][ T824] fat16_ent_put+0x28/0x60 [ 157.817489][ T824] fat_ent_write+0x6c/0xe0 [ 157.821924][ T824] fat_chain_add+0x16c/0x490 [ 157.826531][ T824] fat_get_block+0x46c/0x5e0 [ 157.831146][ T824] __block_write_begin_int+0x400/0xf90 [ 157.836626][ T824] cont_write_begin+0x5fe/0x970 [ 157.841489][ T824] fat_write_begin+0x4f/0xe0 [ 157.846095][ T824] generic_perform_write+0x183/0x490 [ 157.851397][ T824] __generic_file_write_iter+0x9e/0x120 [ 157.856960][ T824] generic_file_write_iter+0x8d/0x310 [ 157.862346][ T824] vfs_write+0x5a6/0x9f0 [ 157.866659][ T824] ksys_write+0xdc/0x1a0 [ 157.870926][ T824] __x64_sys_write+0x40/0x50 [ 157.875521][ T824] x64_sys_call+0x2847/0x3000 [ 157.880329][ T824] do_syscall_64+0xc0/0x2a0 [ 157.884851][ T824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.890754][ T824] [ 157.893083][ T824] read to 0xffff88811e565c00 of 512 bytes by task 824 on cpu 1: [ 157.900712][ T824] copy_folio_from_iter_atomic+0x75f/0x1170 [ 157.906625][ T824] generic_perform_write+0x2c1/0x490 [ 157.912014][ T824] shmem_file_write_iter+0xc5/0xf0 [ 157.917144][ T824] lo_rw_aio+0x67d/0x730 [ 157.921389][ T824] loop_process_work+0x56c/0xac0 [ 157.926360][ T824] loop_workfn+0x31/0x40 [ 157.930615][ T824] process_scheduled_works+0x4cd/0x9d0 [ 157.936170][ T824] worker_thread+0x6bc/0x8b0 [ 157.940774][ T824] kthread+0x488/0x510 [ 157.944857][ T824] ret_from_fork+0x148/0x280 [ 157.949496][ T824] ret_from_fork_asm+0x1a/0x30 [ 157.954271][ T824] [ 157.956598][ T824] Reported by Kernel Concurrency Sanitizer on: [ 157.962757][ T824] CPU: 1 UID: 0 PID: 824 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.972595][ T824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.982656][ T824] Workqueue: loop0 loop_workfn [ 157.987430][ T824] ================================================================== [ 158.535557][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.080067][T10671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.296082][ T824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration