last executing test programs: 4m8.72364465s ago: executing program 32 (id=1208): setresgid(0xee00, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40}}], 0x1, 0x84) 3m50.533266876s ago: executing program 33 (id=1654): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x4, 0x0, 0x0) 3m30.820483581s ago: executing program 5 (id=2191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_emit_ethernet(0x88, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m30.680923966s ago: executing program 5 (id=2197): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) 3m30.385876743s ago: executing program 5 (id=2206): r0 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4007, @fd_index=0x1, 0x400, 0x154, 0x8, 0x1a, 0x1}) io_uring_enter(r0, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 3m30.225444445s ago: executing program 5 (id=2213): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x40000000, @private1, 0x7}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @empty}}, [0xb, 0x580, 0xc4e7, 0x8000000005, 0x8, 0x2, 0x26b3, 0x1, 0x9, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x4]}, &(0x7f0000000180)=0x100) 3m30.152376092s ago: executing program 5 (id=2216): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m30.111963945s ago: executing program 5 (id=2219): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) 3m14.557108619s ago: executing program 34 (id=2219): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) 2m50.416103467s ago: executing program 2 (id=2811): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x50) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 2m37.830668159s ago: executing program 2 (id=2983): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1cf9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, {0xa, 0x4e23, 0x4, @mcast1, 0x7}, r1, 0xd}}, 0x48) 2m37.796139974s ago: executing program 2 (id=2984): r0 = io_uring_setup(0x7, &(0x7f00000000c0)={0x0, 0x2c62, 0x1000, 0x2, 0x3a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000180)=""/172, 0xac}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000001240)=""/250, 0xfa, 0x0) 2m37.706624047s ago: executing program 2 (id=2990): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_clone(0x20000000, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000080), 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x800077, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xffeffffd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 2m37.307409296s ago: executing program 2 (id=2998): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 2m36.840834364s ago: executing program 2 (id=3013): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x9, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x7, {{0xa, 0x4200, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @local, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0x3}}}, 0x108) 2m36.757868728s ago: executing program 35 (id=3013): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x9, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x7, {{0xa, 0x4200, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @local, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00', 0x3}}}, 0x108) 1m55.187553618s ago: executing program 0 (id=4187): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 1m55.133255898s ago: executing program 0 (id=4188): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x29, 0x0, 0x0) 1m55.107530374s ago: executing program 0 (id=4189): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/packet\x00') read$msr(r0, &(0x7f0000000000)=""/105, 0x69) 1m55.08639639s ago: executing program 0 (id=4190): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xa, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r1, &(0x7f0000000300), &(0x7f0000000740)=""/4096}, 0x20) 1m55.064237786s ago: executing program 0 (id=4191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101142, 0x0) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 1m54.967369649s ago: executing program 0 (id=4192): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m39.936704276s ago: executing program 36 (id=4192): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1m24.344717074s ago: executing program 4 (id=4721): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r0) 1m24.311069938s ago: executing program 4 (id=4722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885}, 0x40840) 1m24.291835155s ago: executing program 4 (id=4723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m24.21057404s ago: executing program 4 (id=4724): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m24.20897028s ago: executing program 4 (id=4726): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a250, 0x0, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xf7, 0x0, 0xfc, 0x0, 0x4, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x4, 0x0, 0x0, 0x10, 0x10000a, 0x4, 0x0, 0xfffffffd}, 0x0, 0xe, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ecf6aeea7c1862e2adacd2737d00ad029fa9f3d7145e15dd9fb1a7adc011220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca37b75efd785637786a36a4b83857"}, 0x80, 0x0}, 0x0) 1m23.92740349s ago: executing program 4 (id=4733): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}, 0x1, 0xd}, 0x44050) 1m23.882496782s ago: executing program 37 (id=4733): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}, 0x1, 0xd}, 0x44050) 33.711040152s ago: executing program 1 (id=6003): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) shmdt(r1) 33.632332128s ago: executing program 1 (id=6006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a010200"], 0x14}}, 0x40090) close(0x3) 33.471996159s ago: executing program 1 (id=6009): pipe(&(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0) 33.471888399s ago: executing program 1 (id=6010): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 33.414473979s ago: executing program 1 (id=6012): r0 = epoll_create1(0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 33.212004233s ago: executing program 1 (id=6021): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) futimesat(r0, 0x0, &(0x7f0000000100)) 33.152579742s ago: executing program 38 (id=6021): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) futimesat(r0, 0x0, &(0x7f0000000100)) 3.096331892s ago: executing program 3 (id=6899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x5, &(0x7f0000032100)=""/102396, &(0x7f00000000c0)=0x18ffc) 2.400032002s ago: executing program 9 (id=6917): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.217827315s ago: executing program 9 (id=6924): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000980)={0x0, 0xf872, 0x10000, 0x3, 0x4}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3596, 0x0, 0x49, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 2.004317959s ago: executing program 8 (id=6927): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000002c0)) 2.004131039s ago: executing program 3 (id=6928): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xbaf}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nouser_xattr}], [{@fowner_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@euid_gt={'euid>', 0xee00}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x11, 0x1, 0x8000000) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.980405993s ago: executing program 9 (id=6929): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.974837741s ago: executing program 8 (id=6930): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@oldalloc}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bind$packet(0xffffffffffffffff, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x7, 0x7}, {0xb, 0x8001}], 0xee01}, 0x18, 0x1) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 1.950792515s ago: executing program 9 (id=6931): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x700}], 0x1, 0x0, 0x0, 0x0) 1.85444921s ago: executing program 3 (id=6933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) 1.831259894s ago: executing program 7 (id=6934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9b5, @rand_addr=' \x01\x00', 0x747b5461}]}, &(0x7f0000000240)=0x10) ppoll(&(0x7f0000000140)=[{r0, 0x12}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.73632849s ago: executing program 8 (id=6935): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) 1.62360532s ago: executing program 8 (id=6936): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000540)={0x0, 0x800ce90, 0x10, 0x3, 0x40014333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2000002, @rand_addr=' \x01\x00', 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.502939659s ago: executing program 6 (id=6937): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffa, 0x0, 0x3, 0x2, 0x10, "4c1b074660964daff300d545069f9acb603b5bf663e802de59a9e529d89f463cf51b579b4a8a1e470af8788b7c1079740bdd4b5142948471a514c228de04578f", "b95689cd752835b13e96e21fa06480d3374b0162f5aaaf733d476b8dd022545b2509182ca9912c3d546fd27d281b3fa916255fc75a03089ff883349ffb1f9bae", "af8003170670e2b91d49c1248c1bcfc4f0a3346f3426dad1baee10b4383dc416", [0x7fffffffffffffff, 0x81]}) 1.31320656s ago: executing program 6 (id=6938): socket(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x40, 0x12) 1.214863514s ago: executing program 6 (id=6939): r0 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d5, 0x10100, 0x200003, 0x60}, &(0x7f0000000080)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0xffffffffffffffed, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x2, 0xa, 0x64) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0xfffffffffffffcfd, 0x4000044, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.185859847s ago: executing program 6 (id=6940): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{0x0}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x237, &(0x7f0000000300)="$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") 970.959171ms ago: executing program 6 (id=6941): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000240)={[0x6]}, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") 924.347209ms ago: executing program 7 (id=6942): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 900.566763ms ago: executing program 9 (id=6943): r0 = syz_io_uring_setup(0x136f, &(0x7f0000000440)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000007c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 846.583759ms ago: executing program 7 (id=6944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) 696.15871ms ago: executing program 3 (id=6945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x401}}}}}}}, 0x0) 695.49052ms ago: executing program 7 (id=6955): r0 = socket(0x23, 0x5, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 634.436544ms ago: executing program 3 (id=6946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xb}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0xe15, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 562.080195ms ago: executing program 9 (id=6947): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd4060000200000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 524.085855ms ago: executing program 8 (id=6948): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x10000000, 0xfffffffd}, 0x10) 468.057501ms ago: executing program 7 (id=6949): socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x800) unshare(0x6020400) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 467.589611ms ago: executing program 8 (id=6950): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x8, 0xff}, &(0x7f00000000c0)=0x10) 407.496705ms ago: executing program 7 (id=6951): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121a, &(0x7f0000002800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 101.61µs ago: executing program 6 (id=6952): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x4481, 0x3380, 0x1, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index=0x3, 0x8000000000, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x14, 0x63, 0x0, 0x0) 0s ago: executing program 3 (id=6953): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) kernel console output (not intermixed with test programs): XT4-fs (loop6): 1 orphan inode deleted [ 258.747959][T16590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.789059][T16590] EXT4-fs error (device loop6): __ext4_iget:5378: inode #14: block 1886221359: comm syz.6.5221: invalid block [ 258.811078][T16605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.832343][T16605] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.862401][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.910720][T16617] EXT4-fs: Ignoring removed i_version option [ 258.916922][T16617] EXT4-fs: Ignoring removed bh option [ 258.948698][T16617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.984637][T16620] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 258.995294][T16617] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.003620][ T28] audit: type=1400 audit(2000000610.289:1572): avc: denied { mount } for pid=16612 comm="syz.1.5231" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 259.007880][T16620] EXT4-fs (loop9): 1 truncate cleaned up [ 259.034485][T16620] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.042161][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.074427][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.148897][ T28] audit: type=1400 audit(2000000610.429:1573): avc: denied { unmount } for pid=15234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 259.201790][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.220216][T16633] netlink: 'syz.8.5234': attribute type 4 has an invalid length. [ 259.278999][ T28] audit: type=1400 audit(2000000610.559:1574): avc: denied { mounton } for pid=16640 comm="syz.7.5239" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 259.306928][ T28] audit: type=1400 audit(2000000610.589:1575): avc: denied { unmount } for pid=9087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 259.360621][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5241'. [ 259.382374][T16648] gtp0: entered promiscuous mode [ 259.387659][T16648] gtp0: entered allmulticast mode [ 259.391500][T16644] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.411998][T16650] team_slave_0: entered promiscuous mode [ 259.417791][T16650] team_slave_1: entered promiscuous mode [ 259.434949][T16650] macvtap1: entered promiscuous mode [ 259.440592][T16650] team0: entered promiscuous mode [ 259.447176][T16650] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 259.459983][T16650] team0: Device macvtap1 is already an upper device of the team interface [ 259.474536][T16650] team0: left promiscuous mode [ 259.483346][T16650] team_slave_0: left promiscuous mode [ 259.488815][T16650] team_slave_1: left promiscuous mode [ 259.493477][ T28] audit: type=1400 audit(2000000610.769:1576): avc: denied { setopt } for pid=16654 comm="syz.9.5244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.573933][T16666] netlink: 'syz.7.5250': attribute type 4 has an invalid length. [ 259.591163][T16665] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5261'. [ 259.627914][ T28] audit: type=1400 audit(2000000610.909:1577): avc: denied { setopt } for pid=16669 comm="syz.7.5264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.906194][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5268'. [ 260.515939][T16740] set_capacity_and_notify: 12 callbacks suppressed [ 260.515956][T16740] loop6: detected capacity change from 0 to 128 [ 260.592594][T16744] loop7: detected capacity change from 0 to 512 [ 260.608691][T16744] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 260.623110][T16744] EXT4-fs (loop7): 1 truncate cleaned up [ 260.629342][T16744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.690364][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.891028][T16770] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.900212][T16766] loop1: detected capacity change from 0 to 1024 [ 260.938527][T16766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.942828][T16774] loop6: detected capacity change from 0 to 512 [ 260.986725][T16774] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.5299: inode has both inline data and extents flags [ 261.026948][T16774] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 261.027163][T16774] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5299: couldn't read orphan inode 15 (err -117) [ 261.036437][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 261.036464][ C0] EXT4-fs (loop6): initial error at time 2000000612: ext4_orphan_get:1391: inode 15 [ 261.036501][ C0] EXT4-fs (loop6): last error at time 2000000612: ext4_orphan_get:1391: inode 15 [ 261.073803][T16774] loop6: lost filesystem error report for type 5 error -117 [ 261.076454][T16774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.077575][T15234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.168559][T16788] team_slave_0: entered promiscuous mode [ 261.174301][T16788] team_slave_1: entered promiscuous mode [ 261.194685][T16791] loop9: detected capacity change from 0 to 1024 [ 261.203004][T16788] macvtap1: entered promiscuous mode [ 261.204392][T16791] EXT4-fs: inline encryption not supported [ 261.214551][T16791] EXT4-fs: Ignoring removed nobh option [ 261.216112][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.224204][T16791] EXT4-fs: Ignoring removed bh option [ 261.235562][T16788] team0: entered promiscuous mode [ 261.243498][T16792] loop1: detected capacity change from 0 to 512 [ 261.259352][T16792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 261.271881][T16788] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 261.281803][T16788] team0: Device macvtap1 is already an upper device of the team interface [ 261.290805][T16791] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.304511][T16792] EXT4-fs (loop1): 1 truncate cleaned up [ 261.312951][T16792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.326334][T16788] team0: left promiscuous mode [ 261.332637][T16788] team_slave_0: left promiscuous mode [ 261.338119][T16788] team_slave_1: left promiscuous mode [ 261.374880][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.423427][T15234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.453050][T16799] loop9: detected capacity change from 0 to 1764 [ 261.590873][T16812] loop9: detected capacity change from 0 to 256 [ 261.601415][T16812] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.672028][T16818] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 261.717925][T16818] FAT-fs (loop9): Filesystem has been set read-only [ 261.770577][T16818] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 261.931660][T16831] loop7: detected capacity change from 0 to 512 [ 261.950881][T16833] loop8: detected capacity change from 0 to 512 [ 261.961488][T16811] Process accounting resumed [ 261.966169][T16811] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 261.980085][T16833] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 261.991340][T16831] EXT4-fs: Ignoring removed i_version option [ 262.007187][T16831] EXT4-fs: Ignoring removed bh option [ 262.013468][T16833] EXT4-fs (loop8): 1 truncate cleaned up [ 262.021096][T16833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.065483][T16831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.083963][T16839] team_slave_0: entered promiscuous mode [ 262.089711][T16839] team_slave_1: entered promiscuous mode [ 262.096219][ T5791] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 262.096267][T16839] macvtap1: entered promiscuous mode [ 262.096285][T16839] team0: entered promiscuous mode [ 262.099007][T16839] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 262.119202][T16831] ext4 filesystem being mounted at /626/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.123907][T16839] team0: Device macvtap1 is already an upper device of the team interface [ 262.142814][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.153053][T16839] team0: left promiscuous mode [ 262.158091][T16839] team_slave_0: left promiscuous mode [ 262.163632][T16839] team_slave_1: left promiscuous mode [ 262.198703][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.821413][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5346'. [ 262.835595][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5346'. [ 262.845702][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5346'. [ 262.854857][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5346'. [ 262.886025][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5348'. [ 262.992653][T16898] EXT4-fs: inline encryption not supported [ 262.998632][T16898] EXT4-fs: Ignoring removed nobh option [ 263.039177][T16898] EXT4-fs: Ignoring removed bh option [ 263.070835][T16898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.195666][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.221742][T16906] EXT4-fs (loop7): filesystem is read-only [ 263.227960][T16906] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 263.241267][T16906] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 263.253126][T16906] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 263.284906][T16906] EXT4-fs error (device loop7): ext4_get_journal_inode:5863: comm syz.7.5353: inode #1: comm syz.7.5353: iget: illegal inode # [ 263.298643][T16906] loop7: lost filesystem error report for type 5 error -117 [ 263.298810][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 263.312624][ C1] EXT4-fs (loop7): initial error at time 2000000614: ext4_get_journal_inode:5863 [ 263.321891][ C1] EXT4-fs (loop7): last error at time 2000000614: ext4_get_journal_inode:5863 [ 263.352930][T16906] EXT4-fs (loop7): no journal found [ 263.370703][T16906] EXT4-fs (loop7): can't get journal size [ 263.376885][T16906] EXT4-fs error (device loop7): __ext4_fill_super:5563: inode #2: comm syz.7.5353: iget: special inode unallocated [ 263.389918][T16906] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 263.390285][T16906] EXT4-fs (loop7): get root inode failed [ 263.406328][T16906] EXT4-fs (loop7): mount failed [ 263.463779][T16906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 263.508731][T16906] ext4 filesystem being mounted at /633/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.606190][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 263.639505][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 263.639522][ T28] audit: type=1400 audit(2000000614.929:1604): avc: denied { write } for pid=16935 comm="syz.7.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.995469][ T28] audit: type=1400 audit(2000000615.279:1605): avc: denied { create } for pid=16953 comm="syz.7.5372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.025510][T16957] team_slave_0: entered promiscuous mode [ 264.031252][T16957] team_slave_1: entered promiscuous mode [ 264.037148][T16957] macvtap1: entered promiscuous mode [ 264.055278][T16957] team0: entered promiscuous mode [ 264.076273][T16957] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 264.088323][T16959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.095890][T16957] team0: Device macvtap1 is already an upper device of the team interface [ 264.133831][T16957] team0: left promiscuous mode [ 264.144728][T16957] team_slave_0: left promiscuous mode [ 264.150244][T16957] team_slave_1: left promiscuous mode [ 264.156749][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.399819][T16982] EXT4-fs: inline encryption not supported [ 264.417153][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5385'. [ 264.430691][T16982] EXT4-fs: Ignoring removed bh option [ 264.447012][T16987] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5385'. [ 264.467002][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5385'. [ 264.478378][T16982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.487705][T16987] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5385'. [ 264.519764][T16991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16991 comm=syz.8.5386 [ 264.546310][ T28] audit: type=1400 audit(2000000615.829:1606): avc: denied { mounton } for pid=16981 comm="syz.7.5383" path="/641/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 264.570293][ T28] audit: type=1400 audit(2000000615.829:1607): avc: denied { append } for pid=16981 comm="syz.7.5383" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.600989][ T28] audit: type=1400 audit(2000000615.869:1608): avc: denied { bind } for pid=16990 comm="syz.8.5386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.621383][ T28] audit: type=1400 audit(2000000615.909:1609): avc: denied { rmdir } for pid=9087 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.663522][ T28] audit: type=1400 audit(2000000615.939:1610): avc: denied { unlink } for pid=9087 comm="syz-executor" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 264.691573][ T28] audit: type=1400 audit(2000000615.939:1611): avc: denied { unlink } for pid=9087 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 264.691777][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.724182][ T28] audit: type=1400 audit(2000000615.949:1612): avc: denied { unmount } for pid=9087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 264.746405][T16998] team_slave_0: entered promiscuous mode [ 264.752187][T16998] team_slave_1: entered promiscuous mode [ 264.762334][T16998] macvtap1: entered promiscuous mode [ 264.767790][T16998] team0: entered promiscuous mode [ 264.774949][T16998] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 264.782423][T16998] team0: Device macvtap1 is already an upper device of the team interface [ 264.793884][T16998] team0: left promiscuous mode [ 264.799206][T16998] team_slave_0: left promiscuous mode [ 264.804644][T16998] team_slave_1: left promiscuous mode [ 264.874133][ T28] audit: type=1400 audit(2000000615.949:1613): avc: denied { unlink } for pid=9087 comm="syz-executor" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 264.937952][T17006] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.029458][T17011] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 265.037433][T17011] FAT-fs (loop7): Filesystem has been set read-only [ 265.056511][T17011] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 265.317712][T17005] Process accounting resumed [ 265.325339][T17005] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 265.452807][ T36] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 265.807531][T17067] netlink: 'syz.7.5420': attribute type 10 has an invalid length. [ 265.815856][T17067] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.5420'. [ 266.195563][T17094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17094 comm=syz.6.5443 [ 266.261747][T17099] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 266.331844][T17102] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5436'. [ 266.372903][T17105] set_capacity_and_notify: 7 callbacks suppressed [ 266.372919][T17105] loop6: detected capacity change from 0 to 1024 [ 266.392837][T17105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.414696][T17105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.451457][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.540616][T17115] loop7: detected capacity change from 0 to 8192 [ 266.553689][T17115] bio_check_eod: 12 callbacks suppressed [ 266.553766][T17115] syz.7.5441: attempt to access beyond end of device [ 266.553766][T17115] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 266.584625][T17115] buffer_io_error: 2 callbacks suppressed [ 266.584640][T17115] Buffer I/O error on dev loop7, logical block 57847, async page read [ 266.637923][T17129] syz.7.5441: attempt to access beyond end of device [ 266.637923][T17129] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 266.660913][T17129] Buffer I/O error on dev loop7, logical block 57847, async page read [ 266.676793][T17129] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 266.687469][T17129] FAT-fs (loop7): Filesystem has been set read-only [ 266.695346][T17129] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 266.890671][T17149] loop6: detected capacity change from 0 to 256 [ 266.909766][T17149] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.978050][T17158] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 267.007885][T17158] FAT-fs (loop6): Filesystem has been set read-only [ 267.015351][T17158] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 267.046946][T17160] loop9: detected capacity change from 0 to 128 [ 267.071839][T17160] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.088630][T17160] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.133847][T17166] loop9: detected capacity change from 0 to 1024 [ 267.144992][T17166] EXT4-fs (loop9): filesystem is read-only [ 267.152033][T17166] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 267.174449][T17158] Process accounting resumed [ 267.175778][T17166] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 267.181424][T17158] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 267.198001][T17166] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 267.208545][T17166] EXT4-fs error (device loop9): ext4_get_journal_inode:5863: comm syz.9.5463: inode #1: comm syz.9.5463: iget: illegal inode # [ 267.222570][T17166] loop9: lost filesystem error report for type 5 error -117 [ 267.222685][T17166] EXT4-fs (loop9): no journal found [ 267.230139][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 267.230161][ C0] EXT4-fs (loop9): initial error at time 2000000618: ext4_get_journal_inode:5863 [ 267.230187][ C0] EXT4-fs (loop9): last error at time 2000000618: ext4_get_journal_inode:5863 [ 267.260237][T17166] EXT4-fs (loop9): can't get journal size [ 267.266431][T17166] EXT4-fs error (device loop9): __ext4_fill_super:5563: inode #2: comm syz.9.5463: iget: special inode unallocated [ 267.278729][T17166] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 267.282060][T17166] EXT4-fs (loop9): get root inode failed [ 267.297088][T17166] EXT4-fs (loop9): mount failed [ 267.303379][ T1032] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 267.337484][T17166] loop9: detected capacity change from 0 to 512 [ 267.353573][T17166] ext4 filesystem being mounted at /202/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.688905][T17200] netlink: 'syz.9.5476': attribute type 10 has an invalid length. [ 267.718833][T17200] netlink: 65015 bytes leftover after parsing attributes in process `syz.9.5476'. [ 267.759649][T17208] SELinux: failed to load policy [ 267.789036][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.851747][T17220] netlink: 'syz.7.5484': attribute type 3 has an invalid length. [ 267.860327][T17220] netlink: 'syz.7.5484': attribute type 1 has an invalid length. [ 267.871019][T17220] netlink: 60387 bytes leftover after parsing attributes in process `syz.7.5484'. [ 268.005186][T17239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5494'. [ 268.069562][T17244] loop9: detected capacity change from 0 to 1024 [ 268.077540][T17244] EXT4-fs: inline encryption not supported [ 268.126558][T17244] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 268.495157][T17275] SELinux: failed to load policy [ 268.516549][T17259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.536890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.684835][T17287] loop9: detected capacity change from 0 to 8192 [ 268.731491][T17287] syz.9.5515: attempt to access beyond end of device [ 268.731491][T17287] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 268.765286][T17287] Buffer I/O error on dev loop9, logical block 57847, async page read [ 268.774432][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 268.774448][ T28] audit: type=1400 audit(2000000620.059:1639): avc: denied { ioctl } for pid=17296 comm="syz.8.5520" path="socket:[50035]" dev="sockfs" ino=50035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.784628][T17287] syz.9.5515: attempt to access beyond end of device [ 268.784628][T17287] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 268.824761][T17287] Buffer I/O error on dev loop9, logical block 57847, async page read [ 268.831794][ T28] audit: type=1400 audit(2000000620.099:1640): avc: denied { setopt } for pid=17294 comm="syz.1.5519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.853222][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.860611][T17287] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 268.873790][T17287] FAT-fs (loop9): Filesystem has been set read-only [ 268.882036][T17287] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 269.053738][T17318] loop8: detected capacity change from 0 to 256 [ 269.060337][ T28] audit: type=1400 audit(2000000620.319:1641): avc: denied { create } for pid=17308 comm="syz.9.5525" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.084648][T17318] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.096056][ T28] audit: type=1400 audit(2000000620.349:1642): avc: denied { read } for pid=17308 comm="syz.9.5525" name="file0" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.120971][ T28] audit: type=1400 audit(2000000620.359:1643): avc: denied { open } for pid=17308 comm="syz.9.5525" path="/216/file0" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.158432][ T28] audit: type=1400 audit(2000000620.439:1644): avc: denied { unlink } for pid=14222 comm="syz-executor" name="file0" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.204698][T17320] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 269.223280][T17320] FAT-fs (loop8): Filesystem has been set read-only [ 269.231990][T17320] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 269.253985][T17322] netlink: 'syz.9.5540': attribute type 3 has an invalid length. [ 269.268052][T17322] netlink: 'syz.9.5540': attribute type 1 has an invalid length. [ 269.285329][T17326] syzkaller1: entered promiscuous mode [ 269.291274][T17326] syzkaller1: entered allmulticast mode [ 269.307119][T17322] netlink: 60387 bytes leftover after parsing attributes in process `syz.9.5540'. [ 269.515821][T17320] Process accounting resumed [ 269.529717][T17320] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779264) [ 269.561641][ T28] audit: type=1400 audit(2000000620.849:1645): avc: denied { setopt } for pid=17348 comm="syz.6.5542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 269.650040][ T36] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779264) [ 269.792631][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.885227][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.918420][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5552'. [ 270.155464][T17395] loop6: detected capacity change from 0 to 1024 [ 270.181069][T17395] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 270.192048][T17395] System zones: 0-1, 3-36 [ 270.197180][T17395] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.5560: bad orphan inode 134217728 [ 270.209145][T17395] loop6: lost filesystem error report for type 5 error -117 [ 270.313074][ T28] audit: type=1400 audit(2000000621.599:1646): avc: denied { watch watch_reads } for pid=17407 comm="syz.7.5568" path="/683/file1/file0" dev="loop7" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 270.351214][T17404] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 270.537004][T17426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.613474][T17426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.679141][T17426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.191565][T17479] Alternate GPT is invalid, using primary GPT. [ 271.198082][T17479] loop6: p1 p2 p3 [ 271.212733][ T28] audit: type=1400 audit(2000000622.499:1647): avc: denied { read write } for pid=17478 comm="syz.6.5593" name="loop6p2" dev="devtmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 271.262345][T14221] udevd[14221]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 271.274385][T15267] udevd[15267]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 271.287818][T14489] udevd[14489]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 271.311254][ T28] audit: type=1400 audit(2000000622.499:1648): avc: denied { open } for pid=17478 comm="syz.6.5593" path="/dev/loop6p2" dev="devtmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 271.410138][T17497] Cannot find del_set index 2 as target [ 271.494697][T17506] syzkaller1: entered promiscuous mode [ 271.500758][T17506] syzkaller1: entered allmulticast mode [ 271.818000][T17515] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 272.831752][ T3398] net_ratelimit: 1036 callbacks suppressed [ 272.831772][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.953170][T17560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.969975][T17560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.978564][T17560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.987308][T17560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.995713][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.010750][T17560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.029848][T17560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.053079][T17559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.157330][T17571] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5634'. [ 273.172258][T17571] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5634'. [ 273.202214][T17575] Cannot find del_set index 2 as target [ 273.299505][T17583] set_capacity_and_notify: 2 callbacks suppressed [ 273.299526][T17583] loop9: detected capacity change from 0 to 1024 [ 273.354131][T17583] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.407082][T17583] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.5638: lblock 0 mapped to illegal pblock 0 (length 1) [ 273.480944][T17583] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 273.527507][T17603] loop7: detected capacity change from 0 to 2048 [ 273.534558][T17583] EXT4-fs (loop9): This should not happen!! Data will be lost [ 273.534558][T17583] [ 273.550515][T14489] Alternate GPT is invalid, using primary GPT. [ 273.563260][T14489] loop7: p1 p2 p3 [ 273.590244][T17603] Alternate GPT is invalid, using primary GPT. [ 273.596659][T17603] loop7: p1 p2 p3 [ 273.711486][T17614] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5650'. [ 273.712815][T15267] udevd[15267]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 273.714668][T14489] udevd[14489]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 273.742822][T14221] udevd[14221]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 273.772078][T17616] batadv_slave_1: entered promiscuous mode [ 273.781026][T17615] batadv_slave_1: left promiscuous mode [ 274.036649][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.518730][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 274.529865][ T28] audit: type=1400 audit(2000000625.799:1653): avc: denied { mount } for pid=17665 comm="syz.8.5672" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 274.575392][ T28] audit: type=1400 audit(2000000625.799:1654): avc: denied { search } for pid=17665 comm="syz.8.5672" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 274.599262][ T28] audit: type=1400 audit(2000000625.799:1655): avc: denied { read open } for pid=17665 comm="syz.8.5672" path="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.295868][ T28] audit: type=1400 audit(2000000626.569:1656): avc: denied { read write } for pid=17698 comm="syz.6.5690" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 275.359086][ T28] audit: type=1400 audit(2000000626.569:1657): avc: denied { open } for pid=17698 comm="syz.6.5690" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 275.419451][ T28] audit: type=1400 audit(2000000626.639:1658): avc: denied { append } for pid=17704 comm="syz.6.5694" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 275.467162][T17711] batadv_slave_1: entered promiscuous mode [ 275.489013][T17708] batadv_slave_1: left promiscuous mode [ 275.493555][ T28] audit: type=1400 audit(2000000626.769:1659): avc: denied { shutdown } for pid=17706 comm="syz.1.5693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.559235][ T28] audit: type=1400 audit(2000000626.839:1660): avc: denied { connect } for pid=17715 comm="syz.1.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.648313][T17725] loop8: detected capacity change from 0 to 1024 [ 275.683588][ T28] audit: type=1400 audit(2000000626.969:1661): avc: denied { setopt } for pid=17726 comm="syz.6.5705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.730462][T17725] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.758380][T17734] loop9: detected capacity change from 0 to 128 [ 275.768467][T17725] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.5703: lblock 0 mapped to illegal pblock 0 (length 1) [ 275.791962][ T28] audit: type=1400 audit(2000000627.069:1662): avc: denied { read } for pid=17730 comm="syz.1.5706" lport=35904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 275.825550][T17725] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 275.838181][T17725] EXT4-fs (loop8): This should not happen!! Data will be lost [ 275.838181][T17725] [ 275.981746][T17744] loop8: detected capacity change from 0 to 512 [ 276.020378][T17744] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.041343][T17744] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 276.064552][T17744] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5710: bg 0: block 248: padding at end of block bitmap is not set [ 276.118440][T17744] loop8: lost filesystem error report for type 5 error -117 [ 276.118726][T17744] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.5710: Failed to acquire dquot type 1 [ 276.118789][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 276.143886][ C0] EXT4-fs (loop8): last error at time 2000000627: ext4_validate_block_bitmap:441 [ 276.178974][T17744] loop8: lost filesystem error report for type 5 error -117 [ 276.179494][T17744] EXT4-fs (loop8): 1 truncate cleaned up [ 276.218865][T17749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.227503][T17749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.332857][T17761] loop7: detected capacity change from 0 to 128 [ 276.367390][T17765] loop1: detected capacity change from 0 to 1024 [ 276.391223][T17765] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.402984][T17771] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5716'. [ 276.415264][T17765] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.5719: lblock 0 mapped to illegal pblock 0 (length 1) [ 276.416633][T17761] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5716'. [ 276.441426][T17765] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 276.454022][T17765] EXT4-fs (loop1): This should not happen!! Data will be lost [ 276.454022][T17765] [ 277.197392][T17830] loop7: detected capacity change from 0 to 1024 [ 277.212495][T17830] EXT4-fs: Ignoring removed orlov option [ 277.620616][T17843] loop1: detected capacity change from 0 to 512 [ 277.680869][T17843] EXT4-fs (loop1): 1 truncate cleaned up [ 277.764577][T17850] loop1: detected capacity change from 0 to 1024 [ 277.805188][T17850] EXT4-fs: Ignoring removed orlov option [ 277.839461][T17850] EXT4-fs: Ignoring removed nobh option [ 277.965756][T17862] net_ratelimit: 9 callbacks suppressed [ 277.965776][T17862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.007423][T17862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.016785][T17862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.035714][T17862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.058139][T17862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.093091][T17861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.137864][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.189177][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.197341][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.252869][T17875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.382602][T17896] loop1: detected capacity change from 0 to 128 [ 278.459726][T17900] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5772'. [ 278.478189][T17896] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5772'. [ 278.514931][T17902] loop9: detected capacity change from 0 to 512 [ 278.536987][T17902] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.568241][T17902] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 278.584609][T17902] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5774: bg 0: block 248: padding at end of block bitmap is not set [ 278.603576][T17902] loop9: lost filesystem error report for type 5 error -117 [ 278.603839][T17902] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.5774: Failed to acquire dquot type 1 [ 278.611211][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 278.611240][ C1] EXT4-fs (loop9): last error at time 2000000629: ext4_validate_block_bitmap:441 [ 278.620127][T17912] loop1: detected capacity change from 0 to 1024 [ 278.623839][T17902] loop9: lost filesystem error report for type 5 error -117 [ 278.646240][T17912] EXT4-fs: Ignoring removed orlov option [ 278.660268][T17902] EXT4-fs (loop9): 1 truncate cleaned up [ 278.667424][T17912] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 278.838716][T17936] loop8: detected capacity change from 0 to 128 [ 278.902455][T17939] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5787'. [ 278.912365][T17936] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5787'. [ 279.128292][T17945] loop8: detected capacity change from 0 to 2048 [ 279.227144][T17951] loop6: detected capacity change from 0 to 512 [ 279.253830][T17951] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.273278][T17951] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 279.288396][T17951] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5793: bg 0: block 248: padding at end of block bitmap is not set [ 279.303368][T17951] loop6: lost filesystem error report for type 5 error -117 [ 279.303721][T17951] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.5793: Failed to acquire dquot type 1 [ 279.311093][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 279.311110][ C0] EXT4-fs (loop6): last error at time 2000000630: ext4_validate_block_bitmap:441 [ 279.339870][T17951] loop6: lost filesystem error report for type 5 error -117 [ 279.340603][T17951] EXT4-fs (loop6): 1 truncate cleaned up [ 279.440103][T17965] loop6: detected capacity change from 0 to 512 [ 279.457206][T17965] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5799: invalid indirect mapped block 256 (level 2) [ 279.470967][T17965] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 279.471283][T17965] EXT4-fs (loop6): 2 truncates cleaned up [ 279.480482][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 279.480522][ C0] EXT4-fs (loop6): initial error at time 2000000630: ext4_free_branches:1023: inode 11 [ 279.480554][ C0] EXT4-fs (loop6): last error at time 2000000630: ext4_free_branches:1023: inode 11 [ 279.714469][T17979] loop7: detected capacity change from 0 to 512 [ 279.747275][T17979] EXT4-fs (loop7): 1 truncate cleaned up [ 279.760575][T17978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.772166][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 279.772184][ T28] audit: type=1400 audit(2000000631.059:1668): avc: denied { rename } for pid=17976 comm="syz.7.5803" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.082739][T18005] loop7: detected capacity change from 0 to 1024 [ 280.112219][T18005] EXT4-fs: Ignoring removed orlov option [ 280.152886][T18015] loop1: detected capacity change from 0 to 512 [ 280.177178][T18005] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 280.205529][T18015] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.216915][T18005] EXT4-fs (loop7): Remounting filesystem read-only [ 280.595485][T18055] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5837'. [ 280.992291][T18072] EXT4-fs (loop9): 1 truncate cleaned up [ 281.363061][T18079] netlink: 'syz.1.5849': attribute type 13 has an invalid length. [ 281.371221][T18079] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.5849'. [ 281.471173][ T28] audit: type=1326 audit(2000000632.759:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18089 comm="syz.6.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84e0c799 code=0x7ffc0000 [ 281.499867][ T28] audit: type=1326 audit(2000000632.789:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18089 comm="syz.6.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f8f84e0c799 code=0x7ffc0000 [ 281.525634][ T28] audit: type=1326 audit(2000000632.789:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18089 comm="syz.6.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84e0c799 code=0x7ffc0000 [ 281.552118][ T28] audit: type=1326 audit(2000000632.789:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18089 comm="syz.6.5852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84e0c799 code=0x7ffc0000 [ 281.651418][T18098] EXT4-fs (loop1): 1 truncate cleaned up [ 281.659250][T18098] EXT4-fs mount: 41 callbacks suppressed [ 281.659265][T18098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.732321][ T28] audit: type=1400 audit(2000000632.999:1673): avc: denied { create } for pid=18108 comm="syz.6.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 281.765896][ T28] audit: type=1400 audit(2000000633.009:1674): avc: denied { setopt } for pid=18108 comm="syz.6.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 281.785765][ T28] audit: type=1400 audit(2000000633.009:1675): avc: denied { bind } for pid=18108 comm="syz.6.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 281.848319][T18113] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5855: bg 0: block 465: padding at end of block bitmap is not set [ 281.874080][ T28] audit: type=1400 audit(2000000633.159:1676): avc: denied { mounton } for pid=18124 comm="syz.7.5868" path="/proc/1638/cgroup" dev="proc" ino=53356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 281.942238][T18113] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 281.968658][T18113] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5855: invalid indirect mapped block 234881024 (level 0) [ 282.087477][T15234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.141819][T18151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.164210][T18151] ext4 filesystem being mounted at /753/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.177490][T18154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.206940][ T28] audit: type=1326 audit(2000000633.489:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18161 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587537c799 code=0x7ffc0000 [ 282.273181][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.288643][T18164] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 282.318231][T18164] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 282.323561][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.341650][T18164] System zones: 0-1, 15-15, 18-18, 34-34 [ 282.391499][T18164] EXT4-fs (loop8): orphan cleanup on readonly fs [ 282.398175][T18164] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 282.412974][T18164] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 282.420631][T18164] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #16: comm syz.8.5883: iget: bad extended attribute block 1 [ 282.433384][T18164] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 282.433598][T18164] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5883: couldn't read orphan inode 16 (err -117) [ 282.442897][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 282.442919][ C0] EXT4-fs (loop8): initial error at time 2000000633: ext4_orphan_get:1391: inode 16 [ 282.442944][ C0] EXT4-fs (loop8): last error at time 2000000633: ext4_orphan_get:1391: inode 16 [ 282.482998][T18164] loop8: lost filesystem error report for type 5 error -117 [ 282.483620][T18164] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.504868][T18179] netlink: 'syz.7.5892': attribute type 13 has an invalid length. [ 282.506910][T18164] EXT4-fs (loop8): shut down requested (2) [ 282.537529][T18179] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.5892'. [ 282.547635][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.625529][T18192] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 282.674633][T18187] 9pnet: p9_errstr2errno: server reported unknown error [ 282.707549][ T35] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 283.233785][T18251] can0: slcan on ttyS3. [ 283.278956][T18251] can0 (unregistered): slcan off ttyS3. [ 283.284921][T18251] Falling back ldisc for ttyS3. [ 283.390004][ T3488] net_ratelimit: 13 callbacks suppressed [ 283.390023][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.403981][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.793350][T18271] set_capacity_and_notify: 8 callbacks suppressed [ 283.793371][T18271] loop9: detected capacity change from 0 to 512 [ 284.104892][T18271] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.131755][T18271] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.180779][T18271] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5933: corrupted inode contents [ 284.206355][T18271] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.5933: mark_inode_dirty error [ 284.233462][T18271] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5933: corrupted inode contents [ 284.262320][T18279] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5933: corrupted inode contents [ 284.288491][T18279] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.5933: mark_inode_dirty error [ 284.315779][T18279] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5933: corrupted inode contents [ 284.345200][T18279] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.5933: mark_inode_dirty error [ 284.386391][T18279] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5933: corrupted inode contents [ 284.423383][T18279] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.5933: mark_inode_dirty error [ 284.435424][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.459611][T18271] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.5933: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 284.459611][T18271] [ 284.489554][T18271] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.5933: corrupted inode contents [ 284.545085][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.650367][T18291] loop9: detected capacity change from 0 to 512 [ 284.674203][T18291] EXT4-fs (loop9): 1 truncate cleaned up [ 284.681346][T18291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.776119][T18294] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5939: bg 0: block 465: padding at end of block bitmap is not set [ 284.791503][T18294] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 284.801304][T18294] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5939: invalid indirect mapped block 234881024 (level 0) [ 284.874770][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.975780][T18308] loop6: detected capacity change from 0 to 128 [ 284.984185][T18308] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 285.015488][ T50] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.174758][T18353] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 286.620570][T18372] can0: slcan on ttyS3. [ 286.670258][T18372] can0 (unregistered): slcan off ttyS3. [ 286.676062][T18372] Falling back ldisc for ttyS3. [ 286.779090][T18387] syzkaller1: entered promiscuous mode [ 286.789794][T18387] syzkaller1: entered allmulticast mode [ 286.887050][T18397] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 286.997531][T18408] loop7: detected capacity change from 0 to 512 [ 287.004592][T18406] can0: slcan on ttyS3. [ 287.015821][T18408] EXT4-fs (loop7): 1 truncate cleaned up [ 287.040204][T18408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.071235][T18408] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5993: invalid indirect mapped block 234881024 (level 0) [ 287.088942][T18406] can0 (unregistered): slcan off ttyS3. [ 287.099542][T18406] Falling back ldisc for ttyS3. [ 287.120960][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.258425][T18436] loop7: detected capacity change from 0 to 512 [ 287.280660][T18436] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.5999: inode has both inline data and extents flags [ 287.295615][T18436] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.297728][T18436] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.5999: couldn't read orphan inode 15 (err -117) [ 287.307057][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 287.307082][ C1] EXT4-fs (loop7): initial error at time 2000000638: ext4_orphan_get:1391: inode 15 [ 287.307134][ C1] EXT4-fs (loop7): last error at time 2000000638: ext4_orphan_get:1391: inode 15 [ 287.345049][T18436] loop7: lost filesystem error report for type 5 error -117 [ 287.347752][T18436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.369231][T18441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6000'. [ 287.412919][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.426477][T18441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6000'. [ 287.692682][T18469] can0: slcan on ttyS3. [ 287.749669][T18469] can0 (unregistered): slcan off ttyS3. [ 287.763761][T18469] Falling back ldisc for ttyS3. [ 287.797240][T18476] syzkaller1: entered promiscuous mode [ 287.804517][T18478] loop9: detected capacity change from 0 to 1764 [ 287.813482][T18476] syzkaller1: entered allmulticast mode [ 287.829809][T18478] iso9660: Unknown parameter 'de' [ 287.955256][T18490] loop7: detected capacity change from 0 to 512 [ 288.119437][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 288.119454][ T28] audit: type=1400 audit(2000000639.409:1692): avc: denied { mounton } for pid=18502 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 288.150383][T18501] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6035'. [ 288.185735][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 288.197575][T18501] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6035'. [ 288.198872][ T28] audit: type=1400 audit(2000000639.469:1693): avc: denied { sys_module } for pid=18502 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 288.271627][ T1437] Bluetooth: hci1: Frame reassembly failed (-84) [ 288.386469][T18502] chnl_net:caif_netlink_parms(): no params data found [ 288.435952][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.449792][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.457222][T18502] bridge_slave_0: entered allmulticast mode [ 288.465910][T18502] bridge_slave_0: entered promiscuous mode [ 288.472776][T18529] netlink: 'syz.9.6031': attribute type 1 has an invalid length. [ 288.481371][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.489521][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.500715][T18502] bridge_slave_1: entered allmulticast mode [ 288.507435][T18502] bridge_slave_1: entered promiscuous mode [ 288.534796][T18502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.549645][T18533] syzkaller1: entered promiscuous mode [ 288.559054][T18533] syzkaller1: entered allmulticast mode [ 288.567605][T18502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.593533][T18502] team0: Port device team_slave_0 added [ 288.600335][T18502] team0: Port device team_slave_1 added [ 288.616349][T18502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.623375][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.649714][T18502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.661536][T18502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.668530][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.695099][T18502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.716057][ T28] audit: type=1326 audit(2000000639.999:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.748877][ T28] audit: type=1326 audit(2000000640.009:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.774145][ T28] audit: type=1326 audit(2000000640.009:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.785028][T18502] hsr_slave_0: entered promiscuous mode [ 288.797825][ T28] audit: type=1326 audit(2000000640.009:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.797872][ T28] audit: type=1326 audit(2000000640.009:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.797898][ T28] audit: type=1326 audit(2000000640.009:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.797924][ T28] audit: type=1326 audit(2000000640.009:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.807666][T18502] hsr_slave_1: entered promiscuous mode [ 288.835187][ T28] audit: type=1326 audit(2000000640.009:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18539 comm="syz.8.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc745e5c799 code=0x7ffc0000 [ 288.854938][T18502] debugfs: 'hsr0' already exists in 'hsr' [ 288.933462][T18502] Cannot create hsr debugfs directory [ 289.040499][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.047715][T18502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.055077][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.062365][T18502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.095342][T18502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.109485][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.117383][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.130300][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.142103][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.149385][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.161496][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.168632][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.239865][T18502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.355703][T18502] veth0_vlan: entered promiscuous mode [ 289.364244][T18502] veth1_vlan: entered promiscuous mode [ 289.383588][T18502] veth0_macvtap: entered promiscuous mode [ 289.391969][T18502] veth1_macvtap: entered promiscuous mode [ 289.404590][T18502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.417962][T18502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.495108][T18573] loop3: detected capacity change from 0 to 512 [ 289.843719][T18592] loop9: detected capacity change from 0 to 512 [ 289.880455][T18592] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.901761][T18592] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.963631][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.003767][T18605] loop9: detected capacity change from 0 to 512 [ 290.046237][T18605] EXT4-fs (loop9): 1 truncate cleaned up [ 290.061962][T18605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.084112][T18605] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.6054: invalid indirect mapped block 234881024 (level 0) [ 290.133430][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.188894][ T4246] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.227070][T18610] loop8: detected capacity change from 0 to 512 [ 290.358816][ T4246] Bluetooth: hci1: command 0x1003 tx timeout [ 290.358982][ T3825] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 291.083236][T18677] loop6: detected capacity change from 0 to 512 [ 291.100591][T18677] EXT4-fs (loop6): Invalid default hash set in the superblock [ 291.184075][T18680] loop7: detected capacity change from 0 to 128 [ 291.227487][T18685] loop8: detected capacity change from 0 to 512 [ 291.244890][T18680] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.293610][T18685] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.307962][T18680] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.385323][T18685] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.406329][T18687] syzkaller1: entered promiscuous mode [ 291.411166][T18685] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6091: corrupted inode contents [ 291.431396][T18685] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.6091: mark_inode_dirty error [ 291.439682][T18687] syzkaller1: entered allmulticast mode [ 291.453535][T18685] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.6091: corrupted inode contents [ 291.465728][T18685] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.6091: mark_inode_dirty error [ 291.490276][T18685] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.6091: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 291.490276][T18685] [ 291.516209][T18693] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6093'. [ 291.526822][T18693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6093'. [ 291.537409][T18693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6093'. [ 291.594711][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.638285][T18701] loop7: detected capacity change from 0 to 512 [ 291.684019][T18709] loop8: detected capacity change from 0 to 512 [ 291.718462][T18701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.731704][T18701] ext4 filesystem being mounted at /789/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.745617][T18701] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.6098: corrupted inode contents [ 291.761724][T18701] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.6098: mark_inode_dirty error [ 291.778918][T18701] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.6098: corrupted inode contents [ 291.800416][T18701] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.6098: corrupted inode contents [ 291.822445][T18722] loop8: detected capacity change from 0 to 128 [ 291.830083][T18722] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.838308][T18701] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.6098: mark_inode_dirty error [ 291.864545][T18722] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.877507][T18701] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.6098: corrupted inode contents [ 291.900366][T18701] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.6098: mark_inode_dirty error [ 291.921754][T18701] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.6098: corrupted inode contents [ 291.934915][ T1437] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.949028][T18701] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.6098: mark_inode_dirty error [ 291.997691][T18726] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.6098: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 291.997691][T18726] [ 292.019046][T18726] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.6098: corrupted inode contents [ 292.069425][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.430559][T18752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.839593][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6126'. [ 292.888019][T18781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.943497][T18784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.973454][T18784] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.993084][T18772] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.016113][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.026338][T18772] FAT-fs (loop8): Filesystem has been set read-only [ 293.033311][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.042484][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.052245][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.061759][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.070839][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.083530][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.092744][T18796] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.102048][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.111613][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.120649][T18796] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 293.129305][T18772] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 293.138447][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 293.138465][ T28] audit: type=1400 audit(2000000644.419:1725): avc: denied { remount } for pid=18771 comm="syz.8.6128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 293.191612][T18796] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 293.206631][T18502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.237043][T18796] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 293.245251][T18796] System zones: 0-2, 18-18, 34-35 [ 293.251133][T18796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.265758][ T28] audit: type=1400 audit(2000000644.549:1726): avc: denied { execute } for pid=18795 comm="syz.7.6138" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 293.308566][ T28] audit: type=1400 audit(2000000644.549:1727): avc: denied { execute_no_trans } for pid=18795 comm="syz.7.6138" path="/797/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 293.338457][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.375998][ T28] audit: type=1400 audit(2000000644.639:1728): avc: denied { ioctl } for pid=18805 comm="syz.6.6142" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 293.467295][T18810] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.488405][T18810] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.513008][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.635306][T18822] FAT-fs (loop3): Directory bread(block 64) failed [ 293.644008][T18822] FAT-fs (loop3): Directory bread(block 65) failed [ 293.666531][T18822] FAT-fs (loop3): Directory bread(block 66) failed [ 293.674906][T18822] FAT-fs (loop3): Directory bread(block 67) failed [ 293.683164][T18822] FAT-fs (loop3): Directory bread(block 68) failed [ 293.690907][T18822] FAT-fs (loop3): Directory bread(block 69) failed [ 293.701878][T18822] FAT-fs (loop3): Directory bread(block 70) failed [ 293.708436][T18822] FAT-fs (loop3): Directory bread(block 71) failed [ 293.716396][T18822] FAT-fs (loop3): Directory bread(block 72) failed [ 293.754116][T18822] FAT-fs (loop3): Directory bread(block 73) failed [ 293.779390][T18838] netlink: 'syz.7.6157': attribute type 83 has an invalid length. [ 293.826050][T18842] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.839181][T18842] ext4 filesystem being mounted at /803/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.852703][ T28] audit: type=1400 audit(2000000645.129:1729): avc: denied { read write } for pid=18839 comm="syz.6.6168" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 293.887308][T18845] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.898949][ T28] audit: type=1400 audit(2000000645.129:1730): avc: denied { open } for pid=18839 comm="syz.6.6168" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 293.924255][ T28] audit: type=1400 audit(2000000645.139:1731): avc: denied { execute } for pid=18841 comm="syz.7.6158" name="file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.935142][ T9087] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.948385][ T28] audit: type=1400 audit(2000000645.149:1732): avc: denied { execute_no_trans } for pid=18841 comm="syz.7.6158" path="/803/file1/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.980702][T18845] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.993021][T18848] SELinux: failed to load policy [ 294.041411][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.077223][ T28] audit: type=1326 audit(2000000645.359:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.3.6163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36e5a4c799 code=0x0 [ 294.230510][T18865] EXT4-fs: inline encryption not supported [ 294.255515][T18865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.261751][T18868] qrtr: Invalid version 0 [ 294.283709][T18865] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 294.302803][T18865] EXT4-fs (loop7): Remounting filesystem read-only [ 294.321078][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.533668][ T28] audit: type=1400 audit(2000000645.819:1734): avc: denied { read } for pid=18883 comm="syz.9.6176" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 294.933390][T18889] set_capacity_and_notify: 10 callbacks suppressed [ 294.933410][T18889] loop9: detected capacity change from 0 to 512 [ 294.942650][T18888] syzkaller1: entered promiscuous mode [ 294.962027][T18888] syzkaller1: entered allmulticast mode [ 294.964808][T18889] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.980319][T18889] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 294.989405][T18889] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 295.001507][T18889] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 295.009996][T18889] System zones: 0-2, 18-18, 34-35 [ 295.016163][T18889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.049971][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.073710][T18896] loop9: detected capacity change from 0 to 512 [ 295.115944][T18896] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.131201][T18896] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.290409][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.371369][T18918] loop9: detected capacity change from 0 to 256 [ 295.586773][T18920] loop7: detected capacity change from 0 to 8192 [ 295.596371][T18929] syzkaller1: entered promiscuous mode [ 295.602032][T18929] syzkaller1: entered allmulticast mode [ 295.615504][T18920] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.825300][ T5791] Process accounting resumed [ 295.901984][T18953] loop8: detected capacity change from 0 to 512 [ 296.357133][T18987] loop7: detected capacity change from 0 to 512 [ 296.364691][T18987] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.419579][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6222'. [ 296.514589][T18995] loop6: detected capacity change from 0 to 512 [ 296.694923][T18995] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.6224: Directory hole found for htree index block 0 [ 296.725041][T18995] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 296.725247][T18995] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 296.734388][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 296.734407][ C1] EXT4-fs (loop6): initial error at time 2000000648: dx_probe:791: inode 2 [ 296.734447][ C1] EXT4-fs (loop6): last error at time 2000000648: dx_probe:791: inode 2 [ 296.795181][T18999] loop7: detected capacity change from 0 to 512 [ 296.802519][T18995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.851892][T18999] EXT4-fs (loop7): 1 truncate cleaned up [ 296.858189][T18999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.875701][T18995] EXT4-fs (loop6): shut down requested (0) [ 296.922777][T18999] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6225: bg 0: block 465: padding at end of block bitmap is not set [ 296.941554][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.952808][T19006] loop9: detected capacity change from 0 to 128 [ 296.982202][T18999] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 12288 with max blocks 1 with error 117 [ 297.019033][T18999] EXT4-fs (loop7): This should not happen!! Data will be lost [ 297.019033][T18999] [ 297.074238][T18998] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 297.086980][T19019] Invalid argument reading file caps for ./file0 [ 297.089539][T18998] EXT4-fs (loop7): This should not happen!! Data will be lost [ 297.089539][T18998] [ 297.121286][T18998] EXT4-fs (loop7): Total free blocks count 0 [ 297.135475][T18998] EXT4-fs (loop7): Free/Dirty block details [ 297.143725][T18998] EXT4-fs (loop7): free_blocks=0 [ 297.166234][T18998] EXT4-fs (loop7): dirty_blocks=1 [ 297.184189][T18998] EXT4-fs (loop7): Block reservation details [ 297.206861][T19022] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.214089][T19022] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.300988][T19038] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 297.313750][T19038] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 297.374312][T19022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.388608][T19022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.443260][T19053] loop8: detected capacity change from 0 to 1024 [ 297.472928][T19053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.489596][T19053] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.511047][T19053] EXT4-fs (loop8): shut down requested (1) [ 297.558618][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 297.602543][T19070] syzkaller1: entered promiscuous mode [ 297.611947][T19070] syzkaller1: entered allmulticast mode [ 297.780271][T19090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.797409][T19090] EXT4-fs (loop6): orphan cleanup on readonly fs [ 297.812411][T19090] EXT4-fs error (device loop6): ext4_quota_enable:7188: comm syz.6.6266: Bad quota inum: 2, type: 2 [ 297.823460][T19090] loop6: lost filesystem error report for type 5 error -117 [ 297.823652][T19090] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 297.831125][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 297.831147][ C0] EXT4-fs (loop6): last error at time 2000000649: ext4_quota_enable:7188 [ 297.899120][T19090] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 297.915008][T19090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.964854][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.012663][T19098] EXT4-fs: Invalid want_extra_isize 2 [ 298.082737][T19101] EXT4-fs: inline encryption not supported [ 298.112074][T19101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.154810][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.217360][T19111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.230327][T19111] EXT4-fs (loop3): 1 truncate cleaned up [ 298.268671][T19111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.303010][T18502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.398511][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 298.398575][ T28] audit: type=1326 audit(2000000649.679:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19117 comm="syz.9.6277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ab322c799 code=0x0 [ 298.527698][T19134] IPv6: NLM_F_REPLACE set, but no existing node found! [ 298.777065][T19162] usb usb8: usbfs: process 19162 (syz.6.6297) did not claim interface 0 before use [ 298.779060][ T28] audit: type=1400 audit(2000000650.059:1766): avc: denied { shutdown } for pid=19157 comm="syz.3.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.850372][T19168] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.905132][T19171] EXT4-fs (loop8): 1 truncate cleaned up [ 298.919123][T19173] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 298.939468][T19173] FAT-fs (loop3): Filesystem has been set read-only [ 298.940189][T19171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.946582][T19173] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 298.966889][T19173] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 299.052906][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.089231][ T28] audit: type=1400 audit(2000000650.369:1767): avc: denied { ioctl } for pid=19181 comm="syz.8.6305" path="socket:[56472]" dev="sockfs" ino=56472 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 299.119150][T19182] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.131896][T19182] team0: Port device batadv1 added [ 299.297830][T19195] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6311'. [ 299.316491][T19197] EXT4-fs: Ignoring removed bh option [ 299.327383][T19197] EXT4-fs: inline encryption not supported [ 299.377261][T19197] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 299.381547][T19202] xt_hashlimit: size too large, truncated to 1048576 [ 299.450689][T19197] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 299.515181][T19215] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 299.539326][T19215] EXT4-fs (loop9): 1 truncate cleaned up [ 299.545206][T19197] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6310: bg 0: block 248: padding at end of block bitmap is not set [ 299.560370][T19197] loop8: lost filesystem error report for type 5 error -117 [ 299.560653][T19197] Quota error (device loop8): write_blk: dquota write failed [ 299.575494][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 299.575519][ C1] EXT4-fs (loop8): last error at time 2000000650: ext4_validate_block_bitmap:441 [ 299.581592][T19215] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.582672][T19197] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 299.614184][T19197] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.6310: Failed to acquire dquot type 1 [ 299.626298][T19197] loop8: lost filesystem error report for type 5 error -117 [ 299.660355][T19197] EXT4-fs (loop8): 1 truncate cleaned up [ 299.689337][T19197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 299.762607][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.810499][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 299.830349][ T28] audit: type=1400 audit(2000000651.119:1768): avc: denied { unmount } for pid=14222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 300.008626][T19252] tipc: Started in network mode [ 300.018192][T19252] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 300.037518][T19252] tipc: Enabled bearer , priority 10 [ 300.094481][T19259] set_capacity_and_notify: 9 callbacks suppressed [ 300.094496][T19259] loop6: detected capacity change from 0 to 128 [ 300.225884][T19265] netlink: 'syz.9.6340': attribute type 3 has an invalid length. [ 300.243333][T19265] netlink: 'syz.9.6340': attribute type 4 has an invalid length. [ 300.251894][T19265] netlink: 9067 bytes leftover after parsing attributes in process `syz.9.6340'. [ 300.261997][ T28] audit: type=1326 audit(2000000651.549:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.3.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e5a4c799 code=0x7ffc0000 [ 300.285796][ T28] audit: type=1326 audit(2000000651.549:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.3.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e5a4c799 code=0x7ffc0000 [ 300.309810][ T28] audit: type=1326 audit(2000000651.549:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.3.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f36e5a4c799 code=0x7ffc0000 [ 300.333592][ T28] audit: type=1326 audit(2000000651.549:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19266 comm="syz.3.6341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e5a4c799 code=0x7ffc0000 [ 300.454441][T19259] syz.6.6337: attempt to access beyond end of device [ 300.454441][T19259] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 300.471887][T19259] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 300.554009][T19278] loop6: detected capacity change from 0 to 1024 [ 300.583240][T19278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.629834][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.773647][T19289] netlink: 67 bytes leftover after parsing attributes in process `syz.6.6350'. [ 300.912807][T19306] loop8: detected capacity change from 0 to 128 [ 300.934999][T19306] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8) [ 300.944993][T19306] FAT-fs (loop8): Filesystem has been set read-only [ 300.951829][T19306] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522) [ 301.029430][ T5791] tipc: Node number set to 4269801504 [ 301.075370][T19318] loop7: detected capacity change from 0 to 128 [ 301.082864][T19318] vfat: Unknown parameter ']P:t#+QhP;RK}Ts;Sz?&\n[Jv7t@ vVTBC*L~' [ 301.146252][T19318] SELinux: failed to load policy [ 301.399429][T19342] loop6: detected capacity change from 0 to 512 [ 301.502154][T19342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.557929][T19342] ext4 filesystem being mounted at /1041/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.640039][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6383'. [ 301.928057][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.006727][T19373] loop7: detected capacity change from 0 to 128 [ 302.023941][T19373] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 302.034186][T19373] FAT-fs (loop7): Filesystem has been set read-only [ 302.122523][T19380] loop5: detected capacity change from 0 to 7 [ 302.158876][ C1] blk_print_req_error: 3 callbacks suppressed [ 302.158891][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.174651][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 302.186844][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.196498][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 302.205842][T19380] loop5: unable to read partition table [ 302.214037][T19387] loop7: detected capacity change from 0 to 512 [ 302.238013][T19380] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 302.239012][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.258964][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 302.267968][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.277588][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 302.296776][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.306453][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 302.315459][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.325122][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 302.351444][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 302.361094][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 302.392507][T19387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.436659][T19387] ext4 filesystem being mounted at /852/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.477792][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6393'. [ 302.512114][T19387] bond0: Unable to set up delay as MII monitoring is disabled [ 302.542179][T19403] syzkaller1: entered promiscuous mode [ 302.547736][T19403] syzkaller1: entered allmulticast mode [ 302.557768][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.762941][T19421] netlink: 15 bytes leftover after parsing attributes in process `syz.6.6405'. [ 302.822487][T19427] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 302.969790][T19447] loop6: detected capacity change from 0 to 128 [ 303.009946][T19447] syz.6.6417: attempt to access beyond end of device [ 303.009946][T19447] loop6: rw=8388611, sector=138, nr_sectors = 6 limit=128 [ 303.027312][T19447] syz.6.6417: attempt to access beyond end of device [ 303.027312][T19447] loop6: rw=8390659, sector=144, nr_sectors = 106 limit=128 [ 303.132544][T19467] loop6: detected capacity change from 0 to 1024 [ 303.167678][T19467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.188395][T19467] ext4 filesystem being mounted at /1050/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.202106][T19467] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.6425: lblock 0 mapped to illegal pblock 0 (length 1) [ 303.230705][T19467] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 303.244805][T19467] EXT4-fs (loop6): This should not happen!! Data will be lost [ 303.244805][T19467] [ 303.273433][ T12] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 303.295404][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 303.316766][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 303.316766][ T12] [ 303.328160][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 303.349282][T19482] netlink: 'syz.8.6432': attribute type 3 has an invalid length. [ 303.367491][T19482] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6432'. [ 303.520277][T19503] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.540322][T19503] ext4 filesystem being mounted at /867/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.633633][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 303.633652][ T28] audit: type=1400 audit(2000000654.919:1820): avc: denied { rename } for pid=19501 comm="syz.7.6441" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 303.684323][T19503] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 20: comm syz.7.6441: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 303.712166][T19503] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 303.887652][ T9087] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.985054][T19525] EXT4-fs: Ignoring removed bh option [ 304.049413][T19532] serio: Serial port ptm0 [ 304.640291][T19579] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.659698][ T28] audit: type=1326 audit(2000000655.949:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19576 comm="syz.6.6472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f84e0c799 code=0x0 [ 304.661188][T19575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 304.697773][T19575] System zones: 1-3, 19-19, 35-36 [ 304.716772][T19575] ext4 filesystem being mounted at /874/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.119049][ T28] audit: type=1400 audit(2000000656.409:1822): avc: denied { mounton } for pid=19605 comm="syz.9.6485" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 305.145461][T19609] set_capacity_and_notify: 6 callbacks suppressed [ 305.145479][T19609] loop8: detected capacity change from 0 to 512 [ 305.416541][ T28] audit: type=1400 audit(2000000656.699:1823): avc: denied { ioctl } for pid=19628 comm="syz.8.6496" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 305.498559][ T28] audit: type=1400 audit(2000000656.779:1824): avc: denied { bind } for pid=19635 comm="syz.9.6498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 305.556641][ T28] audit: type=1400 audit(2000000656.839:1825): avc: denied { mount } for pid=19641 comm="syz.9.6501" name="/" dev="hugetlbfs" ino=57124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 305.674093][T19657] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6509'. [ 305.683400][ T28] audit: type=1400 audit(2000000656.959:1826): avc: denied { nlmsg_read } for pid=19656 comm="syz.6.6509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.738665][T19660] loop3: detected capacity change from 0 to 512 [ 305.752934][T19660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.820477][T19660] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6511: bad orphan inode 131083 [ 305.831541][T19660] loop3: lost filesystem error report for type 5 error -117 [ 305.849374][ T28] audit: type=1400 audit(2000000657.119:1827): avc: denied { add_name } for pid=19673 comm="syz.7.6515" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 305.932345][ T28] audit: type=1400 audit(2000000657.119:1828): avc: denied { create } for pid=19673 comm="syz.7.6515" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 305.960590][ T28] audit: type=1400 audit(2000000657.119:1829): avc: denied { write } for pid=19669 comm="syz.8.6516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 306.042355][T19680] loop3: detected capacity change from 0 to 128 [ 306.117757][T19694] loop7: detected capacity change from 0 to 1024 [ 306.132544][T19694] EXT4-fs: Ignoring removed bh option [ 306.150147][T19700] loop3: detected capacity change from 0 to 512 [ 306.178857][T19694] ext4 filesystem being mounted at /881/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.199307][T19700] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.201832][T19691] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.224941][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.239472][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.254259][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.272389][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.288393][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.310297][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.325187][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.339943][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.360501][T19691] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: comm syz.7.6525: lblock 0 mapped to illegal pblock 0 (length 1) [ 306.383356][T19712] netlink: 'syz.8.6533': attribute type 6 has an invalid length. [ 306.665510][T19732] loop7: detected capacity change from 0 to 512 [ 307.091913][T19761] loop7: detected capacity change from 0 to 128 [ 307.334867][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6560'. [ 307.505344][T19786] loop9: detected capacity change from 0 to 1024 [ 307.574407][T19786] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.588102][T19786] EXT4-fs (loop9): shut down requested (1) [ 307.636443][T19799] Invalid argument reading file caps for ./file0 [ 307.705915][T19808] loop6: detected capacity change from 0 to 1024 [ 307.735405][T19812] loop8: detected capacity change from 0 to 512 [ 307.748004][T19808] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 307.758711][T19812] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 307.782447][T19808] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.6575: lblock 2 mapped to illegal pblock 2 (length 1) [ 307.798394][T19808] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 307.798560][T19808] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.6575: lblock 0 mapped to illegal pblock 48 (length 1) [ 307.807791][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 307.807813][ C1] EXT4-fs (loop6): initial error at time 2000000659: ext4_map_blocks:776: inode 3: block 2 [ 307.807860][ C1] EXT4-fs (loop6): last error at time 2000000659: ext4_map_blocks:776: inode 3: block 2 [ 307.851592][T19812] EXT4-fs (loop8): 1 truncate cleaned up [ 307.869608][T19808] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 307.870478][T19808] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6575: Failed to acquire dquot type 0 [ 307.906465][T19820] EXT4-fs: Ignoring removed oldalloc option [ 307.912959][T19820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.923531][T19808] loop6: lost filesystem error report for type 5 error -117 [ 307.924329][T19808] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 307.945395][T19808] loop6: lost filesystem error report for type 5 error -117 [ 307.951097][T19822] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 307.956946][T19808] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.6575: mark_inode_dirty error [ 307.969781][T19820] EXT4-fs (loop3): 1 truncate cleaned up [ 307.983484][T19808] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 307.983651][T19822] FAT-fs (loop9): Filesystem has been set read-only [ 308.007346][T19808] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 308.029700][T19822] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 308.037481][T19808] EXT4-fs (loop6): 1 orphan inode deleted [ 308.049088][ T1396] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.086685][ T1396] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 308.115141][T19808] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 308.141043][T19832] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 308.158090][T19832] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.6575: lblock 0 mapped to illegal pblock 48 (length 1) [ 308.175176][T19832] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 308.192640][T19836] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.275670][T19844] EXT4-fs: inline encryption not supported [ 308.331981][T19844] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 308.361482][T19844] EXT4-fs (loop8): Remounting filesystem read-only [ 308.681924][T19877] EXT4-fs: inline encryption not supported [ 308.715226][T19877] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 308.754501][T19877] EXT4-fs (loop9): Remounting filesystem read-only [ 308.784525][T19892] EXT4-fs: Ignoring removed i_version option [ 308.811357][T19892] ext4 filesystem being mounted at /898/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.834044][T19891] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.6608: lblock 0 mapped to illegal pblock 0 (length 1) [ 308.850574][T19891] EXT4-fs (loop7): Remounting filesystem read-only [ 308.882216][T19901] usb usb8: usbfs: process 19901 (syz.9.6614) did not claim interface 0 before use [ 308.894241][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 308.894260][ T28] audit: type=1400 audit(2000000660.179:1837): avc: denied { ioctl } for pid=19904 comm="syz.7.6613" path="socket:[58519]" dev="sockfs" ino=58519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 309.103872][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 309.125031][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.208438][T19941] netlink: 'syz.6.6630': attribute type 3 has an invalid length. [ 309.216701][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6630'. [ 309.288998][T19946] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 309.614867][T19967] netlink: 'syz.8.6641': attribute type 16 has an invalid length. [ 309.635819][T19967] netlink: 'syz.8.6641': attribute type 17 has an invalid length. [ 309.663559][T19967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.701876][T19973] netlink: 'syz.3.6644': attribute type 2 has an invalid length. [ 309.849411][T19987] netlink: 792 bytes leftover after parsing attributes in process `syz.9.6650'. [ 309.858533][T19987] netlink: 792 bytes leftover after parsing attributes in process `syz.9.6650'. [ 309.877828][T19987] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6650'. [ 310.034615][ T28] audit: type=1326 audit(2000000661.319:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f84e0c799 code=0x7ffc0000 [ 310.049498][T20002] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 310.093396][ T28] audit: type=1326 audit(2000000661.319:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8f84e0c799 code=0x7ffc0000 [ 310.120552][ T28] audit: type=1326 audit(2000000661.319:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8f84e0c502 code=0x7ffc0000 [ 310.159739][ T28] audit: type=1326 audit(2000000661.319:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f84dccfce code=0x7ffc0000 [ 310.230751][ T28] audit: type=1326 audit(2000000661.319:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8f84e0c5c7 code=0x7ffc0000 [ 310.255973][ T28] audit: type=1326 audit(2000000661.319:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f84dccfce code=0x7ffc0000 [ 310.281044][ T28] audit: type=1326 audit(2000000661.319:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f84e0c42b code=0x7ffc0000 [ 310.304770][ T28] audit: type=1326 audit(2000000661.319:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8f84dccfce code=0x7ffc0000 [ 310.350908][ T28] audit: type=1326 audit(2000000661.319:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20001 comm="syz.6.6655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8f84dccfce code=0x7ffc0000 [ 310.382132][T20011] IPv6: NLM_F_CREATE should be specified when creating new route [ 310.420185][T20017] qrtr: Invalid version 0 [ 310.544738][T20027] set_capacity_and_notify: 11 callbacks suppressed [ 310.544755][T20027] loop7: detected capacity change from 0 to 128 [ 310.567306][T20027] ext4 filesystem being mounted at /915/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.603797][T20032] loop8: detected capacity change from 0 to 512 [ 310.612287][T20032] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 310.710218][T20040] Invalid argument reading file caps for ./file0 [ 310.731622][T20044] Invalid argument reading file caps for ./file0 [ 310.932770][T20063] loop6: detected capacity change from 0 to 1024 [ 310.952698][T20063] EXT4-fs: Ignoring removed orlov option [ 311.354003][T20090] netlink: 7 bytes leftover after parsing attributes in process `syz.8.6693'. [ 311.744725][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6702'. [ 311.802442][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6705'. [ 311.814899][T20118] bond_slave_0: entered promiscuous mode [ 311.820639][T20118] bond_slave_1: entered promiscuous mode [ 311.827461][T20118] macvlan5: entered promiscuous mode [ 311.833040][T20118] bond0: entered promiscuous mode [ 311.839651][T20118] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 311.881454][T20122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6707'. [ 311.890750][T20122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.932278][T20122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.108426][T20147] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6719'. [ 312.320728][T20159] pim6reg1: entered promiscuous mode [ 312.326306][T20159] pim6reg1: entered allmulticast mode [ 312.664248][T20175] loop3: detected capacity change from 0 to 2048 [ 312.793430][T20181] SELinux: failed to load policy [ 312.992390][T20201] __nla_validate_parse: 1 callbacks suppressed [ 312.992521][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6743'. [ 313.020240][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6743'. [ 313.065457][T20211] sd 0:0:1:0: device reset [ 313.113468][T20216] loop6: detected capacity change from 0 to 512 [ 313.128381][T20216] EXT4-fs: Ignoring removed nobh option [ 313.142452][T20216] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.164387][T20216] EXT4-fs (loop6): 1 truncate cleaned up [ 313.185310][T20216] EXT4-fs mount: 32 callbacks suppressed [ 313.185366][T20216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.213797][T20216] EXT4-fs (loop6): shut down requested (0) [ 313.269231][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.700750][T20285] loop9: detected capacity change from 0 to 128 [ 313.733778][T20285] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.787699][T20285] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 313.852482][ T12] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 313.919311][T20300] serio: Serial port ptm0 [ 313.941706][T20303] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.953334][T20303] vhci_hcd vhci_hcd.2: invalid port number 96 [ 313.959917][T20303] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 314.071170][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 314.071196][ T28] audit: type=1400 audit(2000000665.359:1898): avc: denied { watch } for pid=20316 comm="syz.9.6795" path="/446/file0" dev="tmpfs" ino=2345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 314.341390][ T3488] kernel read not supported for file /input/event0 (pid: 3488 comm: kworker/0:7) [ 314.505219][T20361] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe [ 314.533945][ T3488] kernel write not supported for file /vcsu (pid: 3488 comm: kworker/0:7) [ 314.555217][T20366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6816'. [ 314.641678][ T28] audit: type=1400 audit(2000000665.929:1899): avc: denied { mount } for pid=20373 comm="syz.9.6820" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 314.686297][ T28] audit: type=1400 audit(2000000665.969:1900): avc: denied { create } for pid=20377 comm="syz.9.6822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.749956][ T28] audit: type=1400 audit(2000000665.999:1901): avc: denied { bind } for pid=20377 comm="syz.9.6822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 315.136813][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 315.333019][T20422] netlink: 'syz.8.6841': attribute type 1 has an invalid length. [ 315.342963][T20422] loop8: detected capacity change from 0 to 128 [ 315.454892][T20426] bridge0: entered promiscuous mode [ 315.491706][T20430] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 315.506622][T20432] loop7: detected capacity change from 0 to 512 [ 315.515601][T20432] EXT4-fs (loop7): 1 truncate cleaned up [ 315.522740][T20432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.537566][T20432] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6846: bg 0: block 465: padding at end of block bitmap is not set [ 315.579854][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.599787][ T28] audit: type=1400 audit(2000000666.889:1902): avc: denied { lock } for pid=20436 comm="syz.3.6849" path="socket:[60286]" dev="sockfs" ino=60286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 315.734523][T20446] loop3: detected capacity change from 0 to 128 [ 315.765340][T20446] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.803583][ T28] audit: type=1400 audit(2000000667.089:1903): avc: denied { getopt } for pid=20449 comm="syz.6.6854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 315.803855][T20450] bpf: Bad value for 'gid' [ 315.885162][T20454] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 315.907247][ T28] audit: type=1326 audit(2000000667.189:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.3.6856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36e5a4c799 code=0x0 [ 315.935749][T20456] loop6: detected capacity change from 0 to 1024 [ 315.943165][T20456] EXT4-fs: Ignoring removed bh option [ 315.977085][T20456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.022534][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.122500][T20469] loop6: detected capacity change from 0 to 512 [ 316.160829][T20469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.174043][T20469] ext4 filesystem being mounted at /1151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.209872][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.548147][T20483] loop6: detected capacity change from 0 to 512 [ 316.564062][T20485] loop8: detected capacity change from 0 to 512 [ 316.593840][T20483] EXT4-fs (loop6): 1 truncate cleaned up [ 316.602972][T20483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.668100][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.716895][T20488] loop8: detected capacity change from 0 to 8192 [ 316.736324][ T28] audit: type=1400 audit(2000000668.019:1905): avc: denied { mounton } for pid=20487 comm="syz.8.6870" path="/759/file2/bus" dev="loop8" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 316.799352][T20494] loop6: detected capacity change from 0 to 512 [ 316.815515][T10879] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 316.824017][T10879] FAT-fs (loop8): Filesystem has been set read-only [ 316.839395][T20494] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.6873: inode has both inline data and extents flags [ 316.862772][T20494] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 316.864730][T20494] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6873: couldn't read orphan inode 15 (err -117) [ 316.873949][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 316.873970][ C1] EXT4-fs (loop6): initial error at time 2000000668: ext4_orphan_get:1391: inode 15 [ 316.874012][ C1] EXT4-fs (loop6): last error at time 2000000668: ext4_orphan_get:1391: inode 15 [ 316.911129][T20494] loop6: lost filesystem error report for type 5 error -117 [ 316.919214][T20494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 316.953278][T20499] loop8: detected capacity change from 0 to 512 [ 317.011040][T20499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.024432][T20499] ext4 filesystem being mounted at /760/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.057954][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.078039][T20506] loop8: detected capacity change from 0 to 128 [ 317.106920][T20506] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.129235][T20506] ext4 filesystem being mounted at /761/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.132412][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 317.170351][ T3825] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 317.186725][T20506] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.6876: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 317.209437][T20506] EXT4-fs error (device loop8) in do_split:2027: Corrupt filesystem [ 317.242398][T10879] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.522468][T20535] loop7: detected capacity change from 0 to 4096 [ 317.536386][T20535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.561223][T20535] EXT4-fs (loop7): shut down requested (1) [ 317.567521][T20535] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 317.578043][T20535] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 317.600359][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.759313][T20549] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.823493][T20551] netlink: 15 bytes leftover after parsing attributes in process `syz.7.6895'. [ 317.939460][T20553] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.962541][T20553] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.011416][T20559] EXT4-fs: Ignoring removed bh option [ 318.030732][T20559] EXT4-fs: Ignoring removed oldalloc option [ 318.048258][T18502] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.057812][T20559] EXT4-fs: Ignoring removed nobh option [ 318.103640][T20559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.119226][T20559] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.6898: Allocating blocks 497-513 which overlap fs metadata [ 318.136769][T20417] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 318.237409][T20559] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.6898: Allocating blocks 497-513 which overlap fs metadata [ 318.297364][T20559] EXT4-fs (loop7): pa ffff888108219070: logic 16, phys. 129, len 24 [ 318.305519][T20559] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 318.324722][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6903'. [ 318.348427][T20573] macvlan0: entered promiscuous mode [ 318.355649][T20573] bond0: entered promiscuous mode [ 318.374955][T20573] bond_slave_0: entered promiscuous mode [ 318.383558][ T9087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.407277][T20573] bond_slave_1: entered promiscuous mode [ 318.429703][T20573] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 318.463641][ T1437] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.483993][ T1437] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.513037][ T1437] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.532117][ T1437] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.625153][T20588] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.741018][T20598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.787319][T14222] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.836934][T20607] netlink: 15 bytes leftover after parsing attributes in process `syz.9.6917'. [ 318.873953][T20609] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6919'. [ 318.904334][ T28] audit: type=1400 audit(2000000670.189:1906): avc: denied { mount } for pid=20612 comm="syz.7.6921" name="/" dev="ramfs" ino=61555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 319.151489][T20636] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 319.216168][T20634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.246569][T20646] EXT4-fs: Ignoring removed oldalloc option [ 319.257391][T20646] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 319.288442][T20646] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.6930: bad orphan inode 131083 [ 319.306718][T20646] loop8: lost filesystem error report for type 5 error -117 [ 319.307391][T20646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.337578][T18502] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.408557][T10879] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.873113][ T7399] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 319.881082][ T7399] FAT-fs (loop6): Filesystem has been set read-only [ 320.323447][T20680] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 320.373895][T20680] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 320.388825][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 320.389620][T20680] EXT4-fs (loop6): 1 truncate cleaned up [ 320.395281][ C1] EXT4-fs (loop6): initial error at time 2000000671: ext4_mb_generate_buddy:1315 [ 320.395310][ C1] EXT4-fs (loop6): last error at time 2000000671: ext4_mb_generate_buddy:1315 [ 320.457059][T20680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.512130][T20687] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 320.514871][ T28] audit: type=1400 audit(2000000671.789:1907): avc: denied { connect } for pid=20684 comm="syz.7.6955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 320.585927][T20689] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.593305][T20689] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.673808][T20689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.687155][T20689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.740743][T20698] netlink: 'syz.7.6949': attribute type 3 has an invalid length. [ 320.748695][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6949'. [ 320.869322][T20701] set_capacity_and_notify: 11 callbacks suppressed [ 320.869349][T20701] loop7: detected capacity change from 0 to 8192 [ 321.144615][ T7399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.176898][T20701] ================================================================== [ 321.185049][T20701] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 321.192379][T20701] [ 321.194821][T20701] write to 0xffff88813480870a of 2 bytes by task 20702 on cpu 0: [ 321.202651][T20701] fat16_ent_put+0x28/0x60 [ 321.207118][T20701] fat_ent_write+0x6c/0xe0 [ 321.211574][T20701] fat_chain_add+0x16c/0x490 [ 321.216222][T20701] fat_get_block+0x46c/0x5e0 [ 321.220839][T20701] __block_write_begin_int+0x400/0xf90 [ 321.226333][T20701] cont_write_begin+0x5fe/0x970 [ 321.231224][T20701] fat_write_begin+0x4f/0xe0 [ 321.235848][T20701] generic_perform_write+0x183/0x490 [ 321.241398][T20701] __generic_file_write_iter+0x9e/0x120 [ 321.246995][T20701] generic_file_write_iter+0x8d/0x310 [ 321.252417][T20701] vfs_write+0x5a6/0x9f0 [ 321.256704][T20701] ksys_write+0xdc/0x1a0 [ 321.260970][T20701] __x64_sys_write+0x40/0x50 [ 321.265589][T20701] x64_sys_call+0x27e1/0x3020 [ 321.270312][T20701] do_syscall_64+0x12c/0x370 [ 321.274930][T20701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.280854][T20701] [ 321.283200][T20701] read to 0xffff888134808600 of 512 bytes by task 20701 on cpu 1: [ 321.291028][T20701] fat_mirror_bhs+0x1df/0x320 [ 321.295766][T20701] fat_ent_write+0xd0/0xe0 [ 321.300213][T20701] fat_chain_add+0x16c/0x490 [ 321.304838][T20701] fat_get_block+0x46c/0x5e0 [ 321.309462][T20701] __block_write_begin_int+0x400/0xf90 [ 321.314965][T20701] cont_write_begin+0x5fe/0x970 [ 321.320212][T20701] fat_write_begin+0x4f/0xe0 [ 321.324836][T20701] generic_perform_write+0x183/0x490 [ 321.330159][T20701] __generic_file_write_iter+0x9e/0x120 [ 321.335740][T20701] generic_file_write_iter+0x8d/0x310 [ 321.341157][T20701] vfs_write+0x5a6/0x9f0 [ 321.345440][T20701] ksys_write+0xdc/0x1a0 [ 321.349814][T20701] __x64_sys_write+0x40/0x50 [ 321.354432][T20701] x64_sys_call+0x27e1/0x3020 [ 321.359143][T20701] do_syscall_64+0x12c/0x370 [ 321.363765][T20701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.369693][T20701] [ 321.372040][T20701] Reported by Kernel Concurrency Sanitizer on: [ 321.378230][T20701] CPU: 1 UID: 0 PID: 20701 Comm: syz.7.6951 Tainted: G W syzkaller #0 PREEMPT(full) [ 321.389208][T20701] Tainted: [W]=WARN [ 321.393042][T20701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.403131][T20701] ==================================================================