last executing test programs: 3m25.508503991s ago: executing program 32 (id=467): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00000ed000/0x2000)=nil, &(0x7f0000736000/0x2000)=nil, 0x0, 0x0, 0x0, 0xb43c, 0x0, 0x0, 0x0, 0x31}) 3m23.97941006s ago: executing program 33 (id=496): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@rthdr={{0x18, 0x29, 0x39, {0xc, 0x0, 0x2, 0x5}}}], 0x18}, 0x840) 3m22.882961485s ago: executing program 34 (id=507): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) pwrite64(r0, &(0x7f00000004c0)="fdf1", 0x2, 0xd39) 3m11.743687227s ago: executing program 35 (id=997): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r0) 2m53.562146922s ago: executing program 36 (id=1492): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x50d6bb4402351a4c}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x4040080) 2m24.744640061s ago: executing program 37 (id=1950): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0005006970768a616e00000c0002"], 0x44}}, 0x0) 1m51.247489483s ago: executing program 3 (id=3547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m51.217852714s ago: executing program 3 (id=3549): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7e5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1m51.193448566s ago: executing program 3 (id=3550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_UID={0x8}]}, 0x2c}}, 0xea5bc50b6199d77e) 1m51.148195579s ago: executing program 3 (id=3553): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000002000f030000000000003404000001ed0a0014040000170000800f400000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 1m51.12887028s ago: executing program 3 (id=3554): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m51.101363041s ago: executing program 3 (id=3555): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 1m35.731878331s ago: executing program 38 (id=3555): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 1m35.558171032s ago: executing program 7 (id=3799): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.355756153s ago: executing program 7 (id=3808): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m35.355403243s ago: executing program 7 (id=3809): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_io_uring_setup(0x6d39, &(0x7f00000035c0)={0x0, 0xd0b8, 0x8, 0x3, 0xa3}, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 1m35.299846207s ago: executing program 7 (id=3813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580), 0x0}, 0x20) 1m35.273563458s ago: executing program 7 (id=3815): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') 1m34.793288456s ago: executing program 7 (id=3826): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbb, {0x0, 0x0, 0x0, r1, {0x3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x9}, {0x9b600000, 0x80000000, 0x3, 0x0, 0x9, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m19.770116117s ago: executing program 39 (id=3826): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbb, {0x0, 0x0, 0x0, r1, {0x3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x9}, {0x9b600000, 0x80000000, 0x3, 0x0, 0x9, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m7.947369289s ago: executing program 0 (id=4618): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) 1m7.919094741s ago: executing program 0 (id=4620): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) 1m7.871125624s ago: executing program 0 (id=4625): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, r2, 0x2f, 0x2034, r2}, 0x20) 1m7.825895426s ago: executing program 0 (id=4627): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1m7.458764538s ago: executing program 0 (id=4641): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m7.441451399s ago: executing program 0 (id=4642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75f4f939", 0x27) 52.430754958s ago: executing program 40 (id=4642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75f4f939", 0x27) 27.47270106s ago: executing program 1 (id=6213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x2c}}, 0x18) 27.426459013s ago: executing program 1 (id=6214): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 27.366524786s ago: executing program 1 (id=6217): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xdb, 0x9d, 0x1b, 0x8, 0x12d1, 0xfae2, 0x708b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x4, 0x1a}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 26.591802832s ago: executing program 1 (id=6264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 26.544675134s ago: executing program 1 (id=6267): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) 26.544579984s ago: executing program 1 (id=6268): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mlockall(0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 16.675209503s ago: executing program 4 (id=6526): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000200)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 16.374526641s ago: executing program 4 (id=6529): r0 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 15.606465756s ago: executing program 4 (id=6540): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@newchain={0x24, 0x64, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0x6, 0x6}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x62000056}, 0x8000) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 15.489306522s ago: executing program 4 (id=6542): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 15.425984516s ago: executing program 4 (id=6544): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @empty, 0x1}, {0xa, 0x4e23, 0xfffffffd, @local, 0xffffffff}, 0xffffffffffffffff, 0x100}}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4) 15.02916274s ago: executing program 4 (id=6555): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x110, 0x0, 0x110, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 15.026133209s ago: executing program 41 (id=6555): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x110, 0x0, 0x110, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 11.486965397s ago: executing program 42 (id=6268): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mlockall(0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 2.20287044s ago: executing program 6 (id=6851): socket$kcm(0x29, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 2.0394391s ago: executing program 6 (id=6852): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4601040202be05000000000000020006000400000019000000380000005e020000d30a00000400200001000500090000010000000051e57464"], 0x758) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.970729444s ago: executing program 6 (id=6854): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffa83) 1.649124803s ago: executing program 6 (id=6862): syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7GtwjAYBOB7eQlJCsRKsAENm7APFQ1TULEGJWMEQWyYACGk7yvs8y+dLYev+nul4bn+l9M26zk0ZbC8DJmmsdbGdG3OSRbHW/rHpN60X5Vw7ZPNWPvtvB2m7v1wszt97mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DvuAQAA//8yUgpN") r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8800, 0x7528, 0x5cc, 0x8002, 0x9f4}) 1.01354384s ago: executing program 9 (id=6877): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) signalfd(r1, &(0x7f00000000c0)={[0x7317]}, 0x8) 991.724501ms ago: executing program 9 (id=6878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x400}, {0x0, 0x0, 0x101}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10000000) 972.030342ms ago: executing program 5 (id=6879): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) get_mempolicy(0x0, &(0x7f00000000c0), 0xcc, &(0x7f0000ffb000/0x2000)=nil, 0x4) 959.489214ms ago: executing program 9 (id=6880): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(0x3) 941.816515ms ago: executing program 5 (id=6882): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 929.082745ms ago: executing program 9 (id=6883): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x339}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 897.663817ms ago: executing program 9 (id=6884): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00602000000590000a2bc5603ca00000f7f89000000200000000101ff000000030909000000000000005e00000000000000", 0x48}], 0x1) 896.438597ms ago: executing program 5 (id=6885): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 772.693834ms ago: executing program 6 (id=6889): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x1d}}], 0x10) listen(r0, 0x7) 738.692376ms ago: executing program 6 (id=6891): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) 718.951098ms ago: executing program 8 (id=6892): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 554.815337ms ago: executing program 8 (id=6893): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x337, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x800, 0x14) 491.105431ms ago: executing program 8 (id=6895): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4e042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x19c) write(r1, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 462.304212ms ago: executing program 2 (id=6896): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) listen(r2, 0x5) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 417.316435ms ago: executing program 5 (id=6897): r0 = socket$unix(0x1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 407.295165ms ago: executing program 2 (id=6898): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) readahead(r0, 0x4, 0xc) 382.948167ms ago: executing program 5 (id=6899): set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 368.261918ms ago: executing program 2 (id=6900): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x183581) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee3, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 257.189875ms ago: executing program 2 (id=6901): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 200.153788ms ago: executing program 2 (id=6902): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r2, 0x6}, &(0x7f0000000300)=0x8) 164.53055ms ago: executing program 2 (id=6903): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 139.620181ms ago: executing program 5 (id=6904): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 124.213602ms ago: executing program 8 (id=6905): unshare(0x2040400) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 61.025526ms ago: executing program 8 (id=6906): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14.568789ms ago: executing program 9 (id=6907): r0 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280), &(0x7f00000005c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=6908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x880) kernel console output (not intermixed with test programs): `syz.4.4682'. [ 197.965823][T16272] set_capacity_and_notify: 8 callbacks suppressed [ 197.965839][T16272] loop9: detected capacity change from 0 to 128 [ 198.036293][T16280] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 198.044350][T16272] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.079788][T16272] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.144969][ T8585] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.439333][ T183] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.485949][ T183] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.536093][ T183] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.585500][ T183] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.664576][ T183] bridge_slave_1: left allmulticast mode [ 198.670512][ T183] bridge_slave_1: left promiscuous mode [ 198.676304][ T183] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.687515][ T183] bridge_slave_0: left allmulticast mode [ 198.693186][ T183] bridge_slave_0: left promiscuous mode [ 198.699158][ T183] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.866804][ T183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.883482][ T183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.895695][ T183] bond0 (unregistering): Released all slaves [ 198.965985][ T183] tipc: Disabling bearer [ 198.971261][ T183] tipc: Left network mode [ 198.999246][ T183] hsr_slave_0: left promiscuous mode [ 199.020424][ T183] hsr_slave_1: left promiscuous mode [ 199.035216][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.042887][ T183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.071271][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.079432][ T183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.117008][ T183] batadv0: left promiscuous mode [ 199.132271][ T183] dummy0: left allmulticast mode [ 199.137508][ T183] veth1_macvtap: left promiscuous mode [ 199.153165][ T183] veth0_macvtap: left promiscuous mode [ 199.163315][ T183] veth1_vlan: left promiscuous mode [ 199.173422][ T183] veth0_vlan: left promiscuous mode [ 199.212271][T16347] loop2: detected capacity change from 0 to 512 [ 199.230883][T16347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.262071][T16347] EXT4-fs (loop2): 1 truncate cleaned up [ 199.275368][T16347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.473910][ T183] team0 (unregistering): Port device team_slave_1 removed [ 199.495973][ T183] team0 (unregistering): Port device team_slave_0 removed [ 199.596326][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.935579][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4723'. [ 199.982363][T16413] sctp: [Deprecated]: syz.1.4726 (pid 16413) Use of int in max_burst socket option deprecated. [ 199.982363][T16413] Use struct sctp_assoc_value instead [ 200.033712][T16407] hsr_slave_1 (unregistering): left promiscuous mode [ 200.840787][T16500] loop4: detected capacity change from 0 to 1024 [ 200.914255][T16500] EXT4-fs: Ignoring removed nobh option [ 200.919949][T16500] EXT4-fs: Ignoring removed bh option [ 200.974434][T16500] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 201.021687][T16500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.046933][T16507] loop2: detected capacity change from 0 to 512 [ 201.084456][T16507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.098507][T16500] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.4749: Allocating blocks 385-513 which overlap fs metadata [ 201.114762][T16507] EXT4-fs (loop2): 1 truncate cleaned up [ 201.131358][T16507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.147078][T16497] EXT4-fs (loop4): pa ffff888107dfd0e0: logic 16, phys. 129, len 24 [ 201.155591][T16497] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 201.215427][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.301310][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.456237][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4761'. [ 201.646085][T16525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.673884][T16525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.971317][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4768'. [ 202.243180][T16588] loop2: detected capacity change from 0 to 128 [ 202.250311][T16588] FAT-fs (loop2): bogus logical sector size 2134 [ 202.256885][T16588] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 202.266463][T16588] FAT-fs (loop2): Can't find a valid FAT filesystem [ 202.347477][T16595] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 202.385167][T16600] loop9: detected capacity change from 0 to 128 [ 202.401118][T16600] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 202.423882][T16600] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.436574][T16600] ext2 filesystem being mounted at /700/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.457027][T16605] loop2: detected capacity change from 0 to 512 [ 202.475037][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 202.475052][ T29] audit: type=1400 audit(2000000047.460:2340): avc: denied { rename } for pid=16599 comm="syz.9.4787" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 202.522563][ T7742] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.532655][T16605] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.555624][T16605] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #2: comm syz.2.4789: Directory hole found for htree leaf block 0 [ 202.583002][T16605] EXT4-fs (loop2): Remounting filesystem read-only [ 202.614459][T15001] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 202.649747][T16618] __nla_validate_parse: 4 callbacks suppressed [ 202.649763][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4796'. [ 202.780642][T16634] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.4803'. [ 203.017201][T16666] program syz.1.4818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.130596][T16692] netlink: 'syz.9.4822': attribute type 1 has an invalid length. [ 203.138450][T16692] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4822'. [ 203.169299][T16692] netlink: 'syz.9.4822': attribute type 1 has an invalid length. [ 203.185226][T16697] loop1: detected capacity change from 0 to 1024 [ 203.188436][T16699] random: crng reseeded on system resumption [ 203.231697][T16697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.250166][ T29] audit: type=1400 audit(2000000048.220:2341): avc: denied { ioctl } for pid=16698 comm="syz.2.4829" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.364290][T14329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.403846][T16715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.411210][T16715] IPv6: NLM_F_CREATE should be set when creating new route [ 203.418690][T16715] IPv6: NLM_F_CREATE should be set when creating new route [ 203.425990][T16715] IPv6: NLM_F_CREATE should be set when creating new route [ 203.445100][T16715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.872163][ T29] audit: type=1400 audit(2000000048.850:2342): avc: denied { create } for pid=16759 comm="syz.1.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 203.873912][T16759] delete_channel: no stack [ 203.919530][ T29] audit: type=1400 audit(2000000048.860:2343): avc: denied { ioctl } for pid=16759 comm="syz.1.4846" path="socket:[49353]" dev="sockfs" ino=49353 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 204.449706][T16775] loop1: detected capacity change from 0 to 512 [ 204.499288][T16775] EXT4-fs error (device loop1): __ext4_fill_super:5553: inode #2: comm syz.1.4852: iget: checksum invalid [ 204.525719][T16775] EXT4-fs (loop1): get root inode failed [ 204.531403][T16775] EXT4-fs (loop1): mount failed [ 204.567898][T16775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4852'. [ 205.093139][T16822] loop1: detected capacity change from 0 to 2048 [ 205.116948][T16822] EXT4-fs: Ignoring removed bh option [ 205.165257][T16829] loop4: detected capacity change from 0 to 128 [ 205.172471][T16822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.185074][T16829] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 205.202281][T16829] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.223974][T16829] ext2 filesystem being mounted at /1212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.242022][T16829] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1403989086 > max in inode 12 [ 205.317248][T14329] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.364776][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.394318][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4880'. [ 205.451861][ T29] audit: type=1326 audit(2000000050.430:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 205.475849][ T29] audit: type=1326 audit(2000000050.430:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 205.499913][ T29] audit: type=1326 audit(2000000050.430:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 205.523587][ T29] audit: type=1326 audit(2000000050.430:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 205.547896][ T29] audit: type=1326 audit(2000000050.430:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 205.572220][ T29] audit: type=1326 audit(2000000050.430:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16840 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 205.598695][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4886'. [ 205.970424][T16871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.001739][T16871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.015192][T16876] dvmrp1: tun_chr_ioctl cmd 35108 [ 206.251080][T16892] loop2: detected capacity change from 0 to 512 [ 206.268413][T16892] EXT4-fs warning (device loop2): read_mmp_block:111: Error -74 while reading MMP block 34 [ 206.666273][T16919] loop9: detected capacity change from 0 to 164 [ 206.774525][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4925'. [ 206.838123][T16937] program syz.1.4927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.897381][T16944] loop9: detected capacity change from 0 to 256 [ 206.968030][T16953] loop2: detected capacity change from 0 to 512 [ 207.015910][T16953] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4935: error while reading EA inode 32 err=-116 [ 207.064000][T16953] EXT4-fs (loop2): Remounting filesystem read-only [ 207.070567][T16953] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 207.130271][T16953] EXT4-fs (loop2): 1 orphan inode deleted [ 207.143557][T16953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.280268][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.358734][T16981] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4946'. [ 207.602050][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 207.602064][ T29] audit: type=1400 audit(2000000052.580:2351): avc: denied { append } for pid=16992 comm="syz.9.4952" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.764883][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4958'. [ 207.908986][T17023] loop9: detected capacity change from 0 to 512 [ 207.952738][T17026] tap0: tun_chr_ioctl cmd 1074025676 [ 207.958409][T17026] tap0: owner set to 0 [ 207.984762][T17023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.018024][T17023] ext4 filesystem being mounted at /732/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.252177][T17044] loop2: detected capacity change from 0 to 2048 [ 208.286259][T17044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.346208][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.361409][ T7742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.472255][T17059] Falling back ldisc for ptm0. [ 208.598867][ T29] audit: type=1400 audit(2000000053.580:2352): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 208.932151][ T29] audit: type=1400 audit(2000000053.910:2353): avc: denied { shutdown } for pid=17103 comm="syz.1.5002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.297248][T17146] loop9: detected capacity change from 0 to 512 [ 209.303954][T17144] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5022'. [ 209.347632][T17146] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5021: inode has both inline data and extents flags [ 209.392606][T17146] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5021: couldn't read orphan inode 15 (err -117) [ 209.405306][T17146] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.542659][ T7742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.587801][ T29] audit: type=1400 audit(2000000054.570:2354): avc: denied { connect } for pid=17172 comm="syz.4.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.603655][T17176] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5037'. [ 209.672876][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5039'. [ 209.712683][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5039'. [ 209.834773][T17193] loop4: detected capacity change from 0 to 128 [ 209.983860][ T29] audit: type=1400 audit(2000000054.970:2355): avc: denied { ioctl } for pid=17206 comm="syz.9.5051" path="socket:[50119]" dev="sockfs" ino=50119 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.031956][T17205] loop2: detected capacity change from 0 to 8192 [ 210.062761][T17205] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 210.070589][T17205] FAT-fs (loop2): Filesystem has been set read-only [ 210.299176][T17235] loop9: detected capacity change from 0 to 512 [ 210.306621][T17233] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5061'. [ 210.315776][T17235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 210.325059][T17235] System zones: 1-12 [ 210.335324][T17235] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.5062: corrupted in-inode xattr: e_value size too large [ 210.349819][T17235] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5062: couldn't read orphan inode 15 (err -117) [ 210.381113][T17235] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.413866][T17241] sctp: [Deprecated]: syz.1.5064 (pid 17241) Use of int in maxseg socket option. [ 210.413866][T17241] Use struct sctp_assoc_value instead [ 210.451887][ T7742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.495031][T17245] loop2: detected capacity change from 0 to 1024 [ 210.522252][T17245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.545983][T17245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.635344][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.805947][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5073'. [ 210.858156][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.865935][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.873506][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.881137][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.888849][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.896407][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.904166][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.911896][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.919671][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.927490][ T3489] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 210.935584][ T3489] hid-generic 0103:0004:0000.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 210.962434][T17276] netlink: 'syz.4.5077': attribute type 12 has an invalid length. [ 210.970369][T17276] netlink: 'syz.4.5077': attribute type 29 has an invalid length. [ 210.978293][T17276] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5077'. [ 211.040433][ T29] audit: type=1400 audit(2000000056.020:2356): avc: denied { map } for pid=17282 comm="syz.2.5080" path="socket:[51258]" dev="sockfs" ino=51258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 211.131764][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 211.140832][T17290] netlink: 'syz.2.5082': attribute type 30 has an invalid length. [ 211.149148][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5082'. [ 211.226571][T17296] netlink: 'syz.4.5086': attribute type 15 has an invalid length. [ 211.556767][T17320] loop9: detected capacity change from 0 to 512 [ 211.921750][T17338] chnl_net:caif_netlink_parms(): no params data found [ 211.950258][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.060061][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.100992][T17338] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.108290][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.150539][T17338] bridge_slave_0: entered allmulticast mode [ 212.169613][T17338] bridge_slave_0: entered promiscuous mode [ 212.177539][T17338] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.185052][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.193519][T17338] bridge_slave_1: entered allmulticast mode [ 212.202091][T17338] bridge_slave_1: entered promiscuous mode [ 212.211188][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.249417][T17338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.260076][T17338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.282186][T17338] team0: Port device team_slave_0 added [ 212.288882][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.301832][T17338] team0: Port device team_slave_1 added [ 212.319103][T17338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.326252][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.352980][T17338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.365527][T17338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.372567][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.399166][T17338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.426587][T17338] hsr_slave_0: entered promiscuous mode [ 212.432847][T17338] hsr_slave_1: entered promiscuous mode [ 212.439113][T17338] debugfs: 'hsr0' already exists in 'hsr' [ 212.445159][T17338] Cannot create hsr debugfs directory [ 212.492567][ T49] bridge_slave_1: left allmulticast mode [ 212.498278][ T49] bridge_slave_1: left promiscuous mode [ 212.504219][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.512173][ T49] bridge_slave_0: left allmulticast mode [ 212.517994][ T49] bridge_slave_0: left promiscuous mode [ 212.523740][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.639536][ T49] hsr_slave_0: left promiscuous mode [ 212.648833][ T49] hsr_slave_1: left promiscuous mode [ 212.655098][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.662895][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.670825][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.678431][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.689787][ T49] veth1_macvtap: left promiscuous mode [ 212.695969][ T49] veth0_macvtap: left promiscuous mode [ 212.701605][ T49] veth1_vlan: left promiscuous mode [ 212.708058][ T49] veth0_vlan: left promiscuous mode [ 212.769532][ T49] team0 (unregistering): Port device team_slave_1 removed [ 212.779701][ T49] team0 (unregistering): Port device team_slave_0 removed [ 213.021196][T17465] loop4: detected capacity change from 0 to 2048 [ 213.050049][T17465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.097450][ T49] IPVS: stop unused estimator thread 0... [ 213.113216][T17485] loop2: detected capacity change from 0 to 256 [ 213.126441][T17465] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 213.149772][T17485] FAT-fs (loop2): Directory bread(block 517) failed [ 213.158933][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.166653][T17485] FAT-fs (loop2): Directory bread(block 518) failed [ 213.176000][T17485] FAT-fs (loop2): Directory bread(block 519) failed [ 213.182944][T17485] FAT-fs (loop2): Directory bread(block 520) failed [ 213.189827][T17485] FAT-fs (loop2): Directory bread(block 521) failed [ 213.201303][T17485] FAT-fs (loop2): Directory bread(block 522) failed [ 213.213788][T17485] FAT-fs (loop2): Directory bread(block 523) failed [ 213.220430][T17485] FAT-fs (loop2): Directory bread(block 524) failed [ 213.227155][T17485] FAT-fs (loop2): Directory bread(block 525) failed [ 213.237176][T17498] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5135'. [ 213.243105][T17485] FAT-fs (loop2): Directory bread(block 526) failed [ 213.321299][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5136'. [ 213.387301][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5140'. [ 213.446276][T17533] netlink: 'syz.2.5143': attribute type 3 has an invalid length. [ 213.454583][T17533] netlink: 764 bytes leftover after parsing attributes in process `syz.2.5143'. [ 213.524041][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5147'. [ 213.584169][T17558] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5150'. [ 213.593606][T17558] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5150'. [ 213.653273][T17565] loop4: detected capacity change from 0 to 1024 [ 213.663646][T17565] EXT4-fs: Ignoring removed bh option [ 213.686285][T17574] loop2: detected capacity change from 0 to 128 [ 213.697870][T17565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.713830][T17574] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 213.733871][T17574] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.758618][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.776550][T17338] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.787880][T17574] ext2 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.814912][T17338] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.832145][T17338] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.858241][T17593] program syz.9.5159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.867990][T17593] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 213.895952][T17338] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.935691][T15001] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.978101][T17338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.008671][T17338] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.023460][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.030832][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.056307][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.063462][ T1750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.177643][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.188510][T17647] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 214.206065][T17338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.213200][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.422793][T17338] veth0_vlan: entered promiscuous mode [ 214.440502][T17338] veth1_vlan: entered promiscuous mode [ 214.462596][T17338] veth0_macvtap: entered promiscuous mode [ 214.475532][T17338] veth1_macvtap: entered promiscuous mode [ 214.492281][T17697] program syz.2.5179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.494758][T17338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.521936][T17338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.541194][ T803] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.566121][ T803] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.588736][ T803] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.621191][ T803] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.635707][T17708] loop2: detected capacity change from 0 to 512 [ 214.645923][T17708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.649583][T17714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5104'. [ 214.664917][T17708] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.686136][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5104'. [ 214.695289][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5104'. [ 214.977438][T17771] program syz.5.5195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.987283][T17771] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.008883][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.226844][T17807] loop4: detected capacity change from 0 to 2048 [ 215.261543][T17807] EXT4-fs: Ignoring removed bh option [ 215.285905][T17807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.376360][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.462410][T17848] loop4: detected capacity change from 0 to 1024 [ 215.479970][T17848] EXT4-fs: Ignoring removed oldalloc option [ 215.505039][T17848] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 215.526368][T17848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.581888][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.625209][T17873] loop4: detected capacity change from 0 to 1024 [ 215.636010][T17873] EXT4-fs: Ignoring removed orlov option [ 215.659100][T17873] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0102] [ 215.696764][T17873] System zones: 0-1, 3-12 [ 215.701808][T17873] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.758499][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 215.825230][ T29] audit: type=1400 audit(2000000060.810:2357): avc: denied { connect } for pid=17905 comm="syz.2.5234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.051539][T17940] loop2: detected capacity change from 0 to 512 [ 216.118769][ T29] audit: type=1400 audit(2000000061.090:2358): avc: denied { unmount } for pid=14329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 216.143065][T17952] loop5: detected capacity change from 0 to 512 [ 216.195920][T17952] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 216.213797][T17952] FAT-fs (loop5): error, invalid access to FAT (entry 0x000000c8) [ 216.392543][T17989] loop2: detected capacity change from 0 to 1024 [ 216.416798][T17989] EXT4-fs: Ignoring removed bh option [ 216.464989][T17989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.666532][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.732824][T18028] loop4: detected capacity change from 0 to 136 [ 216.810119][T18035] EXT4-fs: Ignoring removed bh option [ 216.827066][T18035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.956811][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.116449][T18060] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.5288: error while reading EA inode 32 err=-116 [ 217.142682][T18060] EXT4-fs (loop9): Remounting filesystem read-only [ 217.150900][T18069] EXT4-fs: Ignoring removed oldalloc option [ 217.163356][T18060] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 217.174062][T18060] EXT4-fs (loop9): 1 orphan inode deleted [ 217.186684][T18069] EXT4-fs (loop2): 1 truncate cleaned up [ 217.197508][ T29] audit: type=1400 audit(2000000062.180:2359): avc: denied { create } for pid=18072 comm="syz.4.5293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=nfc_socket permissive=1 [ 217.310367][T18085] veth0_to_team: entered promiscuous mode [ 217.435449][T18102] dvmrp6: entered allmulticast mode [ 217.584948][T18125] bond0: entered promiscuous mode [ 217.590104][T18125] bond_slave_0: entered promiscuous mode [ 217.596078][T18125] bond_slave_1: entered promiscuous mode [ 217.605764][T18125] bond0: left promiscuous mode [ 217.610680][T18125] bond_slave_0: left promiscuous mode [ 217.616318][T18125] bond_slave_1: left promiscuous mode [ 217.813946][ T29] audit: type=1326 audit(2000000062.790:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.2.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 217.863787][ T29] audit: type=1326 audit(2000000062.800:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.2.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 217.887962][ T29] audit: type=1326 audit(2000000062.790:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.2.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 217.911691][ T29] audit: type=1326 audit(2000000062.800:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.2.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 217.936420][ T29] audit: type=1326 audit(2000000062.830:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.2.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 217.960781][ T29] audit: type=1326 audit(2000000062.830:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.2.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 217.997188][ T29] audit: type=1326 audit(2000000062.880:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.2.5342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 218.047905][T18176] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 218.286013][T18210] macvtap1: entered promiscuous mode [ 218.291786][T18210] macvtap1: entered allmulticast mode [ 218.297307][T18210] veth1_vlan: entered allmulticast mode [ 218.329708][T18218] tun0: tun_chr_ioctl cmd 1074025675 [ 218.335189][T18218] tun0: persist enabled [ 218.516692][T18241] erspan0: entered promiscuous mode [ 218.607633][T18255] program syz.2.5378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.617498][T18255] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 218.657479][T18257] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.776289][T18268] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 218.784466][T18268] FAT-fs (loop5): Filesystem has been set read-only [ 218.812294][T18268] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 218.863239][T18277] set_capacity_and_notify: 5 callbacks suppressed [ 218.863257][T18277] loop2: detected capacity change from 0 to 128 [ 218.882316][T18277] FAT-fs (loop2): Directory bread(block 414) failed [ 218.897668][T18277] FAT-fs (loop2): Directory bread(block 415) failed [ 218.904841][T18277] FAT-fs (loop2): Directory bread(block 416) failed [ 218.911677][T18277] FAT-fs (loop2): Directory bread(block 417) failed [ 218.919454][T18277] FAT-fs (loop2): Directory bread(block 418) failed [ 218.931449][T18277] FAT-fs (loop2): Directory bread(block 419) failed [ 218.938520][T18277] FAT-fs (loop2): Directory bread(block 420) failed [ 218.945450][T18277] FAT-fs (loop2): Directory bread(block 421) failed [ 218.978184][T18256] Process accounting resumed [ 218.983377][T18256] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 219.114357][ T3385] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 219.170638][T18318] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 219.178590][T18318] dvmrp1: linktype set to 774 [ 219.256928][T18326] __nla_validate_parse: 8 callbacks suppressed [ 219.256945][T18326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5412'. [ 219.400423][T18338] loop5: detected capacity change from 0 to 512 [ 219.408395][T18338] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 219.419919][T18338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 219.428287][T18338] System zones: 1-12 [ 219.433021][T18338] EXT4-fs (loop5): 1 truncate cleaned up [ 219.440610][T18338] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full [ 219.465964][T18341] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5419'. [ 219.489466][T18343] program syz.5.5420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.513140][T18345] netlink: 'syz.5.5421': attribute type 11 has an invalid length. [ 219.599025][T18351] loop9: detected capacity change from 0 to 512 [ 219.606472][T18351] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 219.619111][T18351] EXT4-fs (loop9): 1 truncate cleaned up [ 219.628129][T18351] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.5424: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 219.771902][T18367] delete_channel: no stack [ 219.909338][T18379] loop5: detected capacity change from 0 to 1764 [ 219.976861][T18387] loop5: detected capacity change from 0 to 512 [ 220.005388][T18387] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.073370][T18394] loop5: detected capacity change from 0 to 128 [ 220.084839][T18394] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.126170][T18397] loop5: detected capacity change from 0 to 512 [ 220.137363][T18397] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 220.190080][T18404] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5443'. [ 220.430714][T18420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5450'. [ 220.552659][T18432] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5455'. [ 220.636647][T18440] loop5: detected capacity change from 0 to 512 [ 220.654541][T18442] sg_read: process 1728 (syz.9.5460) changed security contexts after opening file descriptor, this is not allowed. [ 220.694101][T18450] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5463'. [ 220.710446][T18440] EXT4-fs mount: 12 callbacks suppressed [ 220.710464][T18440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.732258][T18440] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.775627][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.812581][T18462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18462 comm=syz.4.5469 [ 220.891845][T18466] loop2: detected capacity change from 0 to 512 [ 220.904903][T18466] EXT4-fs (loop2): filesystem is read-only [ 220.925185][T18466] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 220.952720][T18466] EXT4-fs (loop2): filesystem is read-only [ 220.958900][T18466] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.034086][T18466] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5470: bg 0: block 64: padding at end of block bitmap is not set [ 221.064188][T18466] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 221.077176][T18466] EXT4-fs (loop2): 1 orphan inode deleted [ 221.083654][T18466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 221.134328][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.147641][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5484'. [ 221.282958][T18509] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5490'. [ 221.305470][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5488'. [ 221.393589][T18522] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 221.479994][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 221.480009][ T29] audit: type=1400 audit(2000000066.460:2441): avc: denied { connect } for pid=18533 comm="syz.9.5510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 221.532239][T18540] loop5: detected capacity change from 0 to 512 [ 221.561160][T18540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 221.574324][T18540] System zones: 1-12 [ 221.578912][T18540] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5502: corrupted in-inode xattr: e_value size too large [ 221.594752][T18540] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5502: couldn't read orphan inode 15 (err -117) [ 221.607942][T18540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.624798][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5506'. [ 221.637476][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.677518][T18557] EXT4-fs: Ignoring removed oldalloc option [ 221.687613][T18557] EXT4-fs (loop5): 1 truncate cleaned up [ 221.696786][T18557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.711503][T18555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.735689][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.745994][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.885107][ T29] audit: type=1400 audit(2000000066.870:2442): avc: denied { kexec_image_load } for pid=18580 comm="syz.5.5521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 222.115788][T18611] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5535: inode has both inline data and extents flags [ 222.154577][T18611] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5535: couldn't read orphan inode 15 (err -117) [ 222.202468][T18611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.311344][ T29] audit: type=1400 audit(2000000067.290:2443): avc: denied { node_bind } for pid=18639 comm="syz.1.5548" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 222.339387][T18642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.360997][T18642] EXT4-fs (loop4): 1 truncate cleaned up [ 222.367110][T18642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.393204][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.423750][ T29] audit: type=1400 audit(2000000067.390:2444): avc: denied { map } for pid=18651 comm="syz.1.5553" path="socket:[54256]" dev="sockfs" ino=54256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 222.511364][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.565152][T18663] tun0: tun_chr_ioctl cmd 1074025677 [ 222.571086][T18663] tun0: linktype set to 778 [ 222.651292][T18673] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 222.668193][T18673] JBD2: no valid journal superblock found [ 222.674051][T18673] EXT4-fs (loop9): Could not load journal inode [ 222.719700][T18679] program syz.5.5563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.969221][ T29] audit: type=1326 audit(2000000067.950:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18708 comm="syz.1.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 222.993154][ T29] audit: type=1326 audit(2000000067.950:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18708 comm="syz.1.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 223.017327][ T29] audit: type=1326 audit(2000000067.950:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18708 comm="syz.1.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 223.041133][ T29] audit: type=1326 audit(2000000067.950:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18708 comm="syz.1.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 223.065270][ T29] audit: type=1326 audit(2000000067.950:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18708 comm="syz.1.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 223.089648][ T29] audit: type=1326 audit(2000000067.950:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18708 comm="syz.1.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 223.181511][T18725] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5585: inode has both inline data and extents flags [ 223.205201][T18725] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5585: couldn't read orphan inode 15 (err -117) [ 223.218843][T18725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.237304][T18725] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 223.260592][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.295049][T18735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.322545][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.418929][T18752] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 223.431546][T18752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 223.444472][T18752] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5594: corrupted in-inode xattr: e_value size too large [ 223.459411][T18752] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5594: couldn't read orphan inode 15 (err -117) [ 223.472068][T18752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.496192][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.851314][T18812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.898949][T18812] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 223.915437][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.039101][T18846] pimreg3: entered allmulticast mode [ 224.047785][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.073470][T18849] tap0: tun_chr_ioctl cmd 2147767520 [ 224.088089][T18851] netlink: 'syz.2.5638': attribute type 25 has an invalid length. [ 224.096466][T18851] netlink: 'syz.2.5638': attribute type 28 has an invalid length. [ 224.107930][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.132827][T18855] netlink: 'syz.2.5640': attribute type 1 has an invalid length. [ 224.140702][T18855] netlink: 'syz.2.5640': attribute type 2 has an invalid length. [ 224.188627][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.234497][T18869] set_capacity_and_notify: 9 callbacks suppressed [ 224.234583][T18869] loop5: detected capacity change from 0 to 128 [ 224.255100][T18869] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.270467][T18869] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.283181][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.285330][T18869] netlink: 'syz.5.5647': attribute type 16 has an invalid length. [ 224.301983][T18869] netlink: 'syz.5.5647': attribute type 3 has an invalid length. [ 224.310070][T18869] __nla_validate_parse: 5 callbacks suppressed [ 224.310084][T18869] netlink: 29478 bytes leftover after parsing attributes in process `syz.5.5647'. [ 224.386910][T17338] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.418480][ T31] bridge_slave_1: left allmulticast mode [ 224.424247][ T31] bridge_slave_1: left promiscuous mode [ 224.430054][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.473242][ T31] bridge_slave_0: left allmulticast mode [ 224.479121][ T31] bridge_slave_0: left promiscuous mode [ 224.485187][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.728868][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.756466][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.779837][ T31] bond0 (unregistering): Released all slaves [ 224.812687][T18928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5667'. [ 224.844069][T18928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5667'. [ 224.856230][ T31] hsr_slave_0: left promiscuous mode [ 224.872276][ T31] hsr_slave_1: left promiscuous mode [ 224.892467][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.899947][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.913231][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.920798][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.953963][ T31] veth1_macvtap: left promiscuous mode [ 224.975646][ T31] veth0_macvtap: left promiscuous mode [ 224.988109][ T31] veth1_vlan: left promiscuous mode [ 224.995036][ T31] veth0_vlan: left promiscuous mode [ 225.001329][T18952] loop4: detected capacity change from 0 to 1024 [ 225.022606][T18952] EXT4-fs: Ignoring removed orlov option [ 225.045662][T18952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.111084][ T31] team0 (unregistering): Port device team_slave_1 removed [ 225.121668][ T31] team0 (unregistering): Port device team_slave_0 removed [ 225.194976][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.433339][T19014] bond4: option downdelay: invalid value (18446744073709551607) [ 225.441637][T19014] bond4: option downdelay: allowed values 0 - 2147483647 [ 225.449989][T19014] bond4 (unregistering): Released all slaves [ 225.581975][T19036] SELinux: failed to load policy [ 225.831112][T19065] loop4: detected capacity change from 0 to 1024 [ 225.840413][T19065] EXT4-fs: Ignoring removed orlov option [ 225.874242][T19065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.902423][T19065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5708: bg 0: block 481: padding at end of block bitmap is not set [ 225.981423][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.079901][T19094] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5720'. [ 226.137959][T19102] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5724'. [ 226.343103][T19134] wireguard1: entered promiscuous mode [ 226.348833][T19134] wireguard1: entered allmulticast mode [ 226.490803][T19157] sctp: [Deprecated]: syz.1.5749 (pid 19157) Use of int in max_burst socket option. [ 226.490803][T19157] Use struct sctp_assoc_value instead [ 226.515019][T19157] sctp: [Deprecated]: syz.1.5749 (pid 19157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.515019][T19157] Use struct sctp_sack_info instead [ 226.903502][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 226.903575][ T29] audit: type=1400 audit(2000000071.880:2464): avc: denied { create } for pid=19205 comm="syz.5.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 226.931022][ T29] audit: type=1400 audit(2000000071.900:2465): avc: denied { ioctl } for pid=19205 comm="syz.5.5761" path="socket:[56030]" dev="sockfs" ino=56030 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 226.956685][ T29] audit: type=1400 audit(2000000071.900:2466): avc: denied { bind } for pid=19205 comm="syz.5.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 227.746205][ T29] audit: type=1400 audit(2000000072.730:2467): avc: denied { create } for pid=19333 comm="syz.4.5802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 227.766832][ T29] audit: type=1400 audit(2000000072.730:2468): avc: denied { create } for pid=19333 comm="syz.4.5802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 227.856338][ T29] audit: type=1326 audit(2000000072.750:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.1.5803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 227.881150][ T29] audit: type=1326 audit(2000000072.760:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.1.5803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 227.904845][ T29] audit: type=1326 audit(2000000072.760:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.1.5803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 227.929297][ T29] audit: type=1326 audit(2000000072.760:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.1.5803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 227.952908][ T29] audit: type=1326 audit(2000000072.810:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.1.5803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15c9acb9 code=0x7ffc0000 [ 228.064836][T19354] netlink: 'syz.4.5810': attribute type 11 has an invalid length. [ 228.072950][T19354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5810'. [ 228.125273][T19354] netlink: 'syz.4.5810': attribute type 11 has an invalid length. [ 228.133112][T19354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5810'. [ 228.286347][T19374] netlink: 'syz.4.5818': attribute type 6 has an invalid length. [ 228.322585][T19379] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5820'. [ 228.357427][T19381] loop4: detected capacity change from 0 to 512 [ 228.381187][T19381] EXT4-fs: Ignoring removed bh option [ 228.388743][T19381] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 228.401778][T19381] EXT4-fs (loop4): 1 truncate cleaned up [ 228.408059][T19381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.421874][T19381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.682183][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5847'. [ 229.142023][T19511] loop5: detected capacity change from 0 to 512 [ 229.185495][T19511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.208993][T19511] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.231921][T19523] loop4: detected capacity change from 0 to 512 [ 229.258092][T19523] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 229.266273][T19523] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 229.298494][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.314790][T19523] System zones: 0-1, 15-15, 18-18, 34-34 [ 229.325778][T19523] EXT4-fs (loop4): orphan cleanup on readonly fs [ 229.332563][T19523] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.347511][T19523] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 229.354356][T19523] EXT4-fs (loop4): 1 orphan inode deleted [ 229.360600][T19523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.377117][T19523] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.5887: deleted inode referenced: 16 [ 229.390496][T19523] EXT4-fs (loop4): Remounting filesystem read-only [ 229.420408][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.429327][T19540] loop5: detected capacity change from 0 to 164 [ 229.454243][T19540] bio_check_eod: 32 callbacks suppressed [ 229.454258][T19540] syz.5.5895: attempt to access beyond end of device [ 229.454258][T19540] loop5: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 229.478642][T19540] syz.5.5895: attempt to access beyond end of device [ 229.478642][T19540] loop5: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 229.542962][T19550] loop5: detected capacity change from 0 to 512 [ 229.560948][T19550] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.5898: bad orphan inode 15 [ 229.578159][T19550] ext4_test_bit(bit=14, block=5) = 0 [ 229.584066][T19550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.607938][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.638327][T19563] loop5: detected capacity change from 0 to 512 [ 229.649072][T19563] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.5903: casefold flag without casefold feature [ 229.665319][T19563] EXT4-fs (loop5): get root inode failed [ 229.671299][T19563] EXT4-fs (loop5): mount failed [ 229.871117][T19594] xt_hashlimit: size too large, truncated to 1048576 [ 230.025870][T19610] netlink: 'syz.1.5924': attribute type 3 has an invalid length. [ 230.076373][T19615] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5926'. [ 230.842652][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5961'. [ 230.852095][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5961'. [ 230.861078][T19692] netlink: 'syz.2.5961': attribute type 19 has an invalid length. [ 230.869039][T19692] netlink: 'syz.2.5961': attribute type 20 has an invalid length. [ 231.011279][T19711] loop2: detected capacity change from 0 to 128 [ 231.030097][T19711] syz.2.5970: attempt to access beyond end of device [ 231.030097][T19711] loop2: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 231.045661][T19715] loop5: detected capacity change from 0 to 512 [ 231.065854][T19715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.088528][T19715] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 231.103856][T19715] System zones: 0-2, 18-18, 34-34 [ 231.112497][T19715] EXT4-fs (loop5): orphan cleanup on readonly fs [ 231.140683][T19715] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5971: bg 0: block 248: padding at end of block bitmap is not set [ 231.155919][T19715] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.5971: Failed to acquire dquot type 1 [ 231.167958][T19715] EXT4-fs (loop5): 1 truncate cleaned up [ 231.174720][T19715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.197100][T19727] loop4: detected capacity change from 0 to 128 [ 231.224606][T19727] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 231.232321][T19727] FAT-fs (loop4): Filesystem has been set read-only [ 231.240077][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.240130][T19727] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 231.240212][T19727] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 231.628065][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5992'. [ 231.872074][T19799] netem: change failed [ 231.955790][T19811] loop4: detected capacity change from 0 to 128 [ 232.461695][T19862] netlink: 488 bytes leftover after parsing attributes in process `syz.4.6042'. [ 232.470801][T19862] netlink: 488 bytes leftover after parsing attributes in process `syz.4.6042'. [ 232.826667][T19902] loop2: detected capacity change from 0 to 256 [ 232.954492][T19918] loop2: detected capacity change from 0 to 512 [ 232.989904][T19918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6066: invalid indirect mapped block 4294967295 (level 1) [ 233.011202][T19918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6066: invalid indirect mapped block 4294967295 (level 1) [ 233.025843][T19918] EXT4-fs (loop2): 2 truncates cleaned up [ 233.032031][T19918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.049455][T19918] EXT4-fs (loop2): Online defrag not supported for non-extent files [ 233.054232][T19926] netlink: 136 bytes leftover after parsing attributes in process `syz.9.6069'. [ 233.067266][T19926] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.108164][T19932] loop5: detected capacity change from 0 to 256 [ 233.110311][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.141998][T19932] FAT-fs (loop5): codepage cp949 not found [ 233.244321][T19936] loop2: p1 p3 p4 [ 233.256343][T19936] loop2: p4 size 589824 extends beyond EOD, truncated [ 233.303353][T15155] udevd[15155]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 233.306107][T13705] udevd[13705]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 233.314807][T13708] udevd[13708]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 233.370407][T19954] program syz.2.6081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.392984][T15155] udevd[15155]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 233.393822][T13705] udevd[13705]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 233.847115][T19991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.008268][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.236798][T20031] netlink: 'syz.4.6115': attribute type 9 has an invalid length. [ 234.965988][T20104] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 234.972538][T20104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.980188][T20104] vhci_hcd vhci_hcd.0: Device attached [ 234.999865][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6150'. [ 235.030250][T20108] vhci_hcd: connection closed [ 235.030467][ T31] vhci_hcd vhci_hcd.5: stop threads [ 235.040599][ T31] vhci_hcd vhci_hcd.5: release socket [ 235.046058][ T31] vhci_hcd vhci_hcd.5: disconnect device [ 235.199048][T20128] set_capacity_and_notify: 2 callbacks suppressed [ 235.199064][T20128] loop2: detected capacity change from 0 to 1024 [ 235.243346][T20128] EXT4-fs: Ignoring removed bh option [ 235.257657][T20128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.278112][T20128] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.6158: bad entry in directory: directory entry overrun - offset=24, inode=267, rec_len=1024, size=1024 fake=0 [ 235.300388][T20128] EXT4-fs (loop2): Remounting filesystem read-only [ 235.321560][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.446679][T20155] netlink: 'syz.1.6165': attribute type 12 has an invalid length. [ 235.454689][T20155] netlink: 'syz.1.6165': attribute type 29 has an invalid length. [ 235.462826][T20155] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6165'. [ 235.472032][T20155] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6165'. [ 235.512677][T20166] loop4: detected capacity change from 0 to 1024 [ 235.516584][T20162] loop2: detected capacity change from 0 to 512 [ 235.544782][T20162] EXT4-fs: Ignoring removed nobh option [ 235.551406][T20166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.607557][T20162] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 235.619313][T20162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 235.628377][T20162] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.6168: corrupted inode contents [ 235.634320][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.644070][T20162] EXT4-fs (loop2): Remounting filesystem read-only [ 235.673944][T20162] EXT4-fs (loop2): 1 truncate cleaned up [ 235.679721][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 235.690333][ T31] __quota_error: 44 callbacks suppressed [ 235.690345][ T31] Quota error (device loop2): write_blk: dquota write failed [ 235.703772][ T31] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 235.714162][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 235.725192][ T31] Quota error (device loop2): write_blk: dquota write failed [ 235.732705][ T31] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 235.745104][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 235.755541][ T31] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 235.764508][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 235.775478][T20162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.804283][T20195] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 235.807175][T20162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.027152][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6187'. [ 236.081586][ T29] audit: type=1326 audit(2000000081.060:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.4.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 236.133996][ T29] audit: type=1326 audit(2000000081.060:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.4.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 236.158065][ T29] audit: type=1326 audit(2000000081.090:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.4.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 236.181901][ T29] audit: type=1326 audit(2000000081.090:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20214 comm="syz.4.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e2e9acb9 code=0x7ffc0000 [ 236.364261][T20240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6201'. [ 236.398111][T20246] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 236.450048][T20250] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001157 ! [ 236.801053][T20318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6225'. [ 236.811082][T20318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6225'. [ 236.913030][T20298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.931582][T20298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.014598][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6243'. [ 237.027019][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6243'. [ 237.039383][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6243'. [ 237.049071][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6243'. [ 237.080493][ T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1) [ 237.112874][T20367] program syz.4.6247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.555653][T20407] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 238.054357][T20465] loop2: detected capacity change from 0 to 256 [ 238.077550][T20465] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 238.085556][T20465] FAT-fs (loop2): Filesystem has been set read-only [ 238.114564][T20465] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 238.845744][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.853772][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.861810][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.869642][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.877830][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.885641][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.893553][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.901600][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.909569][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 238.917504][T20520] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 239.085517][T20542] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.137166][T20546] loop4: detected capacity change from 0 to 512 [ 239.144373][T20546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.151069][T20546] EXT4-fs: Ignoring removed bh option [ 239.271262][T20546] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 239.281234][T20546] EXT4-fs (loop4): group descriptors corrupted! [ 239.355067][T20558] loop4: detected capacity change from 0 to 128 [ 239.682533][T20575] program syz.4.6336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.194028][T20625] program syz.2.6360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.236122][T20629] netlink: 'syz.2.6362': attribute type 1 has an invalid length. [ 240.588240][T20652] loop2: detected capacity change from 0 to 128 [ 240.637946][T20657] __nla_validate_parse: 11 callbacks suppressed [ 240.637961][T20657] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6374'. [ 240.653315][T20657] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6374'. [ 240.678329][T20652] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.703305][T20652] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.815067][T15001] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.035205][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 241.035258][ T29] audit: type=1400 audit(2000000086.020:2552): avc: denied { unmount } for pid=15001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 241.123724][ T29] audit: type=1326 audit(2000000086.080:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.2.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.147719][ T29] audit: type=1326 audit(2000000086.080:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.2.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.172360][ T29] audit: type=1326 audit(2000000086.080:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.2.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.196505][ T29] audit: type=1326 audit(2000000086.080:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.2.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.220742][ T29] audit: type=1326 audit(2000000086.080:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.2.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.291389][T20700] sch_tbf: burst 19868 is lower than device lo mtu (65550) ! [ 241.333335][T20704] program syz.4.6394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.358541][T20706] loop5: detected capacity change from 0 to 512 [ 241.414378][T20706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.434689][T20706] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.466908][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.545951][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6402'. [ 241.613858][T20720] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6402'. [ 241.717793][ T29] audit: type=1326 audit(2000000086.700:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.2.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.742358][ T29] audit: type=1326 audit(2000000086.700:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.2.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.766900][ T29] audit: type=1326 audit(2000000086.700:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.2.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 241.790868][ T29] audit: type=1326 audit(2000000086.700:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20729 comm="syz.2.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f3c1c7cacb9 code=0x7ffc0000 [ 242.304363][T20758] program syz.4.6417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.870098][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6426'. [ 243.094164][T20787] team0: Device gtp0 is of different type [ 243.385169][T20799] loop5: detected capacity change from 0 to 1764 [ 243.728777][T20823] loop5: detected capacity change from 0 to 1024 [ 243.784083][T20823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.844274][T20823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.975223][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.004287][T20843] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6453'. [ 244.013368][T20843] unsupported nla_type 24929 [ 244.168156][T20849] loop5: detected capacity change from 0 to 1024 [ 244.215289][T20849] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.277888][T20849] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 244.295030][T20858] loop4: detected capacity change from 0 to 1024 [ 244.359420][T20849] EXT4-fs (loop5): orphan cleanup on readonly fs [ 244.366664][T20858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.404096][T20849] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.6454: Failed to acquire dquot type 0 [ 244.444500][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.494775][T20849] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.6454: Failed to acquire dquot type 0 [ 244.526763][T20849] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.6454: Freeing blocks not in datazone - block = 0, count = 4096 [ 244.541712][T20849] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.6454: Failed to acquire dquot type 0 [ 244.554237][T20849] EXT4-fs (loop5): 1 orphan inode deleted [ 244.564107][T20849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.754433][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.087882][T20901] netlink: 'syz.9.6477': attribute type 21 has an invalid length. [ 245.096074][T20901] netlink: 'syz.9.6477': attribute type 1 has an invalid length. [ 245.103912][T20901] netlink: 15986 bytes leftover after parsing attributes in process `syz.9.6477'. [ 245.247860][T20914] batadv_slave_1: entered promiscuous mode [ 245.254287][T20912] batadv_slave_1: left promiscuous mode [ 245.370824][T20927] bridge0: entered allmulticast mode [ 245.485364][T20937] netlink: 'syz.9.6494': attribute type 6 has an invalid length. [ 245.587080][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6496'. [ 245.718107][T20935] loop5: detected capacity change from 0 to 32768 [ 245.795378][T15155] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 245.801159][T15155] loop5: p1 start 460800 is beyond EOD, truncated [ 245.808220][T15155] loop5: p2 size 83886080 extends beyond EOD, truncated [ 245.884708][T15155] loop5: p5 start 460800 is beyond EOD, truncated [ 245.891276][T15155] loop5: p6 size 83886080 extends beyond EOD, truncated [ 245.936476][T20935] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 245.941835][T20935] loop5: p1 start 460800 is beyond EOD, truncated [ 245.949177][T20935] loop5: p2 size 83886080 extends beyond EOD, truncated [ 245.965906][T20935] loop5: p5 start 460800 is beyond EOD, truncated [ 245.972479][T20935] loop5: p6 size 83886080 extends beyond EOD, truncated [ 246.144803][T20979] loop5: detected capacity change from 0 to 512 [ 246.155422][T20979] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6505: invalid indirect mapped block 256 (level 2) [ 246.207069][T20979] EXT4-fs (loop5): 2 truncates cleaned up [ 246.211229][T13708] udevd[13708]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 246.214489][T15155] udevd[15155]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 246.224838][T13789] udevd[13789]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 246.244569][T20979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.246427][T13705] udevd[13705]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 246.281759][T20979] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.6505: bg 0: block 5: invalid block bitmap [ 246.323042][T20985] udevd[20985]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 246.324813][T13708] udevd[13708]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 246.336393][T13705] udevd[13705]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 246.363557][T15155] udevd[15155]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 246.373934][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6507'. [ 246.383587][T20979] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 246.396287][T20979] EXT4-fs (loop5): This should not happen!! Data will be lost [ 246.396287][T20979] [ 246.406778][T20979] EXT4-fs (loop5): Total free blocks count 0 [ 246.412964][T20979] EXT4-fs (loop5): Free/Dirty block details [ 246.419322][T20979] EXT4-fs (loop5): free_blocks=0 [ 246.424712][T20979] EXT4-fs (loop5): dirty_blocks=2 [ 246.429940][T20979] EXT4-fs (loop5): Block reservation details [ 246.437283][T20979] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 246.487536][ T289] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 247.043750][T21091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6519'. [ 247.059582][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6519'. [ 247.285558][T21099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6523'. [ 247.331685][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 247.331719][ T29] audit: type=1400 audit(2000000092.310:2599): avc: denied { read } for pid=21102 comm="syz.4.6525" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.363098][T21104] loop5: detected capacity change from 0 to 4279 [ 247.390926][T21106] loop4: detected capacity change from 0 to 512 [ 247.392729][ T29] audit: type=1400 audit(2000000092.310:2600): avc: denied { open } for pid=21102 comm="syz.4.6525" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.401422][T21106] EXT4-fs: Ignoring removed bh option [ 247.421991][ T29] audit: type=1400 audit(2000000092.350:2601): avc: denied { ioctl } for pid=21102 comm="syz.4.6525" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.469921][T21107] loop5: detected capacity change from 4279 to 13647 [ 247.497161][T13705] buffer_io_error: 18 callbacks suppressed [ 247.497177][T13705] Buffer I/O error on dev loop5, logical block 1705, async page read [ 247.517130][T21106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.534043][T21106] ext4 filesystem being mounted at /1588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.552396][T15155] Buffer I/O error on dev loop5, logical block 1705, async page read [ 247.621078][T15155] Buffer I/O error on dev loop5, logical block 1705, async page read [ 247.684646][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.865115][ T29] audit: type=1326 audit(2000000092.850:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.5.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18342eacb9 code=0x7ffc0000 [ 248.072384][ T29] audit: type=1326 audit(2000000092.850:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.5.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18342eacb9 code=0x7ffc0000 [ 248.097178][ T29] audit: type=1326 audit(2000000092.850:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.5.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18342eacb9 code=0x7ffc0000 [ 248.121541][ T29] audit: type=1326 audit(2000000092.880:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.5.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f18342eacb9 code=0x7ffc0000 [ 248.145912][ T29] audit: type=1326 audit(2000000092.880:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.5.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18342eacb9 code=0x7ffc0000 [ 248.170215][ T29] audit: type=1326 audit(2000000092.880:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.5.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18342eacb9 code=0x7ffc0000 [ 248.194414][ T29] audit: type=1326 audit(2000000092.890:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21123 comm="syz.5.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f18342eacb9 code=0x7ffc0000 [ 248.224783][T21134] loop5: detected capacity change from 0 to 128 [ 248.236333][T21134] syz.5.6535: attempt to access beyond end of device [ 248.236333][T21134] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 248.262022][T21133] syz.5.6535: attempt to access beyond end of device [ 248.262022][T21133] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 249.050275][ T803] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.116877][ T803] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.176583][ T803] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.265454][ T803] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.324889][T21197] loop2: detected capacity change from 0 to 2048 [ 249.342760][T21197] EXT4-fs: Ignoring removed bh option [ 249.384414][T21197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.449302][T21206] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6565'. [ 249.465886][ T803] bridge_slave_1: left allmulticast mode [ 249.471793][ T803] bridge_slave_1: left promiscuous mode [ 249.477738][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.507953][ T803] bridge_slave_0: left allmulticast mode [ 249.513772][ T803] bridge_slave_0: left promiscuous mode [ 249.519482][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.750330][ T803] team0: Port device geneve1 removed [ 249.818134][ T803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.833184][ T803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.849836][ T803] bond0 (unregistering): Released all slaves [ 249.865470][ T803] bond1 (unregistering): Released all slaves [ 249.880874][ T803] team0: Port device bond2 removed [ 249.891398][ T803] bond2 (unregistering): Released all slaves [ 249.907417][ T803] bond3 (unregistering): Released all slaves [ 249.938289][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.952808][T21210] netdevsim netdevsim5: Direct firmware load for / [ 249.952808][T21210] failed with error -2 [ 249.978665][ T803] IPVS: stopping backup sync thread 4445 ... [ 249.999966][ T803] hsr_slave_0: left promiscuous mode [ 250.022695][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.030933][ T803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.061392][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.069088][ T803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.085924][T21214] loop2: detected capacity change from 0 to 8192 [ 250.094531][ T803] veth1_macvtap: left promiscuous mode [ 250.100151][ T803] veth0_macvtap: left promiscuous mode [ 250.122103][ T803] veth1_vlan: left allmulticast mode [ 250.127712][ T803] veth1_vlan: left promiscuous mode [ 250.167353][ T803] veth0_vlan: left promiscuous mode [ 250.294804][ T803] team0 (unregistering): Port device team_slave_1 removed [ 250.305456][ T803] team0 (unregistering): Port device team_slave_0 removed [ 250.348640][T21180] chnl_net:caif_netlink_parms(): no params data found [ 250.380796][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6575'. [ 250.390030][T21232] netlink: 'syz.9.6575': attribute type 18 has an invalid length. [ 250.398646][T21232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6575'. [ 250.470243][T21180] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.477706][T21180] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.535453][T21180] bridge_slave_0: entered allmulticast mode [ 250.563519][T21180] bridge_slave_0: entered promiscuous mode [ 250.583003][T21180] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.590262][T21180] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.611920][T21180] bridge_slave_1: entered allmulticast mode [ 250.626745][T21180] bridge_slave_1: entered promiscuous mode [ 250.687935][T21180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.716077][T21180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.771057][T21180] team0: Port device team_slave_0 added [ 250.786170][T21180] team0: Port device team_slave_1 added [ 250.797167][ T803] IPVS: stop unused estimator thread 0... [ 250.820130][T21180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.827300][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.853320][T21180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.924935][T21275] loop5: detected capacity change from 0 to 512 [ 250.959887][T21180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.967196][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.993766][T21180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.097469][T21180] hsr_slave_0: entered promiscuous mode [ 251.124149][T21180] hsr_slave_1: entered promiscuous mode [ 251.253232][T21304] loop2: detected capacity change from 0 to 512 [ 251.283381][T21304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.325185][T21304] EXT4-fs (loop2): 1 truncate cleaned up [ 251.334328][T21304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.372295][T21304] EXT4-fs (loop2): shut down requested (0) [ 251.401041][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 251.417410][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 251.442208][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 251.453552][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 251.462423][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 251.472013][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 251.481755][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 251.491057][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 251.507219][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 251.521940][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 251.546794][T21180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.553810][T21304] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 251.590255][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.607083][T21180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.616547][T21180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.630285][T21180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.729810][T21339] loop2: detected capacity change from 0 to 2048 [ 251.740985][T21180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.768912][T21180] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.781817][T21339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.806646][ T2230] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.813838][ T2230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.825113][T14383] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.832367][T14383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.908133][T21339] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 251.964898][T21339] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 251.977443][T21339] EXT4-fs (loop2): This should not happen!! Data will be lost [ 251.977443][T21339] [ 251.987936][T21339] EXT4-fs (loop2): Total free blocks count 0 [ 251.994067][T21339] EXT4-fs (loop2): Free/Dirty block details [ 252.000304][T21339] EXT4-fs (loop2): free_blocks=2415919504 [ 252.006165][T21339] EXT4-fs (loop2): dirty_blocks=32 [ 252.011717][T21339] EXT4-fs (loop2): Block reservation details [ 252.018698][T21339] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 252.050675][T21180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.179364][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.275644][T21180] veth0_vlan: entered promiscuous mode [ 252.307842][T21180] veth1_vlan: entered promiscuous mode [ 252.370614][T21180] veth0_macvtap: entered promiscuous mode [ 252.379983][T21180] veth1_macvtap: entered promiscuous mode [ 252.386398][T21390] loop5: detected capacity change from 0 to 128 [ 252.418950][T21180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.444167][T21180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.473042][ T569] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.526033][ T569] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.553063][ T569] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.588260][ T569] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.649543][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 252.649557][ T29] audit: type=1400 audit(2000000097.630:2617): avc: denied { getopt } for pid=21410 comm="syz.2.6605" lport=45841 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 252.683772][T21411] sctp: [Deprecated]: syz.2.6605 (pid 21411) Use of int in max_burst socket option. [ 252.683772][T21411] Use struct sctp_assoc_value instead [ 252.794613][ T29] audit: type=1400 audit(2000000097.750:2618): avc: denied { read } for pid=21419 comm="syz.6.6608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.866565][T21438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6611'. [ 252.883859][ T29] audit: type=1400 audit(2000000097.810:2619): avc: denied { accept } for pid=21419 comm="syz.6.6608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.918634][T21438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6611'. [ 253.181998][T21416] chnl_net:caif_netlink_parms(): no params data found [ 253.215417][T21474] loop6: detected capacity change from 0 to 128 [ 253.232420][T21474] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.285108][T21474] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.339481][ T29] audit: type=1400 audit(2000000098.320:2620): avc: denied { rename } for pid=21473 comm="syz.6.6621" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.389522][T21474] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.6621: Logical block already allocated [ 253.410666][T21488] loop5: detected capacity change from 0 to 128 [ 253.432733][T21416] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.439918][T21416] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.455066][T21488] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.6624: iget: checksum invalid [ 253.493033][T21416] bridge_slave_0: entered allmulticast mode [ 253.495423][T21180] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.504430][T21416] bridge_slave_0: entered promiscuous mode [ 253.509090][T21488] EXT4-fs (loop5): get root inode failed [ 253.517650][T21416] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.519774][T21488] EXT4-fs (loop5): mount failed [ 253.531903][T21416] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.539407][T21416] bridge_slave_1: entered allmulticast mode [ 253.546438][T21416] bridge_slave_1: entered promiscuous mode [ 253.565292][T21500] loop2: detected capacity change from 0 to 128 [ 253.606642][T21416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.615072][T21500] syz.2.6628: attempt to access beyond end of device [ 253.615072][T21500] loop2: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 253.625069][T21416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.675580][T21500] syz.2.6628: attempt to access beyond end of device [ 253.675580][T21500] loop2: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 253.689533][T21500] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 253.702291][T21500] syz.2.6628: attempt to access beyond end of device [ 253.702291][T21500] loop2: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 253.716142][T21500] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 253.719538][T21507] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6629'. [ 253.734681][T21507] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6629'. [ 253.739247][T21500] syz.2.6628: attempt to access beyond end of device [ 253.739247][T21500] loop2: rw=2049, sector=146, nr_sectors = 60 limit=128 [ 253.743935][T21507] netlink: 'syz.9.6629': attribute type 6 has an invalid length. [ 253.743952][T21507] netlink: 'syz.9.6629': attribute type 5 has an invalid length. [ 253.773898][T21507] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6629'. [ 253.800230][ T183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.825002][T21416] team0: Port device team_slave_0 added [ 253.831705][T21416] team0: Port device team_slave_1 added [ 253.852505][ T183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.912346][T21416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.919606][T21416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.947208][T21416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.966518][ T183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.993598][T21416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.000833][T21416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.026918][T21416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.073025][ T183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.144255][T21545] loop5: detected capacity change from 0 to 512 [ 254.149433][T21416] hsr_slave_0: entered promiscuous mode [ 254.166915][T21545] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 254.191275][T21416] hsr_slave_1: entered promiscuous mode [ 254.194044][T21545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0102] [ 254.215156][T21416] debugfs: 'hsr0' already exists in 'hsr' [ 254.215439][T21545] System zones: [ 254.220976][T21416] Cannot create hsr debugfs directory [ 254.230307][T21545] 1-12 [ 254.253459][T21545] EXT4-fs (loop5): 1 truncate cleaned up [ 254.260746][T21545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.297589][T21545] EXT4-fs warning (device loop5): ext4_group_extend:1862: can't shrink FS - resize aborted [ 254.318680][ T183] bridge_slave_1: left allmulticast mode [ 254.325162][ T183] bridge_slave_1: left promiscuous mode [ 254.331239][ T183] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.372376][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.382952][ T183] bridge_slave_0: left allmulticast mode [ 254.388730][ T183] bridge_slave_0: left promiscuous mode [ 254.394745][ T183] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.575331][ T183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.605862][ T183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.628624][ T183] bond0 (unregistering): Released all slaves [ 254.643403][T21586] loop5: detected capacity change from 0 to 1024 [ 254.653306][T21586] EXT4-fs: Ignoring removed nobh option [ 254.659125][T21586] EXT4-fs: inline encryption not supported [ 254.708413][ T183] hsr_slave_0: left promiscuous mode [ 254.717409][ T183] hsr_slave_1: left promiscuous mode [ 254.733392][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.737528][T21586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.741094][ T183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.814565][ T29] audit: type=1400 audit(2000000099.780:2621): avc: denied { reparent } for pid=21585 comm="syz.5.6651" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.837890][ T29] audit: type=1400 audit(2000000099.780:2622): avc: denied { add_name } for pid=21585 comm="syz.5.6651" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 254.874771][ T183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.882645][ T183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.929612][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.966923][ T183] veth1_macvtap: left promiscuous mode [ 254.972506][ T183] veth0_macvtap: left promiscuous mode [ 254.991781][T21597] netlink: 'syz.6.6655': attribute type 1 has an invalid length. [ 254.999765][T21597] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6655'. [ 255.003958][ T183] veth1_vlan: left promiscuous mode [ 255.023740][ T183] veth0_vlan: left promiscuous mode [ 255.088471][ T29] audit: type=1400 audit(2000000100.070:2623): avc: denied { checkpoint_restore } for pid=21598 comm="syz.9.6656" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.176441][ T183] team0 (unregistering): Port device team_slave_1 removed [ 255.195073][ T183] team0 (unregistering): Port device team_slave_0 removed [ 255.357204][T21615] netlink: 'syz.6.6661': attribute type 1 has an invalid length. [ 255.633195][T21416] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 255.652938][T21416] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 255.663458][T21416] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 255.680134][T21416] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.753080][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6676'. [ 255.762527][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6676'. [ 255.800738][T21416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.811621][T21416] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.846485][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.853701][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.872141][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.879409][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.004849][T21416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.249209][T21416] veth0_vlan: entered promiscuous mode [ 256.270548][T21416] veth1_vlan: entered promiscuous mode [ 256.307236][T21416] veth0_macvtap: entered promiscuous mode [ 256.318966][T21416] veth1_macvtap: entered promiscuous mode [ 256.346974][T21416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.369843][T21416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.389293][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.415865][T21772] net_ratelimit: 45 callbacks suppressed [ 256.415955][T21772] sock: sock_set_timeout: `syz.9.6694' (pid 21772) tries to set negative timeout [ 256.438684][T14472] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.466298][T14472] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.511369][T14472] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.607669][T21802] netlink: 'syz.9.6703': attribute type 6 has an invalid length. [ 256.685605][T21817] kernel write not supported for file bpf-prog (pid: 21817 comm: kworker/0:9) [ 256.730137][T21825] loop2: detected capacity change from 0 to 128 [ 256.752410][ T29] audit: type=1326 audit(2000000101.730:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21808 comm="syz.9.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244349acb9 code=0x7fc00000 [ 257.481316][ T29] audit: type=1326 audit(2000000102.460:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21808 comm="syz.9.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f244349acb9 code=0x7fc00000 [ 257.546690][T21956] lo speed is unknown, defaulting to 1000 [ 257.553276][T21956] lo speed is unknown, defaulting to 1000 [ 257.565201][T21960] loop8: detected capacity change from 0 to 512 [ 257.573048][T21956] lo speed is unknown, defaulting to 1000 [ 257.608403][T21960] EXT4-fs: Ignoring removed i_version option [ 257.615265][T21960] EXT4-fs: Ignoring removed bh option [ 257.664670][T21960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.668421][T21956] infiniband syz1: set down [ 257.682188][T21956] infiniband syz1: added lo [ 257.687527][T21817] lo speed is unknown, defaulting to 1000 [ 257.694600][T21960] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.710352][T21956] RDS/IB: syz1: added [ 257.718841][T21956] smc: adding ib device syz1 with port count 1 [ 257.738071][T21956] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 257.746361][T21817] lo speed is unknown, defaulting to 1000 [ 257.779144][T21956] lo speed is unknown, defaulting to 1000 [ 257.786227][T21416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.906148][T21956] lo speed is unknown, defaulting to 1000 [ 258.040623][T21956] lo speed is unknown, defaulting to 1000 [ 258.171389][T21956] lo speed is unknown, defaulting to 1000 [ 258.218003][T22022] loop2: detected capacity change from 0 to 8192 [ 258.305337][T21956] lo speed is unknown, defaulting to 1000 [ 258.572827][T22053] loop5: detected capacity change from 0 to 512 [ 258.580549][T22054] lo speed is unknown, defaulting to 1000 [ 258.715960][T22053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.732852][T22061] lo speed is unknown, defaulting to 1000 [ 258.748990][T22053] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.798237][T22053] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.6738: corrupted inode contents [ 258.843335][T22053] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.6738: mark_inode_dirty error [ 258.893467][T22053] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.6738: corrupted inode contents [ 258.933589][T22053] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.6738: mark_inode_dirty error [ 259.013173][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.222801][T22126] loop2: detected capacity change from 0 to 8192 [ 259.392289][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6759'. [ 259.401689][T22147] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6759'. [ 259.438970][T22157] loop5: detected capacity change from 0 to 1024 [ 259.517169][T22157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.536921][T22168] loop6: detected capacity change from 0 to 512 [ 259.577868][T22168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.595199][T22159] loop8: detected capacity change from 0 to 8192 [ 259.606344][T22168] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.617689][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.629825][T22159] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.646360][T22168] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: block 32: comm syz.6.6763: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 259.666604][T22168] EXT4-fs warning (device loop6): ext4_empty_dir:3087: inode #12: comm syz.6.6763: directory missing '.' [ 259.727651][T21180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.913516][T22190] loop5: detected capacity change from 0 to 8192 [ 259.947560][ T29] audit: type=1400 audit(2000000104.930:2626): avc: denied { read } for pid=22205 comm="syz.8.6774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.022629][ T29] audit: type=1400 audit(2000000105.000:2627): avc: denied { ioctl } for pid=22205 comm="syz.8.6774" path="socket:[65737]" dev="sockfs" ino=65737 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.269735][ T29] audit: type=1326 audit(2000000105.250:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.8.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e4a3acb9 code=0x7fc00000 [ 260.311929][T22256] loop5: detected capacity change from 0 to 512 [ 260.333549][T22256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.408177][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.421463][T22264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.453959][T22264] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.499623][T22264] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.6798: lblock 3 mapped to illegal pblock 3 (length 3) [ 260.517348][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6793'. [ 260.528277][T22264] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 260.540667][T22264] EXT4-fs (loop2): This should not happen!! Data will be lost [ 260.540667][T22264] [ 260.586320][ T183] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 260.616545][ T183] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 260.629112][ T183] EXT4-fs (loop2): This should not happen!! Data will be lost [ 260.629112][ T183] [ 260.645042][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 260.686288][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6801'. [ 260.724090][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6801'. [ 260.942943][ T29] audit: type=1326 audit(2000000105.920:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22222 comm="syz.8.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f16e4a3acb9 code=0x7fc00000 [ 260.943491][T22306] batadv_slave_0: entered promiscuous mode [ 260.998640][T22307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.015378][T22305] batadv_slave_0: left promiscuous mode [ 261.076251][T21180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.137431][T22328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.162122][T22328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.220404][T22328] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.256013][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.315480][T22345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 261.419494][T22345] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 261.439255][T22345] EXT4-fs (loop6): Remounting filesystem read-only [ 261.449427][T22365] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.6837: bad orphan inode 15 [ 261.466570][T22365] ext4_test_bit(bit=14, block=18) = 1 [ 261.472116][T22365] is_bad_inode(inode)=0 [ 261.476514][T22365] NEXT_ORPHAN(inode)=1023 [ 261.480831][T22365] max_ino=32 [ 261.484449][T22365] i_nlink=0 [ 261.499761][T22365] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.6837: corrupted xattr block 19: invalid header [ 261.531510][T22365] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 261.541545][T22365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 261.573826][T22365] ext4 filesystem being mounted at /375/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 261.594067][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6837'. [ 261.615506][T22375] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 261.640034][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 261.656754][T21180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 261.670579][T22375] EXT4-fs (loop2): 1 truncate cleaned up [ 261.709099][T22375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.832657][T22392] set_capacity_and_notify: 7 callbacks suppressed [ 261.832685][T22392] loop8: detected capacity change from 0 to 1024 [ 261.833997][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.907002][T22392] EXT4-fs: inline encryption not supported [ 261.912871][T22392] EXT4-fs: Ignoring removed orlov option [ 261.913157][T22398] loop2: detected capacity change from 0 to 1024 [ 261.954671][T22398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.974959][T22392] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 261.998155][T22398] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.998851][T22402] Invalid argument reading file caps for ./file0 [ 262.018101][T22398] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.6849: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.033102][T22398] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 262.045873][T22398] EXT4-fs (loop2): This should not happen!! Data will be lost [ 262.045873][T22398] [ 262.068689][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 262.079451][T22392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 262.107634][T22392] System zones: 0-1, 3-12 [ 262.112733][T22392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.130834][T22408] loop6: detected capacity change from 0 to 512 [ 262.205623][T22408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.232322][T21416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.274360][ T29] audit: type=1400 audit(2000000107.240:2630): avc: denied { write } for pid=22406 comm="syz.6.6854" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 262.395842][T21180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.513184][T22429] loop6: detected capacity change from 0 to 8192 [ 262.584620][T22429] loop6: p1 p2 p4 < > [ 262.588801][T22429] loop6: partition table partially beyond EOD, truncated [ 262.603877][T22429] loop6: p1 start 16777216 is beyond EOD, truncated [ 262.610738][T22429] loop6: p2 size 515840 extends beyond EOD, truncated [ 262.644394][T22429] loop6: p4 start 16777216 is beyond EOD, truncated [ 262.665561][ T29] audit: type=1400 audit(2000000107.650:2631): avc: denied { lock } for pid=22437 comm="syz.2.6866" path="socket:[65121]" dev="sockfs" ino=65121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.730886][ T29] audit: type=1400 audit(2000000107.700:2632): avc: denied { ioctl } for pid=22427 comm="syz.6.6862" path="/dev/loop6p2" dev="devtmpfs" ino=2175 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.075832][T22464] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6878'. [ 263.183340][T22481] loop2: detected capacity change from 0 to 1024 [ 263.202093][T22483] loop5: detected capacity change from 0 to 2048 [ 263.223497][T22481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.250275][T22483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.299688][T15001] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.339584][ T29] audit: type=1326 audit(2000000108.320:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22497 comm="syz.6.6891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f390225acb9 code=0x0 [ 263.356372][T15155] udevd[15155]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 263.392115][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6892'. [ 263.402197][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6892'. [ 263.418073][T22501] loop2: detected capacity change from 0 to 1024 [ 263.440234][T22501] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 263.451391][T22501] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 263.467025][T22501] JBD2: no valid journal superblock found [ 263.473005][T22501] EXT4-fs (loop2): Could not load journal inode [ 263.508782][T22505] loop8: detected capacity change from 0 to 128 [ 263.516463][T22505] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 263.533385][ T29] audit: type=1400 audit(2000000108.510:2634): avc: denied { mounton } for pid=22504 comm="syz.8.6893" path="/36/file1/file0" dev="loop8" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 263.567870][T21416] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 263.575919][T21416] FAT-fs (loop8): Filesystem has been set read-only [ 263.583530][T21416] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 263.606183][T17338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.617617][T22509] loop8: detected capacity change from 0 to 512 [ 263.636358][T22509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.664924][T22509] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.696964][T22509] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 263.771997][T22509] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 263.784429][T22509] EXT4-fs (loop8): This should not happen!! Data will be lost [ 263.784429][T22509] [ 263.794875][T22509] EXT4-fs (loop8): Total free blocks count 0 [ 263.801128][T22509] EXT4-fs (loop8): Free/Dirty block details [ 263.807155][T22509] EXT4-fs (loop8): free_blocks=65280 [ 263.812637][T22509] EXT4-fs (loop8): dirty_blocks=31 [ 263.817986][T22509] EXT4-fs (loop8): Block reservation details [ 263.824765][T22509] EXT4-fs (loop8): i_reserved_data_blocks=31 [ 263.836229][T22531] netlink: 'syz.2.6901': attribute type 3 has an invalid length. [ 263.870740][T22509] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 263.990059][T22542] loop2: detected capacity change from 0 to 8192 [ 264.024743][T22542] syz.2.6903: attempt to access beyond end of device [ 264.024743][T22542] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 264.039492][T22542] Buffer I/O error on dev loop2, logical block 57847, async page read [ 264.057835][ T29] audit: type=1400 audit(2000000109.040:2635): avc: denied { execmod } for pid=22553 comm="syz.9.6907" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=66262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 264.085657][ T3008] ================================================================== [ 264.093930][ T3008] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 264.102188][ T3008] [ 264.104599][ T3008] write to 0xffff88811b08e9f0 of 8 bytes by task 13705 on cpu 0: [ 264.110804][T22554] lo speed is unknown, defaulting to 1000 [ 264.112750][ T3008] dentry_unlink_inode+0x65/0x260 [ 264.123603][ T3008] d_delete+0x164/0x180 [ 264.127862][ T3008] d_delete_notify+0x32/0x100 [ 264.132652][ T3008] vfs_unlink+0x32c/0x440 [ 264.137351][ T3008] do_unlinkat+0x1e2/0x4b0 [ 264.142034][ T3008] __x64_sys_unlink+0x2e/0x40 [ 264.146829][ T3008] x64_sys_call+0x2f48/0x3000 [ 264.151802][ T3008] do_syscall_64+0xc0/0x2a0 [ 264.156338][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.162245][ T3008] [ 264.164657][ T3008] read to 0xffff88811b08e9f0 of 8 bytes by task 3008 on cpu 1: [ 264.172194][ T3008] step_into_slowpath+0x12c/0x4c0 [ 264.177322][ T3008] path_lookupat+0x330/0x500 [ 264.182038][ T3008] filename_lookup+0x190/0x390 [ 264.186879][ T3008] do_readlinkat+0x7d/0x340 [ 264.191372][ T3008] __x64_sys_readlink+0x47/0x60 [ 264.196758][ T3008] x64_sys_call+0x2af1/0x3000 [ 264.201612][ T3008] do_syscall_64+0xc0/0x2a0 [ 264.206239][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.212123][ T3008] [ 264.214438][ T3008] value changed: 0xffff888135ddcf08 -> 0x0000000000000000 [ 264.221530][ T3008] [ 264.223837][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 264.229984][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 264.240912][ T3008] Tainted: [W]=WARN [ 264.244700][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.255090][ T3008] ==================================================================