last executing test programs: 2m1.825260217s ago: executing program 4 (id=345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m1.716059349s ago: executing program 4 (id=347): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 2m1.643404311s ago: executing program 4 (id=349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2m1.618953662s ago: executing program 4 (id=352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 2m1.31352094s ago: executing program 4 (id=365): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="a83deda2", 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2m1.266780861s ago: executing program 4 (id=368): bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c"], 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m45.876270256s ago: executing program 32 (id=368): bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c"], 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m40.076430785s ago: executing program 0 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m39.992780027s ago: executing program 0 (id=527): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000640)={0x1, "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"}) 1m39.947906248s ago: executing program 0 (id=529): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 1m39.85507774s ago: executing program 0 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 1m39.759168833s ago: executing program 0 (id=534): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 1m39.569278108s ago: executing program 0 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 1m39.555548218s ago: executing program 33 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 1m17.847575905s ago: executing program 3 (id=1050): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffd, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, r1, 0x25f}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m17.787104857s ago: executing program 3 (id=1051): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x5) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) 1m17.713912019s ago: executing program 3 (id=1052): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000340), 0x0}, 0x20) 1m17.65121945s ago: executing program 3 (id=1053): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 1m17.26083636s ago: executing program 3 (id=1065): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 1m16.981356478s ago: executing program 3 (id=1070): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="000000000005000000000000", 0xc, 0xffffffffffffffff) 1m15.197238003s ago: executing program 6 (id=1118): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f01"], 0xdd12}], 0x1, 0x0, 0x0, 0x40080}, 0x200400d1) 1m15.149765685s ago: executing program 6 (id=1120): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x9, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xc}}], 0x1, 0x4000000) 1m15.115364255s ago: executing program 6 (id=1122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}, 0x8044) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) 1m15.067144417s ago: executing program 6 (id=1124): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m15.049302417s ago: executing program 6 (id=1125): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m14.857013922s ago: executing program 6 (id=1128): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000140)='./file7/file0\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1000) 1m14.789843704s ago: executing program 34 (id=1128): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000140)='./file7/file0\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1000) 1m1.816469227s ago: executing program 35 (id=1070): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="000000000005000000000000", 0xc, 0xffffffffffffffff) 47.27166758s ago: executing program 8 (id=1627): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.129720564s ago: executing program 8 (id=1632): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x6020) 46.229647087s ago: executing program 8 (id=1648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 45.368604009s ago: executing program 8 (id=1656): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) 45.038221438s ago: executing program 8 (id=1663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.693223496s ago: executing program 8 (id=1672): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240), 0x9) 44.688277816s ago: executing program 36 (id=1672): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000240), 0x9) 3.858092008s ago: executing program 5 (id=2492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x30000001}) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 3.602690894s ago: executing program 1 (id=2495): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r1 = syz_open_pts(r0, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/50, 0x32}], 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) 3.003478851s ago: executing program 5 (id=2499): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0xe0, 0x2b8, 0x0, 0x2b8, 0x2b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x7}, {0xffffffffffffffff, 0x2, 0xc}, {0xfffd}, 0x7fffffe, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7d, 0x4, 0xe}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0xff, 0xff, 0xff, 0xff000000], 0x4e23, 0x4e20, 0x4e21, 0x4e24, 0x7, 0x3, 0x81, 0x8, 0xbd8}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@empty, @private0, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@empty, 0xa, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.815727866s ago: executing program 5 (id=2505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2.513317724s ago: executing program 1 (id=2513): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x216000, 0x1000, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x1, r2, 0x3b}, 0x10) 2.290767269s ago: executing program 1 (id=2515): fsopen(0x0, 0x1) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x40a9, &(0x7f00000002c0)="$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") timer_gettime(r0, 0x0) timer_gettime(0x0, &(0x7f0000005480)) 2.25461171s ago: executing program 5 (id=2516): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 1.958963268s ago: executing program 1 (id=2520): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.90241192s ago: executing program 1 (id=2522): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 1.772094203s ago: executing program 1 (id=2525): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="510401"], 0x4) 1.065707952s ago: executing program 2 (id=2538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1.044842473s ago: executing program 2 (id=2539): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 645.035063ms ago: executing program 9 (id=2545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 606.002364ms ago: executing program 9 (id=2546): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) 513.241467ms ago: executing program 9 (id=2547): socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 489.451797ms ago: executing program 2 (id=2548): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) syz_open_pts(r1, 0x141601) syz_open_pts(r1, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 437.945389ms ago: executing program 7 (id=2549): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 437.721909ms ago: executing program 9 (id=2550): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 394.76039ms ago: executing program 2 (id=2551): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgroups(0x2, &(0x7f00000064c0)=[0xffffffffffffffff, 0xffffffffffffffff]) 394.51597ms ago: executing program 7 (id=2552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xea}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 394.298259ms ago: executing program 2 (id=2553): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0x0, 0x1) 302.644902ms ago: executing program 2 (id=2554): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 257.257923ms ago: executing program 9 (id=2555): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_setup(0x6, &(0x7f0000000680)) io_setup(0x10000, &(0x7f00000014c0)) 253.080433ms ago: executing program 7 (id=2556): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2, 0x0, 0x2000000}, 0x38) 151.437906ms ago: executing program 5 (id=2557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 104.921187ms ago: executing program 7 (id=2567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffd) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 104.675417ms ago: executing program 5 (id=2558): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xffffffffffffffa4}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 80.235588ms ago: executing program 7 (id=2559): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000408000/0x2000)=nil, 0x2000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 810.42µs ago: executing program 9 (id=2560): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 7 (id=2571): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x87, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90224fc602f00000008000300feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 64] FAT-fs (loop1): Filesystem has been set read-only [ 90.867228][ T39] bridge_slave_1: left allmulticast mode [ 90.879845][ T39] bridge_slave_1: left promiscuous mode [ 90.891370][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.907120][ T39] bridge_slave_0: left allmulticast mode [ 90.917332][ T39] bridge_slave_0: left promiscuous mode [ 90.928532][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.938563][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1133'. [ 91.074265][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.095782][ T39] bond0 (unregistering): Released all slaves [ 91.160887][ T39] hsr_slave_0: left promiscuous mode [ 91.180598][ T39] hsr_slave_1: left promiscuous mode [ 91.192311][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.215928][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.244567][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.262703][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.289442][ T39] veth1_macvtap: left promiscuous mode [ 91.300472][ T39] veth0_macvtap: left promiscuous mode [ 91.316286][ T39] veth1_vlan: left promiscuous mode [ 91.321771][ T39] veth0_vlan: left promiscuous mode [ 91.455202][ T39] team0 (unregistering): Port device team_slave_1 removed [ 91.476661][ T39] team0 (unregistering): Port device team_slave_0 removed [ 91.596902][ T6695] Invalid argument reading file caps for ./file0 [ 91.724510][ T6709] loop2: detected capacity change from 0 to 512 [ 91.769102][ T6709] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.817681][ T6709] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 91.832293][ T6709] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1147: Corrupt directory, running e2fsck is recommended [ 91.847579][ T6709] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 91.856011][ T6709] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1147: corrupted in-inode xattr: e_name out of bounds [ 91.856111][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 91.877333][ T6709] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.880626][ T6709] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1147: couldn't read orphan inode 15 (err -117) [ 91.889845][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 91.889863][ C1] EXT4-fs (loop2): initial error at time 1777476684: ext4_iget_extra_inode:5128: inode 15 [ 91.889894][ C1] EXT4-fs (loop2): last error at time 1777476684: ext4_iget_extra_inode:5128: inode 15 [ 91.961715][ T6709] loop2: lost filesystem error report for type 5 error -117 [ 91.962856][ T6709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.995244][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.016426][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.043946][ T6648] bridge_slave_0: entered allmulticast mode [ 92.055647][ T6709] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.077638][ T6648] bridge_slave_0: entered promiscuous mode [ 92.094961][ T6709] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 92.109995][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.119858][ T6709] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1147: Corrupt directory, running e2fsck is recommended [ 92.139104][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.155319][ T6648] bridge_slave_1: entered allmulticast mode [ 92.161498][ T6726] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.179964][ T6648] bridge_slave_1: entered promiscuous mode [ 92.216577][ T6726] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 92.246636][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.269922][ T6726] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1147: Corrupt directory, running e2fsck is recommended [ 92.284339][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.315736][ T6709] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.346464][ T6648] team0: Port device team_slave_0 added [ 92.359889][ T6709] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 92.371294][ T6648] team0: Port device team_slave_1 added [ 92.399299][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.406373][ T6709] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1147: Corrupt directory, running e2fsck is recommended [ 92.429506][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.461878][ T6734] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.500272][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.518883][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 92.526908][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.527420][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.540000][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.569365][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.611791][ T6753] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 92.623563][ T6753] SELinux: failed to load policy [ 92.700607][ T6648] hsr_slave_0: entered promiscuous mode [ 92.711729][ T6648] hsr_slave_1: entered promiscuous mode [ 92.732851][ T6648] debugfs: 'hsr0' already exists in 'hsr' [ 92.741024][ T6648] Cannot create hsr debugfs directory [ 92.918407][ T6786] loop1: detected capacity change from 0 to 512 [ 92.939214][ T6786] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1163: Invalid inode bitmap blk 4 in block_group 0 [ 92.960904][ T6786] loop1: lost filesystem error report for type 5 error -117 [ 92.961513][ T6786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.015001][ T6648] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 93.040881][ T6648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.062948][ T6648] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 93.073460][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.082827][ T6648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.090094][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 93.117929][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 93.131368][ T6648] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 93.146143][ T6648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.168353][ T6648] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 93.191980][ T6648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.207859][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 93.207874][ T28] audit: type=1400 audit(1777476685.433:1122): avc: denied { connect } for pid=6768 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.292094][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.314839][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.333008][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.340107][ T5725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.383425][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.390514][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.595793][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 93.667221][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.676544][ T6840] loop5: detected capacity change from 0 to 512 [ 93.741275][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1172'. [ 93.972533][ T6863] loop5: detected capacity change from 0 to 128 [ 94.007598][ T6648] veth0_vlan: entered promiscuous mode [ 94.030465][ T6648] veth1_vlan: entered promiscuous mode [ 94.074351][ T6648] veth0_macvtap: entered promiscuous mode [ 94.089680][ T6866] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 94.091667][ T6648] veth1_macvtap: entered promiscuous mode [ 94.127880][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.150491][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.169457][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.208457][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.223952][ T28] audit: type=1400 audit(1777476686.443:1123): avc: denied { mounton } for pid=6648 comm="syz-executor" path="/root/syzkaller.UoJbr2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 94.255755][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.281762][ T68] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.305328][ T6834] loop2: detected capacity change from 0 to 512 [ 94.399149][ T6834] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1170: EA inode hash validation failed [ 94.430514][ T6834] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.1170: corrupted inode contents [ 94.455166][ T6834] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.457333][ T6834] EXT4-fs (loop2): Remounting filesystem read-only [ 94.466853][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 94.466934][ C1] EXT4-fs (loop2): initial error at time 1777476686: ext4_do_update_inode:5690: inode 15 [ 94.467043][ C1] EXT4-fs (loop2): last error at time 1777476686: ext4_do_update_inode:5690: inode 15 [ 94.523682][ T6834] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 94.541065][ T6834] EXT4-fs (loop2): 1 orphan inode deleted [ 94.562769][ T6834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.640045][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.609876][ T4448] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.643606][ T6906] loop1: detected capacity change from 0 to 512 [ 96.662064][ T6906] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1190: invalid indirect mapped block 256 (level 2) [ 96.701684][ T6906] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.706785][ T6906] EXT4-fs (loop1): 2 truncates cleaned up [ 96.715972][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 96.715995][ C1] EXT4-fs (loop1): initial error at time 1777476688: ext4_free_branches:1023: inode 11 [ 96.716024][ C1] EXT4-fs (loop1): last error at time 1777476688: ext4_free_branches:1023: inode 11 [ 96.853939][ T6906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.915164][ T28] audit: type=1400 audit(1777476689.143:1124): avc: denied { read write } for pid=6900 comm="syz.1.1190" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.976063][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.996903][ T28] audit: type=1400 audit(1777476689.143:1125): avc: denied { open } for pid=6900 comm="syz.1.1190" path="/239/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.069388][ T28] audit: type=1400 audit(1777476689.143:1126): avc: denied { setattr } for pid=6900 comm="syz.1.1190" path="/239/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.134678][ T28] audit: type=1400 audit(1777476689.353:1127): avc: denied { create } for pid=6931 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 97.174849][ T28] audit: type=1400 audit(1777476689.363:1128): avc: denied { ioctl } for pid=6931 comm="syz.1.1201" path="socket:[17478]" dev="sockfs" ino=17478 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 97.258532][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 97.342986][ T6936] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.378412][ T6936] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 97.713586][ T28] audit: type=1400 audit(1777476689.943:1129): avc: denied { name_connect } for pid=6958 comm="syz.7.1214" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 97.745308][ T6959] netlink: 'syz.7.1214': attribute type 83 has an invalid length. [ 98.016394][ T6982] loop7: detected capacity change from 0 to 1024 [ 98.023309][ T6982] EXT4-fs: Ignoring removed oldalloc option [ 98.032908][ T6982] EXT4-fs: Ignoring removed i_version option [ 98.039406][ T6982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.063608][ T6982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.122995][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.279697][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1229'. [ 98.307953][ T7000] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1231'. [ 98.720352][ T35] IPVS: starting estimator thread 0... [ 98.766427][ T7030] sctp: [Deprecated]: syz.5.1242 (pid 7030) Use of int in maxseg socket option. [ 98.766427][ T7030] Use struct sctp_assoc_value instead [ 98.766504][ T28] audit: type=1400 audit(1777476690.993:1130): avc: denied { getopt } for pid=7029 comm="syz.5.1242" lport=33514 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 98.859986][ T7023] IPVS: using max 2352 ests per chain, 117600 per kthread [ 98.868801][ T7036] hugetlbfs: syz.1.1245 (7036): Using mlock ulimits for SHM_HUGETLB is obsolete [ 98.902944][ T28] audit: type=1400 audit(1777476691.133:1131): avc: denied { read } for pid=7039 comm="syz.5.1247" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.957578][ T7044] loop1: detected capacity change from 0 to 128 [ 99.008531][ T28] audit: type=1400 audit(1777476691.233:1132): avc: denied { ioctl } for pid=7039 comm="syz.5.1247" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.128000][ T7054] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1253'. [ 99.184958][ T7054] netlink: 'syz.5.1253': attribute type 12 has an invalid length. [ 99.195102][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.206764][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.214867][ T7054] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1253'. [ 99.253531][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 99.326522][ T28] audit: type=1400 audit(1777476691.553:1133): avc: denied { append } for pid=7073 comm="syz.5.1261" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.361753][ T28] audit: type=1400 audit(1777476691.583:1134): avc: denied { map } for pid=7073 comm="syz.5.1261" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.386084][ T28] audit: type=1400 audit(1777476691.583:1135): avc: denied { execute } for pid=7073 comm="syz.5.1261" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.413293][ T7076] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 99.568983][ T7093] loop7: detected capacity change from 0 to 128 [ 99.576326][ T7093] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.600994][ T7093] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.633540][ T5723] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.689588][ T7098] loop7: detected capacity change from 0 to 512 [ 99.706964][ T7098] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.716374][ T7098] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 99.725824][ T7098] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 99.739149][ T7098] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 99.747543][ T7098] System zones: 0-2, 18-18, 34-35 [ 99.754148][ T7098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.772484][ T7098] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1271: bg 0: block 353: padding at end of block bitmap is not set [ 99.787063][ T7098] EXT4-fs (loop7): Remounting filesystem read-only [ 99.808308][ T28] audit: type=1400 audit(1777476692.033:1136): avc: denied { kexec_image_load } for pid=7100 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 99.841993][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.957085][ T28] audit: type=1400 audit(1777476692.183:1137): avc: denied { getopt } for pid=7108 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.097685][ T7118] loop1: detected capacity change from 0 to 512 [ 100.144925][ T7118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.191912][ T28] audit: type=1400 audit(1777476692.423:1138): avc: denied { getopt } for pid=7117 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.251981][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.293671][ T7124] netlink: 'syz.2.1284': attribute type 4 has an invalid length. [ 100.304332][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1282'. [ 100.404659][ T7132] Invalid argument reading file caps for ./file0 [ 100.462099][ T28] audit: type=1400 audit(1777476692.693:1139): avc: denied { connect } for pid=7134 comm="syz.5.1288" laddr=fe80::13 lport=37291 faddr=fe80::36 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.699388][ T7152] loop5: detected capacity change from 0 to 1024 [ 100.720192][ T7151] loop1: detected capacity change from 0 to 4096 [ 100.734994][ T7151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.748003][ T7152] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 100.793564][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.854123][ T7159] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x2 [ 101.036377][ T7171] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 101.076710][ T7180] loop7: detected capacity change from 0 to 128 [ 101.096653][ T7183] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 101.108680][ T7180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 101.127668][ T7180] System zones: 1-3, 19-19, 35-36 [ 101.133336][ T7180] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.146139][ T7180] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.181328][ T7180] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 4294967295 (only 1 groups) [ 101.212693][ T6648] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.295278][ T7185] ------------[ cut here ]------------ [ 101.300878][ T7185] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.5.1306/7185 [ 101.310619][ T7185] Modules linked in: [ 101.314540][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.5.1306 Not tainted syzkaller #0 PREEMPT(full) [ 101.323823][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.333941][ T7185] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 101.339613][ T7185] Code: 8b 05 c1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 101.359221][ T7185] RSP: 0018:ffffc90002357dd8 EFLAGS: 00010093 [ 101.365319][ T7185] RAX: ffffffff813b1682 RBX: ffff888103958000 RCX: ffff888103958000 [ 101.373293][ T7185] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 101.381326][ T7185] RBP: 0000000000000080 R08: ffff888103958af8 R09: 0000000000000000 [ 101.389365][ T7185] R10: ffffc90002357df0 R11: 0001c90002357df0 R12: ffff888103958000 [ 101.397327][ T7185] R13: ffff888103958828 R14: ffff8881052fe410 R15: 0000000000000080 [ 101.405389][ T7185] FS: 0000000000000000(0000) GS:ffff8882ae8fe000(0000) knlGS:0000000000000000 [ 101.414318][ T7185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.421004][ T7185] CR2: 00007f6c809aeff8 CR3: 000000010d72a000 CR4: 00000000003506f0 [ 101.428979][ T7185] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.436958][ T7185] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 101.444925][ T7185] Call Trace: [ 101.448287][ T7185] [ 101.451216][ T7185] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 101.456611][ T7185] ? __list_add_valid_or_report+0x38/0xe0 [ 101.462400][ T7185] do_exit+0xc13/0x1530 [ 101.466550][ T7185] ? switch_fpu_return+0xe7/0x1b0 [ 101.471611][ T7185] __x64_sys_exit+0x1f/0x20 [ 101.476118][ T7185] x64_sys_call+0x301d/0x3020 [ 101.480847][ T7185] do_syscall_64+0x12c/0x3b0 [ 101.485442][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.491334][ T7185] RIP: 0033:0x7f6c81f5cdd9 [ 101.495838][ T7185] Code: Unable to access opcode bytes at 0x7f6c81f5cdaf. [ 101.502917][ T7185] RSP: 002b:00007f6c809aefd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 101.511345][ T7185] RAX: ffffffffffffffda RBX: 00007f6c821d5fa0 RCX: 00007f6c81f5cdd9 [ 101.519346][ T7185] RDX: 00007f6c809af9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.527314][ T7185] RBP: 00007f6c81ff2d69 R08: 0000000000000000 R09: 0000000000000000 [ 101.535353][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.543323][ T7185] R13: 00007f6c821d6038 R14: 00007f6c821d5fa0 R15: 00007ffe8d3f0098 [ 101.551326][ T7185] [ 101.554412][ T7185] ---[ end trace 0000000000000000 ]--- [ 103.579957][ T7214] loop1: detected capacity change from 0 to 512 [ 103.613146][ T7214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.632882][ T7214] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.686966][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.726077][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'. [ 103.799092][ T7251] loop1: detected capacity change from 0 to 128 [ 103.810566][ T5725] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.897122][ T5725] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.953420][ T7264] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1327'. [ 103.979010][ T5725] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.022911][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.030352][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.037669][ T7218] bridge_slave_0: entered allmulticast mode [ 104.044545][ T7218] bridge_slave_0: entered promiscuous mode [ 104.051242][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.058454][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.069854][ T7218] bridge_slave_1: entered allmulticast mode [ 104.082023][ T7218] bridge_slave_1: entered promiscuous mode [ 104.107398][ T5725] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.126246][ T7218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.141608][ T7218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.170626][ T7218] team0: Port device team_slave_0 added [ 104.185765][ T7218] team0: Port device team_slave_1 added [ 104.219953][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.248962][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.303438][ T7218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.334706][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.382761][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.416033][ T7218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.494943][ T5725] bridge_slave_1: left allmulticast mode [ 104.509941][ T5725] bridge_slave_1: left promiscuous mode [ 104.520874][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 104.520922][ T28] audit: type=1400 audit(1777476696.753:1149): avc: denied { append } for pid=7297 comm="syz.7.1333" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.537278][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.599960][ T5725] bridge_slave_0: left allmulticast mode [ 104.618722][ T5725] bridge_slave_0: left promiscuous mode [ 104.633515][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.822824][ T5725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.832902][ T5725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.842745][ T5725] bond0 (unregistering): Released all slaves [ 104.852557][ T7218] hsr_slave_0: entered promiscuous mode [ 104.858971][ T7218] hsr_slave_1: entered promiscuous mode [ 104.867230][ T7218] debugfs: 'hsr0' already exists in 'hsr' [ 104.873089][ T7218] Cannot create hsr debugfs directory [ 104.920435][ T5725] hsr_slave_0: left promiscuous mode [ 104.932920][ T5725] hsr_slave_1: left promiscuous mode [ 104.940062][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.948406][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.957458][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.970133][ T5725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.977709][ T5725] batman_adv: batadv0: Interface deactivated: macsec2 [ 104.984782][ T5725] batman_adv: batadv0: Removing interface: macsec2 [ 105.002125][ T5725] veth1_macvtap: left promiscuous mode [ 105.017633][ T5725] veth0_macvtap: left promiscuous mode [ 105.025672][ T5725] veth1_vlan: left promiscuous mode [ 105.040792][ T5725] veth0_vlan: left promiscuous mode [ 105.047256][ T28] audit: type=1400 audit(1777476697.273:1150): avc: denied { bind } for pid=7329 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.067084][ T28] audit: type=1400 audit(1777476697.273:1151): avc: denied { listen } for pid=7329 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.086894][ T28] audit: type=1400 audit(1777476697.273:1152): avc: denied { accept } for pid=7329 comm="syz.5.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.129788][ T7340] loop7: detected capacity change from 0 to 512 [ 105.145294][ T7340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.191736][ T7340] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.215615][ T28] audit: type=1400 audit(1777476697.443:1153): avc: denied { create } for pid=7339 comm="syz.7.1342" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 105.241214][ T28] audit: type=1400 audit(1777476697.463:1154): avc: denied { setattr } for pid=7339 comm="syz.7.1342" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.281997][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.297447][ T5725] team0 (unregistering): Port device team_slave_1 removed [ 105.307200][ T7347] netlink: 'syz.2.1345': attribute type 83 has an invalid length. [ 105.315624][ T5725] team0 (unregistering): Port device team_slave_0 removed [ 105.572863][ T7218] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 105.595185][ T28] audit: type=1400 audit(1777476697.823:1155): avc: denied { watch watch_reads } for pid=7382 comm="syz.7.1355" path="/49/file1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 105.604001][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.644671][ T7218] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.653594][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.662676][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 105.673194][ T7381] netlink: 'syz.2.1354': attribute type 2 has an invalid length. [ 105.681240][ T7218] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.691062][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.733134][ T7393] netlink: 'syz.7.1360': attribute type 6 has an invalid length. [ 105.751931][ T7218] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.771536][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.847227][ T7218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.925409][ T7218] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.953986][ T827] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.961113][ T827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.012800][ T827] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.019919][ T827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.037217][ T7218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.047998][ T7218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.204934][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 106.282968][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 106.303548][ T7479] netlink: 'syz.1.1378': attribute type 15 has an invalid length. [ 106.311861][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.321164][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 106.334102][ T28] audit: type=1400 audit(1777476698.563:1156): avc: denied { create } for pid=7480 comm="syz.5.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.357684][ T7479] netlink: 'syz.1.1378': attribute type 15 has an invalid length. [ 106.360195][ T5725] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 106.374147][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 106.385159][ T5725] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 106.398790][ T28] audit: type=1400 audit(1777476698.563:1157): avc: denied { write } for pid=7480 comm="syz.5.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.422400][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 106.431241][ T5725] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 106.445600][ T5725] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 106.457310][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 106.464518][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 106.548707][ T7511] loop1: detected capacity change from 0 to 128 [ 106.567960][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 106.623879][ T7218] veth0_vlan: entered promiscuous mode [ 106.641378][ T7218] veth1_vlan: entered promiscuous mode [ 106.648450][ T7481] infiniband syz0: set active [ 106.654783][ T3337] xfrm0 speed is unknown, defaulting to 1000 [ 106.664324][ T7481] infiniband syz0: added xfrm0 [ 106.695861][ T7218] veth0_macvtap: entered promiscuous mode [ 106.708583][ T7218] veth1_macvtap: entered promiscuous mode [ 106.708632][ T7481] RDS/IB: syz0: added [ 106.722873][ T7481] smc: adding ib device syz0 with port count 1 [ 106.729375][ T7481] smc: ib device syz0 port 1 has no pnetid [ 106.738468][ T3504] xfrm0 speed is unknown, defaulting to 1000 [ 106.746184][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 106.753937][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.779732][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.797098][ T5717] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.844360][ T5717] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.866874][ T5717] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.881202][ T5717] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.947102][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 106.962733][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 107.245167][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 107.375736][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 107.451244][ T28] audit: type=1400 audit(1777476699.683:1158): avc: denied { open } for pid=7560 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.535087][ T7481] xfrm0 speed is unknown, defaulting to 1000 [ 107.932002][ T7576] loop8: detected capacity change from 0 to 512 [ 107.964641][ T7576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.990055][ T7576] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.220336][ T7218] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.497506][ T7618] netlink: 'syz.5.1416': attribute type 1 has an invalid length. [ 108.511402][ T7618] bond1: entered promiscuous mode [ 108.516822][ T7618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.539217][ T7618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.547571][ T7618] bond1: (slave bond2): making interface the new active one [ 108.555237][ T7618] bond2: entered promiscuous mode [ 108.561376][ T7618] bond1: (slave bond2): Enslaving as an active interface with an up link [ 108.667002][ T7630] pim6reg: entered allmulticast mode [ 108.675211][ T7630] pim6reg: left allmulticast mode [ 108.745801][ T7634] loop5: detected capacity change from 0 to 512 [ 108.757002][ T7634] EXT4-fs (loop5): 1 truncate cleaned up [ 108.775788][ T7634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.817709][ T4573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.206567][ T3381] kernel read not supported for file /ppp (pid: 3381 comm: kworker/1:5) [ 109.226247][ T7671] 9pnet: p9_errstr2errno: server reported unknown error ½p [ 109.612607][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1453'. [ 110.086741][ T5720] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.249299][ T7748] loop8: detected capacity change from 0 to 1024 [ 110.263054][ T7748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.288496][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 110.288510][ T28] audit: type=1400 audit(1777476702.513:1167): avc: denied { watch watch_reads } for pid=7747 comm="syz.8.1470" path="/9/file1" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.320575][ T7218] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.351518][ T7753] loop8: detected capacity change from 0 to 512 [ 110.372292][ T7753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.385182][ T7753] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.410367][ T7218] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 110.473925][ T7759] veth0: entered promiscuous mode [ 110.479344][ T7759] veth0: left promiscuous mode [ 110.612309][ T7761] loop8: detected capacity change from 0 to 512 [ 110.640598][ T7761] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.1474: EA inode hash validation failed [ 110.654693][ T7761] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.1474: corrupted inode contents [ 110.667544][ T7761] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.668202][ T7761] EXT4-fs (loop8): Remounting filesystem read-only [ 110.677602][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 110.677652][ C1] EXT4-fs (loop8): initial error at time 1777476702: ext4_do_update_inode:5690: inode 15 [ 110.677762][ C1] EXT4-fs (loop8): last error at time 1777476702: ext4_do_update_inode:5690: inode 15 [ 110.711305][ T7761] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -30) [ 110.721048][ T7761] EXT4-fs (loop8): 1 orphan inode deleted [ 110.730114][ T7761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.761766][ T7218] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.995359][ T7778] ip6gre1: entered promiscuous mode [ 111.006569][ T7778] ip6gre1: entered allmulticast mode [ 111.206012][ T7784] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 111.306768][ T7786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7786 comm=syz.7.1486 [ 111.332051][ T28] audit: type=1400 audit(1777476703.563:1168): avc: denied { audit_write } for pid=7785 comm="syz.7.1486" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.353961][ T7786] sctp: [Deprecated]: syz.7.1486 (pid 7786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.353961][ T7786] Use struct sctp_sack_info instead [ 111.398068][ T28] audit: type=1107 audit(1777476703.563:1169): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 111.605900][ T7791] xfrm0 speed is unknown, defaulting to 1000 [ 111.800397][ T28] audit: type=1326 audit(1777476704.033:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c589cdd9 code=0x7ffc0000 [ 111.857113][ T28] audit: type=1326 audit(1777476704.033:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c589cdd9 code=0x7ffc0000 [ 111.931285][ T28] audit: type=1326 audit(1777476704.053:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c589cdd9 code=0x7ffc0000 [ 112.006579][ T28] audit: type=1326 audit(1777476704.053:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c589cdd9 code=0x7ffc0000 [ 112.077312][ T28] audit: type=1326 audit(1777476704.053:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c589cdd9 code=0x7ffc0000 [ 112.129922][ T4448] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.146263][ T28] audit: type=1326 audit(1777476704.053:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c589cdd9 code=0x7ffc0000 [ 112.169917][ T28] audit: type=1326 audit(1777476704.053:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.8.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c589cdd9 code=0x7ffc0000 [ 112.316041][ T10] IPVS: starting estimator thread 0... [ 112.382921][ T7849] netlink: 'syz.8.1508': attribute type 1 has an invalid length. [ 112.412313][ T7842] IPVS: using max 2352 ests per chain, 117600 per kthread [ 112.458890][ T7860] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 112.481058][ T7860] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1514'. [ 112.504599][ T7860] bond0: entered promiscuous mode [ 112.519889][ T7860] bond_slave_0: entered promiscuous mode [ 112.549574][ T7860] bond_slave_1: entered promiscuous mode [ 112.571766][ T7860] bridge0: port 3(bond0) entered blocking state [ 112.587345][ T7860] bridge0: port 3(bond0) entered disabled state [ 112.596493][ T7866] netlink: 572 bytes leftover after parsing attributes in process `syz.8.1517'. [ 112.613006][ T7860] bond0: entered allmulticast mode [ 112.629867][ T7860] bond_slave_0: entered allmulticast mode [ 112.635653][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1517'. [ 112.649886][ T7860] bond_slave_1: entered allmulticast mode [ 112.663752][ T7860] bridge0: port 3(bond0) entered blocking state [ 112.670159][ T7860] bridge0: port 3(bond0) entered forwarding state [ 112.759079][ T7872] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 112.851666][ T7876] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 113.909552][ T7902] loop2: detected capacity change from 0 to 128 [ 113.956310][ T7902] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.009103][ T7896] loop1: detected capacity change from 0 to 512 [ 114.010091][ T7902] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.066186][ T7896] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.1526: EA inode hash validation failed [ 114.088735][ T7896] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.1526: corrupted inode contents [ 114.103542][ T7896] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.104172][ T7896] EXT4-fs (loop1): Remounting filesystem read-only [ 114.113559][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 114.113629][ C0] EXT4-fs (loop1): initial error at time 1777476706: ext4_do_update_inode:5690: inode 15 [ 114.113768][ C0] EXT4-fs (loop1): last error at time 1777476706: ext4_do_update_inode:5690: inode 15 [ 114.147499][ T7896] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 114.158457][ T7896] EXT4-fs (loop1): 1 orphan inode deleted [ 114.168263][ T7896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.199109][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.263170][ T3296] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.282192][ T7919] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1538'. [ 114.388250][ T5723] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 114.416023][ T7934] loop2: detected capacity change from 0 to 512 [ 114.430226][ T7934] EXT4-fs: Ignoring removed bh option [ 114.441650][ T7934] EXT4-fs: Mount option(s) incompatible with ext2 [ 114.632499][ T7945] loop7: detected capacity change from 0 to 512 [ 114.645807][ T7945] EXT4-fs: Ignoring removed orlov option [ 114.664872][ T7945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.672142][ T7945] EXT4-fs: dax option not supported [ 114.789183][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 114.797268][ T7953] loop7: detected capacity change from 0 to 4096 [ 114.810260][ T7953] EXT4-fs: inline encryption not supported [ 114.839724][ T7953] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 114.863770][ T7953] System zones: 0-5 [ 114.868758][ T7953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.940916][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.094247][ T7983] bridge_slave_0: invalid flags given to default FDB implementation [ 115.139861][ T7983] bridge_slave_0: invalid flags given to default FDB implementation [ 115.189354][ T7985] xfrm0 speed is unknown, defaulting to 1000 [ 115.777832][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 115.777847][ T28] audit: type=1400 audit(1777476708.003:1196): avc: denied { create } for pid=8024 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.847160][ T28] audit: type=1400 audit(1777476708.043:1197): avc: denied { write } for pid=8024 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.085891][ T8043] loop2: detected capacity change from 0 to 512 [ 116.108013][ T8043] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.126394][ T8043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.167234][ T8043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.211943][ T8043] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.222609][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1590'. [ 116.331493][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.898411][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 117.033245][ T8081] netlink: 'syz.2.1614': attribute type 2 has an invalid length. [ 117.284110][ T28] audit: type=1400 audit(1777476709.513:1198): avc: denied { map } for pid=8095 comm="syz.1.1609" path="socket:[20815]" dev="sockfs" ino=20815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 117.352838][ T28] audit: type=1400 audit(1777476709.543:1199): avc: denied { connect } for pid=8093 comm="syz.5.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.703054][ T8107] syz_tun: entered allmulticast mode [ 117.714184][ T8109] ipip0: entered promiscuous mode [ 117.719417][ T8109] ipip0: entered allmulticast mode [ 117.728673][ T8106] syz_tun: left allmulticast mode [ 118.118230][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1627'. [ 118.134530][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1627'. [ 118.157153][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1627'. [ 118.176858][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1627'. [ 118.232712][ T8157] veth0_vlan: entered allmulticast mode [ 118.257172][ T8157] veth0_vlan: left allmulticast mode [ 118.433316][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 118.668129][ T8202] loop5: detected capacity change from 0 to 256 [ 118.801308][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.824477][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.843767][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.865591][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.165554][ T8244] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 119.190807][ T8244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.210792][ T8244] bond1: (slave geneve0): making interface the new active one [ 119.219513][ T8244] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 120.034501][ T8264] loop8: detected capacity change from 0 to 512 [ 120.058427][ T8264] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 120.089951][ T8264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 120.114446][ T8264] System zones: 1-12 [ 120.128694][ T8264] EXT4-fs (loop8): 1 truncate cleaned up [ 120.148276][ T8264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.250045][ T8264] loop8: detected capacity change from 512 to 0 [ 120.271302][ T8275] EXT4-fs error (device loop8): __ext4_find_entry:1615: inode #2: comm syz.8.1656: reading directory lblock 0 [ 120.289212][ T8275] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 120.300547][ T8275] EXT4-fs (loop8): I/O error while writing superblock [ 120.373476][ T28] audit: type=1400 audit(1777476712.603:1200): avc: denied { listen } for pid=8280 comm="syz.1.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.415120][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.425093][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.433316][ T5723] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:5008: inode #18: block 9: comm kworker/u8:11: unable to read itable block [ 120.447300][ T5723] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 120.456044][ T5723] EXT4-fs (loop8): I/O error while writing superblock [ 120.463420][ T7218] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.473613][ T7218] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 120.482102][ T7218] EXT4-fs (loop8): I/O error while writing superblock [ 120.550105][ T8285] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1666'. [ 120.622988][ T8291] loop2: detected capacity change from 0 to 4096 [ 120.638284][ T8291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.745055][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.784741][ T5717] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.823955][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.842307][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.849303][ T8302] xfrm0 speed is unknown, defaulting to 1000 [ 120.862582][ T5717] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.923598][ T5717] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.972844][ T28] audit: type=1400 audit(1777476713.203:1201): avc: denied { name_bind } for pid=8323 comm="syz.5.1681" src=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 120.994676][ T5717] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.070494][ T5717] bridge_slave_1: left allmulticast mode [ 121.076207][ T5717] bridge_slave_1: left promiscuous mode [ 121.086528][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.097955][ T5717] bridge_slave_0: left allmulticast mode [ 121.109158][ T5717] bridge_slave_0: left promiscuous mode [ 121.115162][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.242251][ T28] audit: type=1400 audit(1777476713.463:1202): avc: denied { connect } for pid=8336 comm="syz.5.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.242466][ T5717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.277629][ T5717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.278816][ T8326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8326 comm=syz.2.1682 [ 121.300629][ T5717] bond0 (unregistering): Released all slaves [ 121.442813][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.476638][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.502547][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.523729][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.535512][ T8302] bridge_slave_0: entered allmulticast mode [ 121.549467][ T8302] bridge_slave_0: entered promiscuous mode [ 121.556441][ T8374] netlink: 'syz.5.1697': attribute type 1 has an invalid length. [ 121.558700][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.579780][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.592544][ T8374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.610303][ T5717] hsr_slave_0: left promiscuous mode [ 121.622855][ T5717] hsr_slave_1: left promiscuous mode [ 121.628612][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.636186][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.643781][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.651401][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.662118][ T5717] veth1_macvtap: left promiscuous mode [ 121.667686][ T5717] veth0_macvtap: left promiscuous mode [ 121.673403][ T5717] veth1_vlan: left promiscuous mode [ 121.678727][ T5717] veth0_vlan: left promiscuous mode [ 121.741098][ T5717] team0 (unregistering): Port device team_slave_1 removed [ 121.750626][ T5717] team0 (unregistering): Port device team_slave_0 removed [ 121.779974][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.787131][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.794567][ T8302] bridge_slave_1: entered allmulticast mode [ 121.801160][ T8302] bridge_slave_1: entered promiscuous mode [ 121.812763][ T8374] bond3: (slave geneve2): making interface the new active one [ 121.821475][ T8374] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 121.830773][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 121.859622][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.870536][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.889036][ T8302] team0: Port device team_slave_0 added [ 121.896339][ T8302] team0: Port device team_slave_1 added [ 121.913077][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.922428][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.979995][ T8302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.006666][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.028171][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.101709][ T8302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.176078][ T8302] hsr_slave_0: entered promiscuous mode [ 122.199209][ T8302] hsr_slave_1: entered promiscuous mode [ 122.209363][ T8419] loop5: detected capacity change from 0 to 512 [ 122.216242][ T8302] debugfs: 'hsr0' already exists in 'hsr' [ 122.224454][ T8302] Cannot create hsr debugfs directory [ 122.231212][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 122.253469][ T8419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.279958][ T8419] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.332907][ T5717] IPVS: stop unused estimator thread 0... [ 122.385054][ T4573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.434432][ T8436] loop5: detected capacity change from 0 to 512 [ 122.472215][ T8436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 122.490123][ T8436] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.598117][ T8452] netlink: 'syz.2.1716': attribute type 6 has an invalid length. [ 122.622325][ T8302] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 122.638681][ T8302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.659564][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 122.669311][ T8302] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 122.685837][ T8302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.694097][ T8302] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 122.712148][ T8302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.725393][ T8302] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 122.738387][ T4573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 122.739571][ T8302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.839076][ T8302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.862704][ T8302] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.881474][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.888569][ T5717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.913303][ T819] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.921783][ T819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.011792][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 123.169155][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.185485][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.197686][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.206360][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.235126][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.427799][ T8302] veth0_vlan: entered promiscuous mode [ 123.442501][ T8302] veth1_vlan: entered promiscuous mode [ 123.469691][ T8302] veth0_macvtap: entered promiscuous mode [ 123.479008][ T8302] veth1_macvtap: entered promiscuous mode [ 123.494948][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.513470][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.535305][ T819] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.549590][ T819] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.573563][ T819] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.587629][ T819] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.670718][ T8534] ipip0: entered promiscuous mode [ 123.686339][ T8534] ipip0: entered allmulticast mode [ 123.769650][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.990233][ T8563] loop2: detected capacity change from 0 to 512 [ 124.022279][ T8563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 124.040520][ T8563] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.152301][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 124.239597][ T8582] ipip0: entered promiscuous mode [ 124.251578][ T8582] ipip0: entered allmulticast mode [ 124.278551][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.287410][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.312545][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.321738][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.843387][ T8645] loop7: detected capacity change from 0 to 512 [ 125.883724][ T8645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 125.916518][ T8645] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.972444][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.049552][ T8651] ipip0: entered promiscuous mode [ 126.055243][ T8651] ipip0: entered allmulticast mode [ 126.282555][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.296057][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.355156][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1780'. [ 127.100104][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1791'. [ 127.145132][ T28] audit: type=1326 audit(1777476719.373:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.5.1796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c81f5cdd9 code=0x0 [ 127.225446][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.235191][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.280748][ T8706] xfrm0 speed is unknown, defaulting to 1000 [ 127.481562][ T8725] loop2: detected capacity change from 0 to 512 [ 127.497586][ T8725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.512103][ T8725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.537167][ T8725] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.550960][ T28] audit: type=1400 audit(1777476719.783:1204): avc: denied { append } for pid=8724 comm="syz.2.1805" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.585034][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.594472][ T28] audit: type=1400 audit(1777476719.803:1205): avc: denied { ioctl } for pid=8724 comm="syz.2.1805" path="/384/bus/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.704505][ T8721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8721 comm=syz.9.1803 [ 127.862546][ T28] audit: type=1400 audit(1777476720.093:1206): avc: denied { listen } for pid=8738 comm="syz.9.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.974951][ T8751] loop1: detected capacity change from 0 to 128 [ 127.980723][ T28] audit: type=1326 audit(1777476720.203:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0aaaecdd9 code=0x7ffc0000 [ 128.005149][ T8751] FAT-fs (loop1): bogus number of reserved sectors [ 128.017024][ T28] audit: type=1326 audit(1777476720.233:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0aaaecdd9 code=0x7ffc0000 [ 128.043980][ T8751] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 128.058363][ T8751] FAT-fs (loop1): Can't find a valid FAT filesystem [ 128.065375][ T28] audit: type=1326 audit(1777476720.233:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0aaaecdd9 code=0x7ffc0000 [ 128.090856][ T28] audit: type=1326 audit(1777476720.233:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe0aaaecdd9 code=0x7ffc0000 [ 128.122703][ T8751] loop1: detected capacity change from 0 to 128 [ 128.133288][ T28] audit: type=1326 audit(1777476720.243:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0aaaecdd9 code=0x7ffc0000 [ 128.197746][ T28] audit: type=1326 audit(1777476720.243:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0aaaecdd9 code=0x7ffc0000 [ 128.368715][ T8759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8759 comm=syz.5.1820 [ 128.396705][ T8771] netlink: 'syz.9.1835': attribute type 1 has an invalid length. [ 129.402739][ T8832] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x2 [ 129.418461][ T8798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8798 comm=syz.7.1838 [ 129.533253][ T8838] loop5: detected capacity change from 0 to 256 [ 129.597079][ T8836] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 129.607112][ T8842] xfrm0 speed is unknown, defaulting to 1000 [ 129.964075][ T8850] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 130.032465][ T8854] netlink: 572 bytes leftover after parsing attributes in process `syz.1.1860'. [ 130.056197][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'. [ 130.340372][ T8873] netlink: 'syz.7.1868': attribute type 4 has an invalid length. [ 130.439551][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 130.660654][ T8861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8861 comm=syz.1.1865 [ 130.749421][ T8903] xfrm0 speed is unknown, defaulting to 1000 [ 130.959754][ T8915] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 131.064363][ T8925] loop2: detected capacity change from 0 to 128 [ 131.101597][ T8925] syz.2.1891: attempt to access beyond end of device [ 131.101597][ T8925] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 131.155536][ T8930] syz.2.1891: attempt to access beyond end of device [ 131.155536][ T8930] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 131.203948][ T8930] syz.2.1891: attempt to access beyond end of device [ 131.203948][ T8930] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 131.253392][ T8930] syz.2.1891: attempt to access beyond end of device [ 131.253392][ T8930] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 131.281650][ T8930] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 131.706135][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 131.715177][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1909'. [ 131.727760][ T5717] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 131.727786][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 131.736916][ T5717] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 131.746894][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1909'. [ 131.755410][ T5717] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 131.771261][ T5717] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 131.823431][ T8972] loop7: detected capacity change from 0 to 2048 [ 131.848369][ T8972] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.856560][ T8980] ip6gre1: entered promiscuous mode [ 131.872844][ T8980] ip6gre1: entered allmulticast mode [ 131.884126][ T8972] EXT4-fs: Ignoring removed i_version option [ 131.911934][ T8972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.947378][ T8992] ip6gre1: entered promiscuous mode [ 131.973071][ T8992] ip6gre1: entered allmulticast mode [ 131.990520][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.070702][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1925'. [ 132.319899][ T9026] loop7: detected capacity change from 0 to 4096 [ 132.333632][ T9026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.396296][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.935911][ T9067] loop9: detected capacity change from 0 to 2048 [ 132.971932][ T9067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.021923][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 133.021938][ T28] audit: type=1400 audit(1777476725.253:1248): avc: denied { write } for pid=9066 comm="syz.9.1945" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 133.106558][ T9069] loop2: detected capacity change from 0 to 32768 [ 133.150839][ T9069] loop2: p1 p3 < > [ 133.185448][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.262012][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1950'. [ 133.351700][ T9091] loop5: detected capacity change from 0 to 4096 [ 133.384049][ T9091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.400852][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1952'. [ 133.438230][ T4590] udevd[4590]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 133.455702][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 133.499243][ T28] audit: type=1326 audit(1777476725.723:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9103 comm="syz.1.1955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7517ddcdd9 code=0x0 [ 133.576713][ T4573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.035803][ T28] audit: type=1400 audit(1777476726.263:1250): avc: denied { ioctl } for pid=9123 comm="syz.5.1965" path="socket:[24720]" dev="sockfs" ino=24720 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.101119][ T28] audit: type=1400 audit(1777476726.263:1251): avc: denied { write } for pid=9122 comm="syz.9.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.138694][ T28] audit: type=1400 audit(1777476726.323:1252): avc: denied { read } for pid=9122 comm="syz.9.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.188185][ T28] audit: type=1400 audit(1777476726.323:1253): avc: denied { create } for pid=9127 comm="syz.7.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.415620][ T9171] loop1: detected capacity change from 0 to 512 [ 134.435443][ T9171] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.482181][ T9171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.497691][ T3374] Process accounting resumed [ 134.530248][ T9171] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.628617][ T9176] loop2: detected capacity change from 0 to 4096 [ 134.676195][ T9176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.710151][ T9176] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 134.728724][ T9202] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.1985'. [ 134.732390][ T9176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.833188][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.904801][ T9206] loop9: detected capacity change from 0 to 4096 [ 134.930300][ T9206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.942432][ T9211] loop2: detected capacity change from 0 to 128 [ 134.954285][ T9206] EXT4-fs (loop9): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 134.985034][ T9206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.017979][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.103747][ T9206] EXT4-fs (loop9): resizing filesystem from 512 to 0 blocks [ 135.123712][ T9206] EXT4-fs warning (device loop9): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 135.155851][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.288242][ T9237] EXT4-fs: Ignoring removed bh option [ 135.309112][ T9241] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.325942][ T9241] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.335490][ T9237] EXT4-fs: Mount option(s) incompatible with ext2 [ 135.477859][ T827] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.750264][ T9257] loop9: p1 p3 < > [ 135.804982][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 135.805050][ T4582] udevd[4582]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 136.630045][ T28] audit: type=1400 audit(1777476728.853:1254): avc: denied { ioctl } for pid=9283 comm="syz.7.2010" path="socket:[24904]" dev="sockfs" ino=24904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.669082][ T9288] netlink: 'syz.2.2012': attribute type 29 has an invalid length. [ 136.684735][ T9288] netlink: 'syz.2.2012': attribute type 29 has an invalid length. [ 136.707262][ T28] audit: type=1400 audit(1777476728.853:1255): avc: denied { bind } for pid=9283 comm="syz.7.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.717213][ T9288] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2012'. [ 136.735880][ T9295] set_capacity_and_notify: 3 callbacks suppressed [ 136.735895][ T9295] loop5: detected capacity change from 0 to 512 [ 136.768589][ T28] audit: type=1400 audit(1777476728.853:1256): avc: denied { connect } for pid=9283 comm="syz.7.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.811360][ T9295] EXT4-fs: Ignoring removed bh option [ 136.814601][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 136.840822][ T9295] EXT4-fs: Mount option(s) incompatible with ext2 [ 136.841815][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2021'. [ 137.862046][ T9333] dummy0: entered allmulticast mode [ 137.874850][ T9333] dummy0: left allmulticast mode [ 137.973904][ T9342] loop7: detected capacity change from 0 to 512 [ 137.996808][ T9342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.025516][ T9342] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.115906][ T9348] loop9: detected capacity change from 0 to 128 [ 138.251622][ T28] audit: type=1400 audit(1777476730.483:1257): avc: denied { getopt } for pid=9354 comm="syz.2.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.355954][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.370981][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.370981][ T5717] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 138.388619][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.388619][ T5717] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 138.417203][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.417203][ T5717] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 138.443824][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.443824][ T5717] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 138.474387][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.474387][ T5717] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 138.510815][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.510815][ T5717] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 138.540651][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.540651][ T5717] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 138.561809][ T9376] netlink: 'syz.7.2056': attribute type 4 has an invalid length. [ 138.577724][ T9376] netlink: 'syz.7.2056': attribute type 4 has an invalid length. [ 138.586689][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.586689][ T5717] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 138.616466][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.616466][ T5717] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 138.647378][ T5717] kworker/u8:9: attempt to access beyond end of device [ 138.647378][ T5717] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 138.731314][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.795746][ T9387] loop9: detected capacity change from 0 to 1024 [ 138.817385][ T9391] loop1: detected capacity change from 0 to 128 [ 138.843820][ T9387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.899298][ T9397] loop5: detected capacity change from 0 to 512 [ 138.906062][ T9397] ext4: Unknown parameter 'smackfstransmute' [ 139.089735][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.112802][ T9405] loop7: detected capacity change from 0 to 256 [ 139.139367][ T9405] FAT-fs (loop7): Directory bread(block 64) failed [ 139.155848][ T9405] FAT-fs (loop7): Directory bread(block 65) failed [ 139.172648][ T9405] FAT-fs (loop7): Directory bread(block 66) failed [ 139.195563][ T9405] FAT-fs (loop7): Directory bread(block 67) failed [ 139.217902][ T9405] FAT-fs (loop7): Directory bread(block 68) failed [ 139.241125][ T9405] FAT-fs (loop7): Directory bread(block 69) failed [ 139.257001][ T9415] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.273147][ T9405] FAT-fs (loop7): Directory bread(block 70) failed [ 139.288543][ T9405] FAT-fs (loop7): Directory bread(block 71) failed [ 139.309963][ T9405] FAT-fs (loop7): Directory bread(block 72) failed [ 139.332120][ T9405] FAT-fs (loop7): Directory bread(block 73) failed [ 139.701465][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 139.723062][ T9435] bridge_slave_0: default FDB implementation only supports local addresses [ 139.747363][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 139.768315][ T9435] bridge_slave_0: default FDB implementation only supports local addresses [ 140.685376][ T9478] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 140.706012][ T9478] batman_adv: batadv0: Adding interface: ip6gretap1 [ 140.717916][ T9478] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.744314][ T9478] batman_adv: batadv0: Interface activated: ip6gretap1 [ 140.848057][ T28] audit: type=1400 audit(1777476733.073:1258): avc: denied { mount } for pid=9488 comm="syz.9.2100" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 140.990625][ T28] audit: type=1400 audit(1777476733.223:1259): avc: denied { listen } for pid=9498 comm="syz.7.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.151437][ T9495] loop9: detected capacity change from 0 to 32768 [ 141.212420][ T9495] loop9: p1 p3 < > [ 141.236194][ T5285] IPVS: starting estimator thread 0... [ 141.307175][ T9518] loop9: detected capacity change from 0 to 2048 [ 141.339859][ T9512] IPVS: using max 2352 ests per chain, 117600 per kthread [ 141.352674][ T9518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.409430][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.418662][ T4582] udevd[4582]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 141.429217][ T4595] udevd[4595]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 141.592800][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 141.602577][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 141.823298][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2122'. [ 142.202096][ T9560] xfrm0 speed is unknown, defaulting to 1000 [ 142.369748][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2130'. [ 142.389211][ T9565] bridge_slave_0: default FDB implementation only supports local addresses [ 142.410656][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2130'. [ 142.429926][ T9565] bridge_slave_0: default FDB implementation only supports local addresses [ 143.122509][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 143.140258][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2148'. [ 143.141625][ T28] audit: type=1400 audit(1777476735.373:1260): avc: denied { getopt } for pid=9597 comm="syz.7.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.168565][ T9601] netlink: 'syz.5.2148': attribute type 6 has an invalid length. [ 143.186396][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2148'. [ 143.190024][ T68] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.203333][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2148'. [ 143.213139][ T68] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.228701][ T68] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.239828][ T9601] netlink: 'syz.5.2148': attribute type 6 has an invalid length. [ 143.244653][ T68] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.314190][ T9610] netlink: 'syz.5.2161': attribute type 4 has an invalid length. [ 143.357629][ T9610] netlink: 'syz.5.2161': attribute type 4 has an invalid length. [ 143.360583][ T9612] loop2: detected capacity change from 0 to 512 [ 143.374197][ T9612] ext4: Unknown parameter 'smackfstransmute' [ 143.477579][ T9616] xfrm0 speed is unknown, defaulting to 1000 [ 143.606126][ T28] audit: type=1400 audit(1777476735.833:1261): avc: denied { read } for pid=9629 comm="syz.2.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.263389][ T9514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.330756][ T9644] netlink: 'syz.9.2166': attribute type 4 has an invalid length. [ 144.339587][ T9645] loop7: detected capacity change from 0 to 164 [ 144.361375][ T9644] netlink: 'syz.9.2166': attribute type 4 has an invalid length. [ 144.374857][ T9645] rock: directory entry would overflow storage [ 144.400982][ T9645] rock: sig=0x5252, size=5, remaining=3 [ 144.444397][ T28] audit: type=1400 audit(1777476736.673:1262): avc: denied { mount } for pid=9643 comm="syz.7.2168" name="/" dev="loop7" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 144.537769][ T28] audit: type=1400 audit(1777476736.763:1263): avc: denied { unmount } for pid=6648 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 144.583013][ T9656] loop7: detected capacity change from 0 to 512 [ 144.594906][ T28] audit: type=1400 audit(1777476736.823:1264): avc: denied { mount } for pid=9653 comm="syz.1.2174" name="/" dev="autofs" ino=25575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 144.647673][ T9656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.680655][ T28] audit: type=1400 audit(1777476736.893:1265): avc: denied { read } for pid=9663 comm="syz.1.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.732388][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.790661][ T9680] netlink: 'syz.2.2181': attribute type 4 has an invalid length. [ 144.812805][ T9680] netlink: 'syz.2.2181': attribute type 4 has an invalid length. [ 144.857785][ T9684] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2183'. [ 144.869108][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.887437][ T9684] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2183'. [ 144.916878][ T9688] loop7: detected capacity change from 0 to 512 [ 144.936983][ T9688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.951875][ T9688] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.964151][ T28] audit: type=1400 audit(1777476737.193:1266): avc: denied { create } for pid=9687 comm="syz.7.2185" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 144.986501][ T9688] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.2185: corrupted inode contents [ 145.002559][ T9688] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.2185: mark_inode_dirty error [ 145.014714][ T9688] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.2185: corrupted inode contents [ 145.027560][ T9688] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2185: mark_inode_dirty error [ 145.041541][ T9693] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.2185: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 145.041541][ T9693] [ 145.083753][ T9693] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.2185: corrupted inode contents [ 145.111774][ T9693] EXT4-fs error (device loop7): ext4_append:88: inode #2: comm syz.7.2185: mark_inode_dirty error [ 145.131310][ T9693] EXT4-fs error (device loop7) in ext4_append:100: Corrupt filesystem [ 145.152882][ T9688] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.2185: corrupted inode contents [ 145.165139][ T9688] EXT4-fs error (device loop7): add_dirent_to_buf:2151: inode #2: comm syz.7.2185: mark_inode_dirty error [ 145.236864][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.930799][ T9714] netlink: 'syz.1.2196': attribute type 4 has an invalid length. [ 145.978693][ T9714] netlink: 'syz.1.2196': attribute type 4 has an invalid length. [ 146.353939][ T28] audit: type=1400 audit(1777476738.583:1267): avc: denied { getopt } for pid=9730 comm="syz.1.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.439380][ T28] audit: type=1326 audit(1777476738.663:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9734 comm="syz.1.2206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7517ddcdd9 code=0x0 [ 147.691347][ T9676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.730723][ T9765] loop5: detected capacity change from 0 to 128 [ 147.775314][ T9765] bio_check_eod: 101 callbacks suppressed [ 147.775374][ T9765] syz.5.2217: attempt to access beyond end of device [ 147.775374][ T9765] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 147.819982][ T9765] syz.5.2217: attempt to access beyond end of device [ 147.819982][ T9765] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 147.834943][ T9765] syz.5.2217: attempt to access beyond end of device [ 147.834943][ T9765] loop5: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 147.862664][ T9765] syz.5.2217: attempt to access beyond end of device [ 147.862664][ T9765] loop5: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 147.878102][ T28] audit: type=1400 audit(1777476740.103:1269): avc: denied { read open } for pid=9770 comm="syz.7.2221" path="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.903889][ T9773] loop2: detected capacity change from 0 to 164 [ 147.905675][ T9765] Buffer I/O error on dev loop5, logical block 71, lost async page write [ 147.920146][ T9773] rock: directory entry would overflow storage [ 147.933463][ T9773] rock: sig=0x5252, size=5, remaining=3 [ 148.150544][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2225'. [ 148.178994][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2225'. [ 148.291698][ T9787] xfrm0 speed is unknown, defaulting to 1000 [ 148.367490][ T9789] xfrm0 speed is unknown, defaulting to 1000 [ 148.477734][ T9803] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2244'. [ 148.491155][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.504812][ T9803] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2244'. [ 148.746506][ T9822] loop1: detected capacity change from 0 to 164 [ 148.766416][ T9822] rock: directory entry would overflow storage [ 148.786040][ T9822] rock: sig=0x5252, size=5, remaining=3 [ 148.948183][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2248'. [ 148.960351][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.967533][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.990221][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2248'. [ 149.037311][ T28] audit: type=1400 audit(1777476741.263:1270): avc: denied { setopt } for pid=9834 comm="syz.2.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.151415][ T28] audit: type=1326 audit(1777476741.383:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9840 comm="syz.2.2253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0aaaecdd9 code=0x0 [ 149.423144][ T9851] loop5: detected capacity change from 0 to 164 [ 149.466317][ T9851] rock: directory entry would overflow storage [ 149.503112][ T9851] rock: sig=0x5252, size=5, remaining=3 [ 149.504836][ T3374] Process accounting resumed [ 149.731895][ T9862] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2261'. [ 149.758668][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.766013][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.806850][ T9862] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2261'. [ 150.252169][ T9894] xfrm0 speed is unknown, defaulting to 1000 [ 151.081352][ T9912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2278'. [ 151.099222][ T9912] bridge0: port 3(bond0) entered disabled state [ 151.105632][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.112930][ T9912] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.130810][ T926] Process accounting resumed [ 151.165316][ T9912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2278'. [ 151.503629][ T9943] loop1: detected capacity change from 0 to 512 [ 151.525985][ T9943] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2292: invalid block [ 151.550035][ T9943] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.550182][ T9943] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2292: invalid indirect mapped block 4294967295 (level 1) [ 151.573298][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 151.573318][ C1] EXT4-fs (loop1): initial error at time 1777476743: ext4_get_branch:178: inode 11: block 4294967295 [ 151.573361][ C1] EXT4-fs (loop1): last error at time 1777476743: ext4_get_branch:178: inode 11: block 4294967295 [ 151.603845][ T9943] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.604055][ T9943] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2292: invalid indirect mapped block 4294967295 (level 1) [ 151.628843][ T9943] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.630121][ T9943] EXT4-fs (loop1): 2 truncates cleaned up [ 151.651925][ T9943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.720988][ T9963] loop9: detected capacity change from 0 to 128 [ 151.733054][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.759013][ T9963] syz.9.2301: attempt to access beyond end of device [ 151.759013][ T9963] loop9: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 151.774842][ T9965] loop2: detected capacity change from 0 to 8192 [ 151.777276][ T9963] syz.9.2301: attempt to access beyond end of device [ 151.777276][ T9963] loop9: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 151.796698][ T9963] syz.9.2301: attempt to access beyond end of device [ 151.796698][ T9963] loop9: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 151.811352][ T9963] syz.9.2301: attempt to access beyond end of device [ 151.811352][ T9963] loop9: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 151.825578][ T9963] Buffer I/O error on dev loop9, logical block 71, lost async page write [ 151.910858][ T9977] loop1: detected capacity change from 0 to 512 [ 151.932568][ T9977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.950861][ T9977] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.992122][ T9977] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.2309: corrupted inode contents [ 152.012033][ T9977] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.2309: mark_inode_dirty error [ 152.035821][ T9977] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.2309: corrupted inode contents [ 152.067431][ T9977] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.2309: mark_inode_dirty error [ 152.093284][ T9986] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.2309: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 152.093284][ T9986] [ 152.116406][ T9986] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.2309: corrupted inode contents [ 152.129143][ T9986] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.2309: mark_inode_dirty error [ 152.143882][ T9986] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 152.150249][ T9993] lo: entered promiscuous mode [ 152.153170][ T9977] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.2309: corrupted inode contents [ 152.171518][ T9977] EXT4-fs error (device loop1): add_dirent_to_buf:2151: inode #2: comm syz.1.2309: mark_inode_dirty error [ 152.185826][ T9983] xfrm0 speed is unknown, defaulting to 1000 [ 152.241796][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.252657][ T9991] lo: left promiscuous mode [ 152.311186][T10009] loop7: detected capacity change from 0 to 128 [ 152.349375][T10009] syz.7.2322: attempt to access beyond end of device [ 152.349375][T10009] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 152.373872][ T28] audit: type=1400 audit(1777476744.603:1272): avc: denied { setopt } for pid=10017 comm="syz.1.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.398514][T10009] syz.7.2322: attempt to access beyond end of device [ 152.398514][T10009] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 152.430765][T10009] Buffer I/O error on dev loop7, logical block 71, lost async page write [ 152.632821][T10039] loop7: detected capacity change from 0 to 128 [ 152.654227][T10039] Buffer I/O error on dev loop7, logical block 87, lost async page write [ 152.666087][T10039] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 152.694354][T10039] Buffer I/O error on dev loop7, logical block 103, lost async page write [ 152.703155][T10039] Buffer I/O error on dev loop7, logical block 104, lost async page write [ 152.712741][T10039] Buffer I/O error on dev loop7, logical block 107, lost async page write [ 152.723186][T10039] Buffer I/O error on dev loop7, logical block 108, lost async page write [ 152.733693][T10039] Buffer I/O error on dev loop7, logical block 119, lost async page write [ 152.764750][T10045] loop5: detected capacity change from 0 to 256 [ 152.779468][T10045] FAT-fs (loop5): Directory bread(block 64) failed [ 152.786942][T10045] FAT-fs (loop5): Directory bread(block 65) failed [ 152.793847][T10045] FAT-fs (loop5): Directory bread(block 66) failed [ 152.800935][T10045] FAT-fs (loop5): Directory bread(block 67) failed [ 152.807584][T10045] FAT-fs (loop5): Directory bread(block 68) failed [ 152.814306][T10045] FAT-fs (loop5): Directory bread(block 69) failed [ 152.821290][T10045] FAT-fs (loop5): Directory bread(block 70) failed [ 152.827948][T10045] FAT-fs (loop5): Directory bread(block 71) failed [ 152.835316][T10045] FAT-fs (loop5): Directory bread(block 72) failed [ 152.842098][T10045] FAT-fs (loop5): Directory bread(block 73) failed [ 152.856159][T10045] bio_check_eod: 42 callbacks suppressed [ 152.856175][T10045] syz.5.2335: attempt to access beyond end of device [ 152.856175][T10045] loop5: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 152.926719][ T28] audit: type=1400 audit(1777476745.153:1273): avc: denied { bind } for pid=10048 comm="syz.5.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.010763][T10051] xfrm0 speed is unknown, defaulting to 1000 [ 153.371560][T10070] loop9: detected capacity change from 0 to 4096 [ 153.382889][T10070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.411507][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.298973][T10010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.347014][ T28] audit: type=1400 audit(1777476747.573:1274): avc: denied { bind } for pid=10081 comm="syz.7.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.474581][ T28] audit: type=1400 audit(1777476747.703:1275): avc: denied { read } for pid=10081 comm="syz.7.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.532977][T10093] xfrm0 speed is unknown, defaulting to 1000 [ 156.392408][T10132] ip6gre1: entered promiscuous mode [ 156.397876][T10132] ip6gre1: entered allmulticast mode [ 156.408308][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.409360][T10132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.427006][T10134] loop9: detected capacity change from 0 to 1024 [ 156.438888][ T5723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.444367][T10134] EXT4-fs: Ignoring removed bh option [ 156.447985][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.466403][T10137] hsr0: entered promiscuous mode [ 156.472456][T10137] __nla_validate_parse: 4 callbacks suppressed [ 156.472470][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 156.491948][T10134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.548242][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.637212][T10154] loop2: detected capacity change from 0 to 512 [ 156.667250][T10154] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz.2.2376: iget: bogus i_mode (0) [ 156.679992][T10154] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 156.684477][T10154] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2376: couldn't read orphan inode 17 (err -117) [ 156.693762][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 156.693783][ C0] EXT4-fs (loop2): initial error at time 1777476748: ext4_orphan_get:1397: inode 17 [ 156.693824][ C0] EXT4-fs (loop2): last error at time 1777476748: ext4_orphan_get:1397: inode 17 [ 156.694043][T10152] loop1: detected capacity change from 0 to 8192 [ 156.714131][ T3337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.764447][T10154] loop2: lost filesystem error report for type 5 error -117 [ 156.765649][T10154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.793785][ T3337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.810807][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.976205][T10167] loop2: detected capacity change from 0 to 1024 [ 156.983549][T10167] EXT4-fs: Ignoring removed orlov option [ 157.004349][T10167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.101016][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 157.239333][ T28] audit: type=1400 audit(1777476749.463:1276): avc: denied { read write } for pid=10183 comm="syz.9.2386" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.264710][ T28] audit: type=1400 audit(1777476749.463:1277): avc: denied { open } for pid=10183 comm="syz.9.2386" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.289646][ T28] audit: type=1400 audit(1777476749.463:1278): avc: denied { ioctl } for pid=10183 comm="syz.9.2386" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 157.411612][T10190] loop7: detected capacity change from 0 to 512 [ 157.420033][T10190] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 157.437598][T10190] EXT4-fs (loop7): 1 truncate cleaned up [ 157.444277][T10190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.482916][ T28] audit: type=1400 audit(1777476749.713:1279): avc: denied { append } for pid=10196 comm="syz.9.2390" name="file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.543439][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.641060][T10203] loop7: detected capacity change from 0 to 8192 [ 157.762522][T10212] loop9: detected capacity change from 0 to 2048 [ 157.789360][T10212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.829654][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.890325][T10222] syzkaller1: entered promiscuous mode [ 157.916285][T10222] syzkaller1: entered allmulticast mode [ 157.945985][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.141466][ T28] audit: type=1400 audit(1777476750.373:1280): avc: denied { unmount } for pid=6648 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 158.206291][T10258] loop1: detected capacity change from 0 to 128 [ 158.990796][T10275] loop7: detected capacity change from 0 to 1024 [ 159.004067][T10275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 159.033656][T10275] System zones: 0-1, 3-36 [ 159.040675][T10275] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2432: bad orphan inode 134217728 [ 159.051357][T10275] loop7: lost filesystem error report for type 5 error -117 [ 159.051746][T10275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.268275][T10298] loop2: detected capacity change from 0 to 1024 [ 159.286042][T10298] EXT4-fs: Ignoring removed bh option [ 159.312819][T10116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.323368][T10298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.385417][ T3504] IPVS: starting estimator thread 0... [ 159.461319][T10307] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2433'. [ 159.490727][T10305] IPVS: using max 2400 ests per chain, 120000 per kthread [ 159.609261][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.614130][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.671286][T10319] netlink: 'syz.7.2439': attribute type 21 has an invalid length. [ 159.682870][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2439'. [ 159.713118][T10319] netlink: 'syz.7.2439': attribute type 21 has an invalid length. [ 159.713079][ T68] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.713174][ T68] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.732515][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2439'. [ 159.751009][ T68] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.766568][ T68] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.131939][ T28] audit: type=1400 audit(1777476752.363:1281): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 160.643892][T10392] xfrm0 speed is unknown, defaulting to 1000 [ 160.675097][ T28] audit: type=1400 audit(1777477008.956:1282): avc: denied { name_bind } for pid=10395 comm="syz.9.2470" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 160.769858][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.615409][T10453] xt_hashlimit: size too large, truncated to 1048576 [ 161.811155][T10461] xt_hashlimit: size too large, truncated to 1048576 [ 162.210437][ T4448] Bluetooth: hci0: command 0x1003 tx timeout [ 162.216590][ T3752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.382068][T10478] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2512'. [ 162.453962][ T28] audit: type=1326 audit(1777477010.736:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.488845][ T28] audit: type=1326 audit(1777477010.736:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.512686][ T28] audit: type=1326 audit(1777477010.736:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.544451][ T28] audit: type=1326 audit(1777477010.736:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.580133][T10490] set_capacity_and_notify: 1 callbacks suppressed [ 162.580149][T10490] loop2: detected capacity change from 0 to 512 [ 162.580428][ T28] audit: type=1326 audit(1777477010.736:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.618343][T10493] syz.9.2508: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 162.621915][ T28] audit: type=1326 audit(1777477010.736:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.656519][ T28] audit: type=1326 audit(1777477010.736:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.659492][T10490] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 162.680079][ T28] audit: type=1326 audit(1777477010.736:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.713553][ T28] audit: type=1326 audit(1777477010.736:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.9.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd4c68dcdd9 code=0x7ffc0000 [ 162.735869][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.9.2508 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.735945][T10493] Tainted: [W]=WARN [ 162.735952][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.735964][T10493] Call Trace: [ 162.735972][T10493] [ 162.735980][T10493] __dump_stack+0x1d/0x30 [ 162.736002][T10493] dump_stack_lvl+0x95/0xd0 [ 162.736021][T10493] dump_stack+0x15/0x1b [ 162.736085][T10493] warn_alloc+0x145/0x1c0 [ 162.736107][T10493] ? futex_unqueue+0xc5/0xf0 [ 162.736131][T10493] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 162.736161][T10493] ? __pfx_futex_wake_mark+0x10/0x10 [ 162.736180][T10493] ? __rcu_read_unlock+0x4e/0x70 [ 162.736199][T10493] ? avc_has_perm_noaudit+0xab/0x130 [ 162.736226][T10493] vmalloc_user_noprof+0x7d/0xb0 [ 162.736271][T10493] ? xskq_create+0x80/0xe0 [ 162.736338][T10493] xskq_create+0x80/0xe0 [ 162.736358][T10493] xsk_init_queue+0x70/0xb0 [ 162.736448][T10493] xsk_setsockopt+0x477/0x640 [ 162.736468][T10493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 162.736487][T10493] __sys_setsockopt+0x184/0x200 [ 162.736537][T10493] __x64_sys_setsockopt+0x64/0x80 [ 162.736556][T10493] x64_sys_call+0x2327/0x3020 [ 162.736576][T10493] do_syscall_64+0x12c/0x3b0 [ 162.736597][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.736639][T10493] RIP: 0033:0x7fd4c68dcdd9 [ 162.736694][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.736753][T10493] RSP: 002b:00007fd4c5337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.736771][T10493] RAX: ffffffffffffffda RBX: 00007fd4c6b55fa0 RCX: 00007fd4c68dcdd9 [ 162.736816][T10493] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 162.736865][T10493] RBP: 00007fd4c6972d69 R08: 0000000000000004 R09: 0000000000000000 [ 162.736878][T10493] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 162.736965][T10493] R13: 00007fd4c6b56038 R14: 00007fd4c6b55fa0 R15: 00007ffe10995b38 [ 162.736983][T10493] [ 162.737028][T10493] Mem-Info: [ 162.737085][T10493] active_anon:98542 inactive_anon:5 isolated_anon:0 [ 162.737085][T10493] active_file:24966 inactive_file:5063 isolated_file:0 [ 162.737085][T10493] unevictable:3 dirty:154 writeback:0 [ 162.737085][T10493] slab_reclaimable:3879 slab_unreclaimable:24760 [ 162.737085][T10493] mapped:29278 shmem:70620 pagetables:5114 [ 162.737085][T10493] sec_pagetables:0 bounce:0 [ 162.737085][T10493] kernel_misc_reclaimable:0 [ 162.737085][T10493] free:1709098 free_pcp:13618 free_cma:0 [ 162.752086][T10490] EXT4-fs (loop2): 1 truncate cleaned up [ 162.790926][T10493] Node 0 active_anon:394168kB inactive_anon:20kB active_file:99864kB inactive_file:20252kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:117112kB dirty:616kB writeback:0kB shmem:282480kB kernel_stack:4576kB pagetables:20456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 162.808907][T10490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.816660][T10497] loop7: detected capacity change from 0 to 128 [ 162.908705][T10493] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.118789][T10493] lowmem_reserve[]: 0 2878 7857 7857 [ 163.128496][ T5717] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.128612][T10493] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 163.187311][T10508] netlink: 'syz.7.2517': attribute type 10 has an invalid length. [ 163.195895][T10508] netlink: 'syz.7.2517': attribute type 3 has an invalid length. [ 163.207818][T10493] lowmem_reserve[]: 0 0 4978 4978 [ 163.213209][T10493] Node 0 Normal free:3876572kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:394284kB inactive_anon:20kB active_file:99864kB inactive_file:20252kB unevictable:12kB writepending:616kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:50292kB local_pcp:30388kB free_cma:0kB [ 163.248490][T10493] lowmem_reserve[]: 0 0 0 0 [ 163.249263][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.253428][T10493] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 163.276432][T10493] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 163.293047][T10493] Node 0 Normal: 520*4kB (UM) 321*8kB (UME) 120*16kB (UME) 200*32kB (UME) 79*64kB (UME) 87*128kB (UM) 79*256kB (UM) 67*512kB (UM) 58*1024kB (UM) 31*2048kB (U) 896*4096kB (UM) = 3876584kB [ 163.313375][T10493] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 163.322964][T10493] 103709 total pagecache pages [ 163.327998][T10493] 20 pages in swap cache [ 163.340852][T10502] loop1: detected capacity change from 0 to 32768 [ 163.343282][T10493] Free swap = 124608kB [ 163.360456][T10493] Total swap = 124996kB [ 163.364872][T10493] 2097051 pages RAM [ 163.368792][T10493] 0 pages HighMem/MovableOnly [ 163.373648][T10493] 81630 pages reserved [ 163.471707][T10524] netlink: 'syz.1.2522': attribute type 29 has an invalid length. [ 163.490345][T10526] netlink: 'syz.2.2523': attribute type 8 has an invalid length. [ 163.500765][T10524] netlink: 'syz.1.2522': attribute type 29 has an invalid length. [ 163.521949][T10524] netlink: 'syz.1.2522': attribute type 32 has an invalid length. [ 163.531538][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2523'. [ 163.546183][T10524] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2522'. [ 163.559486][T10526] veth1_to_team: entered promiscuous mode [ 163.573251][T10526] gretap0: entered promiscuous mode [ 163.583417][T10526] veth1_to_team: left promiscuous mode [ 163.590437][T10526] gretap0: left promiscuous mode [ 163.782308][T10546] loop9: detected capacity change from 0 to 512 [ 163.789171][T10546] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 163.834755][T10546] EXT4-fs (loop9): 1 truncate cleaned up [ 163.847485][T10546] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.042247][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.067977][T10552] loop9: detected capacity change from 0 to 512 [ 164.107084][T10552] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2531: iget: bad i_size value: 38620345925642 [ 164.139261][T10552] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.139813][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 164.155412][ C0] EXT4-fs (loop9): initial error at time 1777477012: ext4_orphan_get:1397: inode 15 [ 164.160520][T10552] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2531: couldn't read orphan inode 15 (err -117) [ 164.164825][ C0] EXT4-fs (loop9): last error at time 1777477012: ext4_orphan_get:1397: inode 15 [ 164.184717][T10552] loop9: lost filesystem error report for type 5 error -117 [ 164.195210][T10552] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.344489][T10577] loop2: detected capacity change from 0 to 1024 [ 164.362213][T10577] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 164.393288][T10577] System zones: 0-1, 3-36 [ 164.412324][T10577] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2539: bad orphan inode 134217728 [ 164.419230][T10552] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2531: bg 0: block 5: invalid block bitmap [ 164.435303][T10577] loop2: lost filesystem error report for type 5 error -117 [ 164.435761][T10552] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 164.436709][T10577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.443242][T10552] EXT4-fs (loop9): This should not happen!! Data will be lost [ 164.443242][T10552] [ 164.479866][T10552] EXT4-fs (loop9): Total free blocks count 0 [ 164.487371][T10552] EXT4-fs (loop9): Free/Dirty block details [ 164.493544][T10552] EXT4-fs (loop9): free_blocks=0 [ 164.498603][T10552] EXT4-fs (loop9): dirty_blocks=12 [ 164.503892][T10552] EXT4-fs (loop9): Block reservation details [ 164.510111][T10552] EXT4-fs (loop9): i_reserved_data_blocks=12 [ 164.547325][ T5725] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 8 with error 28 [ 164.570434][ T8302] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 164.785119][T10592] dvmrp0: entered allmulticast mode [ 164.883003][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.947037][T10600] netlink: 'syz.9.2550': attribute type 25 has an invalid length. [ 164.956702][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2550'. [ 164.973964][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2552'. [ 164.975193][ T5723] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.993441][T10600] netlink: 'syz.9.2550': attribute type 25 has an invalid length. [ 164.996468][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2552'. [ 165.002311][ T5723] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.019146][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2550'. [ 165.020255][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2552'. [ 165.028228][ T5723] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.053313][ T5723] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.054150][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2552'. [ 165.169872][ T4448] Bluetooth: hci0: command 0x1003 tx timeout [ 165.170019][ T3752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.299014][T10621] loop7: detected capacity change from 0 to 2048 [ 165.323254][T10621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.349256][ T6648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.397585][T10627] loop9: detected capacity change from 0 to 1024 [ 165.415075][T10627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 165.427001][T10627] System zones: 0-1, 3-36 [ 165.432605][T10627] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2560: bad orphan inode 134217728 [ 165.443586][T10627] loop9: lost filesystem error report for type 5 error -117 [ 165.444321][T10627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.511860][T10633] netlink: 128680 bytes leftover after parsing attributes in process `syz.7.2571'. [ 165.547706][T10627] ================================================================== [ 165.555828][T10627] BUG: KCSAN: data-race in filemap_read / filemap_read [ 165.562707][T10627] [ 165.565030][T10627] read to 0xffff888103943e20 of 8 bytes by task 10634 on cpu 1: [ 165.572661][T10627] filemap_read+0x6f/0xa10 [ 165.577093][T10627] generic_file_read_iter+0x79/0x330 [ 165.582390][T10627] ext4_file_read_iter+0x1cc/0x290 [ 165.587516][T10627] copy_splice_read+0x471/0x6c0 [ 165.592375][T10627] splice_direct_to_actor+0x28f/0x670 [ 165.597758][T10627] do_splice_direct+0x119/0x1a0 [ 165.602637][T10627] do_sendfile+0x382/0x650 [ 165.607075][T10627] __x64_sys_sendfile64+0x105/0x150 [ 165.612295][T10627] x64_sys_call+0x2dc4/0x3020 [ 165.616977][T10627] do_syscall_64+0x12c/0x3b0 [ 165.621576][T10627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.627480][T10627] [ 165.629815][T10627] write to 0xffff888103943e20 of 8 bytes by task 10627 on cpu 0: [ 165.637532][T10627] filemap_read+0x98d/0xa10 [ 165.642055][T10627] generic_file_read_iter+0x79/0x330 [ 165.647365][T10627] ext4_file_read_iter+0x1cc/0x290 [ 165.652498][T10627] copy_splice_read+0x471/0x6c0 [ 165.657386][T10627] splice_direct_to_actor+0x28f/0x670 [ 165.662773][T10627] do_splice_direct+0x119/0x1a0 [ 165.667648][T10627] do_sendfile+0x382/0x650 [ 165.672053][T10627] __x64_sys_sendfile64+0x105/0x150 [ 165.677251][T10627] x64_sys_call+0x2dc4/0x3020 [ 165.681915][T10627] do_syscall_64+0x12c/0x3b0 [ 165.686525][T10627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.692399][T10627] [ 165.694708][T10627] value changed: 0x00000000000001a8 -> 0x00000000000001a9 [ 165.701795][T10627] [ 165.704105][T10627] Reported by Kernel Concurrency Sanitizer on: [ 165.710240][T10627] CPU: 0 UID: 0 PID: 10627 Comm: syz.9.2560 Tainted: G W syzkaller #0 PREEMPT(full) [ 165.721178][T10627] Tainted: [W]=WARN [ 165.724963][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.735005][T10627] ================================================================== [ 165.780214][ T8302] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.612798][T10530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.889876][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!