last executing test programs: 3.111871364s ago: executing program 2 (id=855): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x6}, 0x18) sendmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 3.100805865s ago: executing program 2 (id=856): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 2.213569778s ago: executing program 2 (id=870): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@dev, @empty, @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061114cf0bf0000008510000002000000850000002a00000095ebffffffffffff9400000000000000f6792b2cbc4672ccb89d80ba6d1f7210e32bb812597b4412640a55e23652047d4809777f9f"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socketpair(0x0, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) msgget(0x0, 0x20c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000009c3266ef29bb7155fdcb0044690097859fc0ff9b77f29c3c23f45085f1dab82842c87f64246c7541258f4a3639dc83068c92c0c2c99b576162cbff54e4a5b5000000009e5d395e37488ab35be85164e34e95325df68bcc6300000000"], 0x64, 0x800) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000740)) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000001020102000000000000007052c41404534041aa0000000002080009400000000008000940000000000e000600736e6d705f747261700000"], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000100)={[{@auto_da_alloc}, {@nolazytime}]}, 0x9, 0x626, &(0x7f0000000d40)="$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") sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000003400400000013001d010100"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecf14cb9cca7480ef435000000e3bd6efbbf4ae7220b0013200d000100ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.406895534s ago: executing program 2 (id=882): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r0 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 1.387349796s ago: executing program 2 (id=883): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 904.362506ms ago: executing program 3 (id=891): syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000900)=""/184, 0xb8) getdents64(r2, 0x0, 0x0) 816.923513ms ago: executing program 3 (id=893): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)={0xb}, 0xb) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) 596.722421ms ago: executing program 0 (id=896): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000200), 0x10000000000000d8) 575.364853ms ago: executing program 1 (id=898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x3a) 537.609966ms ago: executing program 0 (id=900): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = socket$unix(0x1, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001540)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x208042, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_read_part_table(0x105c, &(0x7f0000002600)="$eJzsz7Fpw0AUx+H/nYJOkCYjqMpGGSAEModIk8ZbuPNAXsQDyJywPILt4vuqu/eDBy882XdL0lLy8z8kKVnLUvdY++vv/ffYP1PmTGkZ9vqZMclQ8nHfNiZvfZZk2QaXqbZbW/v2pMxr3fLh/HV65KUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KquAQAA//+KXQuJ") r6 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xd74fe432f9b81551, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x80000000, 0x6, 0x9, 0x0, 0x0, [{{r6}, 0x602}, {{r2}}, {{r5}, 0x8}, {{r0}, 0x1}, {{r7}, 0xfff}, {{r0}, 0x2}, {{r2}, 0x2}, {{r1}, 0x8000}, {{r3}, 0x4}]}) creat(&(0x7f00000003c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6000) r9 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffeb9}]}) migrate_pages(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r9, 0x0) io_setup(0x202, &(0x7f0000000200)) 537.168666ms ago: executing program 2 (id=901): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 467.686532ms ago: executing program 1 (id=903): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00'}, 0x90) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 421.394845ms ago: executing program 1 (id=904): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xa1281e, &(0x7f00000001c0)={[{@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 420.944355ms ago: executing program 4 (id=905): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x6, 0x2ba, &(0x7f0000000640)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/155, 0x9b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 349.509482ms ago: executing program 1 (id=906): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="e8ff3f0000000002280012000c00010076657468"], 0x48}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005070000000000000000001d0102", @ANYRES32=r1, @ANYRES64], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket(0x8, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000006c0)) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000002880), 0x226c}, 0x1, 0x0, 0x0, 0xa0}, 0x20000001) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000700)={'batadv_slave_0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000002280)=ANY=[@ANYRES8=r9], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmmsg$inet6(r6, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000002500)="c05164fb4feda7f1b133256bd759179e319f727835678ac76d67a049be40c5d2cf8b21dd893ffc9233a758e790062e32928416691fe08a72ef7bf2", 0x3b}, {&(0x7f0000002540)}, {&(0x7f00000025c0)="0df89314a8bc44476d311f2edf6e0390b47f8b471ce89b2cd4f71a79f556b0d1e28b865957dbbeea9af7b5b6f52a9b5e08c59bb1b5e6442397c554845371730b631dfe262a8d5e055be9ee5906e1e79d413d70ebccc28826c72c3d769dfc22436dea50f3e717a6c089aa75f886aabdbd04dc2116634b8de08f244997a3f3edd07166e321a2c99edc6c15748025d975691a3d5647e85b0b4ee1e7782eacd31935d0fe54b84954d0d96a008af49b08df4300a4492786a485c94ecff181e58e1c74db9ed1c9c4a814dd6979757cefdf5a7ba45df57d639e365ac6810b", 0xdb}], 0x4}}, {{&(0x7f0000002740)={0xa, 0x4e21, 0xfffffff7, @private2, 0x4}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000003200)="aa2a58b350b1b0c7eb703ee3f524c4bf0548cc1e3f081ae51aad7be2d1ee45793b3a2a640573096acb7cb4acdfd3e627ae47a21ddfcc8d83304c79df765a05063e33ae9af110c5fa067bc88909264c67bc04049814c9f5447471952f7c94c0699c6540ab1acbdc31560c070f3a2ae62d2956360c06fdd1e6761bce44fead21a6bbc044c05e1c3c33148894fe34b89062d6ce5f4d757136be5c21f4bdbdfc2321b813fd851752e6b45fe16a92ca6e3ad02adb8e86", 0xb4}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xd8}}], 0x3, 0x200048c4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0xd0, &(0x7f0000000680), 0x10) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x800}}, 0x20}}, 0x0) 348.831872ms ago: executing program 4 (id=907): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702580000000002020207b1af8ff00000000bfa10000000000000701000900ffffffb702000005000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x80901) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319c00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) unlinkat(r0, &(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='ext4_free_blocks\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_sync_file_enter\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x2000) 259.736419ms ago: executing program 3 (id=908): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c) 252.19226ms ago: executing program 4 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f00000000c0)=0x5, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700f00000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 210.091923ms ago: executing program 0 (id=910): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x12, 0x0, 0x0) 187.394155ms ago: executing program 3 (id=911): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x8b, 0x0, 0x0, 0x0, 0x0) 140.716129ms ago: executing program 4 (id=912): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000002, r1) 140.284179ms ago: executing program 4 (id=913): syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000900)=""/184, 0xb8) getdents64(r2, 0x0, 0x0) 110.516291ms ago: executing program 3 (id=914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@broadcast, @local, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x3a) 110.319701ms ago: executing program 0 (id=915): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00'}, 0x90) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 109.132591ms ago: executing program 4 (id=916): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000400050005000400a5000056c8"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_usbip_server_init(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000102010100000000000000000a0000003c0001800c0002800400018f92d0f000000000002c000180140003800000000000000000000000000000000014000400ff0200000000010000000000000000010c0019800800010000000000"], 0x5c}}, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x18) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) dup3(r5, 0xffffffffffffffff, 0x0) 80.649844ms ago: executing program 0 (id=917): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xa1281e, &(0x7f00000001c0)={[{@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 36.224107ms ago: executing program 1 (id=918): syz_emit_ethernet(0x76, &(0x7f0000000a40)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x40, 0x3a, 0x0, @private2, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fe77da", 0x0, 0x0, 0x0, @empty, @empty, [@dstopts={0x6, 0x0, '\x00', [@generic]}]}}}}}}}, 0x0) 15.511829ms ago: executing program 1 (id=919): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x0, 0x0}, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000100)={0xb}, 0xb) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) 4.43533ms ago: executing program 3 (id=920): r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7058, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r4) 0s ago: executing program 0 (id=921): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = socket$unix(0x1, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001540)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x208042, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_read_part_table(0x105c, &(0x7f0000002600)="$eJzsz7Fpw0AUx+H/nYJOkCYjqMpGGSAEModIk8ZbuPNAXsQDyJywPILt4vuqu/eDBy882XdL0lLy8z8kKVnLUvdY++vv/ffYP1PmTGkZ9vqZMclQ8nHfNiZvfZZk2QaXqbZbW/v2pMxr3fLh/HV65KUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KquAQAA//+KXQuJ") r6 = socket$can_j1939(0x1d, 0x2, 0x7) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xd74fe432f9b81551, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000400)={0x80000000, 0x6, 0x9, 0x0, 0x0, [{{r6}, 0x602}, {{r2}}, {{r5}, 0x8}, {{r0}, 0x1}, {{r7}, 0xfff}, {{r0}, 0x2}, {{r2}, 0x2}, {{r1}, 0x8000}, {{r3}, 0x4}]}) creat(&(0x7f00000003c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6000) r9 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffeb9}]}) migrate_pages(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r9, 0x0) io_setup(0x202, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered blocking state [ 25.770545][ T918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.780071][ T918] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.787276][ T918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.798473][ T3090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.817507][ T3095] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.829488][ T3090] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.839430][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.846496][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.872166][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.879317][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.891818][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.898858][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.911374][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.930034][ T3095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.940584][ T3095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.961263][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.971801][ T3084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.990523][ T3164] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.997785][ T3164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.021375][ T918] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.028537][ T918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.038460][ T918] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.045541][ T918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.066125][ T3085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.076619][ T3085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.091445][ T3090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.101898][ T3090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.126898][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.153238][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.184858][ T3095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.226607][ T3090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.274703][ T3084] veth0_vlan: entered promiscuous mode [ 26.282483][ T3084] veth1_vlan: entered promiscuous mode [ 26.316358][ T3084] veth0_macvtap: entered promiscuous mode [ 26.339586][ T3085] veth0_vlan: entered promiscuous mode [ 26.355614][ T3084] veth1_macvtap: entered promiscuous mode [ 26.368331][ T3086] veth0_vlan: entered promiscuous mode [ 26.382240][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.394406][ T3085] veth1_vlan: entered promiscuous mode [ 26.406438][ T3090] veth0_vlan: entered promiscuous mode [ 26.417934][ T3090] veth1_vlan: entered promiscuous mode [ 26.426789][ T3086] veth1_vlan: entered promiscuous mode [ 26.441416][ T3090] veth0_macvtap: entered promiscuous mode [ 26.456204][ T3084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.467583][ T3084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.476350][ T3084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.485156][ T3084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.493864][ T3084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.505716][ T3085] veth0_macvtap: entered promiscuous mode [ 26.512807][ T3090] veth1_macvtap: entered promiscuous mode [ 26.525644][ T3085] veth1_macvtap: entered promiscuous mode [ 26.537384][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.547828][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.558273][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.566882][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.577450][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.588222][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.597663][ T3095] veth0_vlan: entered promiscuous mode [ 26.612643][ T3090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.621484][ T3090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.630242][ T3090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.639047][ T3090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.651572][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.662037][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.671880][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.682322][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.692871][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.711362][ T3086] veth0_macvtap: entered promiscuous mode [ 26.718062][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.728620][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.738665][ T3085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.749215][ T3085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.759991][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.767774][ T3095] veth1_vlan: entered promiscuous mode [ 26.775428][ T3085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.784165][ T3085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.792963][ T3085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.801656][ T3085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.819405][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 26.819416][ T29] audit: type=1400 audit(1721646376.585:109): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/root/syzkaller.vTFcXh/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.850358][ T29] audit: type=1400 audit(1721646376.585:110): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.872620][ T29] audit: type=1400 audit(1721646376.585:111): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/root/syzkaller.vTFcXh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.874845][ T3086] veth1_macvtap: entered promiscuous mode [ 26.897897][ T29] audit: type=1400 audit(1721646376.585:112): avc: denied { mount } for pid=3090 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.917246][ T3095] veth0_macvtap: entered promiscuous mode [ 26.925360][ T29] audit: type=1400 audit(1721646376.585:113): avc: denied { unmount } for pid=3090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.951439][ T29] audit: type=1400 audit(1721646376.615:114): avc: denied { mounton } for pid=3090 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.966337][ T3095] veth1_macvtap: entered promiscuous mode [ 26.990789][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.001305][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.011205][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.013776][ T29] audit: type=1400 audit(1721646376.785:115): avc: denied { read write } for pid=3090 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.021629][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.021640][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.021653][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.038566][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.045699][ T29] audit: type=1400 audit(1721646376.785:116): avc: denied { open } for pid=3090 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.060022][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.066254][ T29] audit: type=1400 audit(1721646376.785:117): avc: denied { ioctl } for pid=3090 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.143394][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.153382][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.164242][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.174189][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.184790][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.194780][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.205236][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.215872][ T3095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.237871][ T29] audit: type=1400 audit(1721646377.005:118): avc: denied { read } for pid=3229 comm="syz.3.4" name="usbmon1" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 27.243312][ T3230] loop3: detected capacity change from 0 to 512 [ 27.267180][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.277783][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.287632][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.297027][ T3230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.298063][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.311816][ T3230] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.320291][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.320305][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.327844][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.362163][ T3232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.375372][ T3238] syz.2.6 (3238) used greatest stack depth: 10688 bytes left [ 27.383879][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.394799][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.404953][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.415514][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.425367][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.435778][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.445580][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.456085][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.466797][ T3095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.498352][ T3086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.507175][ T3086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.516200][ T3086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.525035][ T3086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.535010][ T3248] loop2: detected capacity change from 0 to 4096 [ 27.537692][ T3095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.542610][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.550352][ T3095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.568071][ T3095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.573608][ T3248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.576982][ T3095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.627546][ T3253] 9pnet_fd: Insufficient options for proto=fd [ 27.664030][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.747023][ T3270] loop3: detected capacity change from 0 to 512 [ 27.797378][ T3270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.807819][ T3278] loop4: detected capacity change from 0 to 1024 [ 27.813628][ T3270] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.841009][ T3278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.865072][ T3288] 9pnet_fd: Insufficient options for proto=fd [ 27.872113][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.898188][ T3278] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 27.955665][ T3278] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 27.968640][ T3278] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.968640][ T3278] [ 27.978471][ T3278] EXT4-fs (loop4): Total free blocks count 0 [ 27.984480][ T3278] EXT4-fs (loop4): Free/Dirty block details [ 27.990362][ T3278] EXT4-fs (loop4): free_blocks=68451041280 [ 27.992557][ T3292] loop3: detected capacity change from 0 to 4096 [ 27.996239][ T3278] EXT4-fs (loop4): dirty_blocks=96 [ 27.996253][ T3278] EXT4-fs (loop4): Block reservation details [ 28.013749][ T3278] EXT4-fs (loop4): i_reserved_data_blocks=6 [ 28.045517][ T3299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 28.085512][ T3292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.162537][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.190062][ T3316] loop0: detected capacity change from 0 to 512 [ 28.199825][ T3315] serio: Serial port pts0 [ 28.225697][ T3316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.239320][ T3316] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.259466][ T3086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.413018][ T3353] loop0: detected capacity change from 0 to 512 [ 28.437877][ T3353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.453301][ T3353] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.479173][ T3086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.624526][ T3278] syz.4.5 (3278) used greatest stack depth: 10296 bytes left [ 28.702844][ T3393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 28.728754][ T3393] netlink: 244 bytes leftover after parsing attributes in process `syz.0.52'. [ 29.012135][ T3402] loop1: detected capacity change from 0 to 512 [ 29.019915][ T3402] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.049339][ T3402] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 29.059386][ T3402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 29.067934][ T3402] System zones: 1-12 [ 29.068413][ T3402] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.67: corrupted in-inode xattr: e_value size too large [ 29.086985][ T3402] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.67: couldn't read orphan inode 15 (err -117) [ 29.100305][ T3402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.129560][ T3085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.256645][ T3427] 9pnet_fd: Insufficient options for proto=fd [ 29.271784][ T3429] loop1: detected capacity change from 0 to 256 [ 29.307434][ T3432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 29.493913][ T3443] loop3: detected capacity change from 0 to 512 [ 29.504978][ T3443] ======================================================= [ 29.504978][ T3443] WARNING: The mand mount option has been deprecated and [ 29.504978][ T3443] and is ignored by this kernel. Remove the mand [ 29.504978][ T3443] option from the mount to silence this warning. [ 29.504978][ T3443] ======================================================= [ 29.507024][ T3445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 29.552963][ T3446] loop1: detected capacity change from 0 to 512 [ 29.560412][ T3446] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.569339][ T3443] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 16: comm syz.3.81: invalid block [ 29.572510][ T3446] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 29.581307][ T3443] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.81: couldn't read orphan inode 11 (err -117) [ 29.591472][ T3446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 29.601423][ T3443] EXT4-fs (loop3): 1 truncate cleaned up [ 29.608531][ T3446] System zones: 1-12 [ 29.615797][ T3443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.618440][ T3446] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.83: corrupted in-inode xattr: e_value size too large [ 29.646449][ T3446] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.83: couldn't read orphan inode 15 (err -117) [ 29.661635][ T3446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.710398][ T3085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.749649][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.881595][ T3465] loop1: detected capacity change from 0 to 2048 [ 29.910010][ T3469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 29.930688][ T3473] loop1: detected capacity change from 0 to 512 [ 29.937868][ T3473] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.952346][ T3475] loop3: detected capacity change from 0 to 512 [ 29.962980][ T3473] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 29.983664][ T3473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 29.991689][ T3482] 9pnet_fd: Insufficient options for proto=fd [ 30.005986][ T3473] System zones: 1-12 [ 30.008389][ T3475] EXT4-fs error (device loop3): __ext4_iget:4985: inode #11: block 16: comm syz.3.95: invalid block [ 30.015210][ T3473] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.94: corrupted in-inode xattr: e_value size too large [ 30.027768][ T3475] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.95: couldn't read orphan inode 11 (err -117) [ 30.047224][ T3475] EXT4-fs (loop3): 1 truncate cleaned up [ 30.052914][ T3473] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.94: couldn't read orphan inode 15 (err -117) [ 30.066127][ T3473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.078482][ T3475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.098992][ T3085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.158687][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.201478][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 30.290692][ T3512] loop3: detected capacity change from 0 to 512 [ 30.323813][ T3512] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.332815][ T3512] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 30.337809][ T3521] loop0: detected capacity change from 0 to 512 [ 30.358193][ T3512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 30.374809][ T3512] System zones: 1-12 [ 30.379465][ T3521] EXT4-fs error (device loop0): __ext4_iget:4985: inode #11: block 16: comm syz.0.114: invalid block [ 30.391427][ T3512] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.111: corrupted in-inode xattr: e_value size too large [ 30.405846][ T3521] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.114: couldn't read orphan inode 11 (err -117) [ 30.406807][ T3512] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.111: couldn't read orphan inode 15 (err -117) [ 30.426008][ T3521] EXT4-fs (loop0): 1 truncate cleaned up [ 30.441124][ T3521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.441604][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.517850][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.630206][ T3086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.641956][ T3531] serio: Serial port pts0 [ 30.696818][ T55] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 30.828987][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 31.198885][ T3559] chnl_net:caif_netlink_parms(): no params data found [ 31.233103][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.240635][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.248153][ T3559] bridge_slave_0: entered allmulticast mode [ 31.255397][ T3559] bridge_slave_0: entered promiscuous mode [ 31.262429][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.269766][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.277497][ T3559] bridge_slave_1: entered allmulticast mode [ 31.284041][ T3559] bridge_slave_1: entered promiscuous mode [ 31.300760][ T3559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.311328][ T3559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.330856][ T3559] team0: Port device team_slave_0 added [ 31.337628][ T3559] team0: Port device team_slave_1 added [ 31.353029][ T3559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.359993][ T3559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.385905][ T3559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.398149][ T3559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.405128][ T3559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.431173][ T3559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.467815][ T3559] hsr_slave_0: entered promiscuous mode [ 31.474656][ T3559] hsr_slave_1: entered promiscuous mode [ 31.480896][ T3559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.488645][ T3559] Cannot create hsr debugfs directory [ 31.635673][ T3559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.846799][ T3559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.920986][ T3559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.980380][ T3559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.987314][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 31.987333][ T29] audit: type=1400 audit(1721646381.745:243): avc: denied { create } for pid=3626 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.017241][ T29] audit: type=1400 audit(1721646381.765:244): avc: denied { read } for pid=3626 comm="syz.4.149" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 32.040902][ T29] audit: type=1400 audit(1721646381.765:245): avc: denied { open } for pid=3626 comm="syz.4.149" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 32.065091][ T29] audit: type=1400 audit(1721646381.765:246): avc: denied { read write } for pid=3626 comm="syz.4.149" name="rdma_cm" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.088179][ T29] audit: type=1400 audit(1721646381.765:247): avc: denied { open } for pid=3626 comm="syz.4.149" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.102915][ T3632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 32.136927][ T28] bridge_slave_1: left allmulticast mode [ 32.142646][ T28] bridge_slave_1: left promiscuous mode [ 32.148657][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.156633][ T28] bridge_slave_0: left allmulticast mode [ 32.162260][ T28] bridge_slave_0: left promiscuous mode [ 32.167952][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.238455][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.249576][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.259820][ T28] bond0 (unregistering): Released all slaves [ 32.280926][ T3559] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.289657][ T3559] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.298490][ T3559] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.307316][ T3559] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.350117][ T3559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.362154][ T3559] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.374220][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.381347][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.391750][ T28] hsr_slave_0: left promiscuous mode [ 32.397941][ T28] hsr_slave_1: left promiscuous mode [ 32.404810][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.412242][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.419983][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.427688][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.439580][ T28] veth1_macvtap: left promiscuous mode [ 32.439601][ T28] veth0_macvtap: left promiscuous mode [ 32.439712][ T28] veth1_vlan: left promiscuous mode [ 32.456126][ T28] veth0_vlan: left promiscuous mode [ 32.509583][ T29] audit: type=1400 audit(1721646382.275:248): avc: denied { write } for pid=3639 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.530696][ T29] audit: type=1400 audit(1721646382.285:249): avc: denied { bind } for pid=3639 comm="syz.0.154" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.550943][ T29] audit: type=1400 audit(1721646382.285:250): avc: denied { node_bind } for pid=3639 comm="syz.0.154" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 32.572659][ T29] audit: type=1400 audit(1721646382.285:251): avc: denied { connect } for pid=3639 comm="syz.0.154" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.595047][ T29] audit: type=1400 audit(1721646382.285:252): avc: denied { shutdown } for pid=3639 comm="syz.0.154" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.596072][ T55] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 32.628059][ T3649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'. [ 32.641030][ T3649] loop0: detected capacity change from 0 to 512 [ 32.656279][ T3649] EXT4-fs (loop0): too many log groups per flexible block group [ 32.664157][ T3649] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 32.673842][ T3649] EXT4-fs (loop0): mount failed [ 32.679646][ T28] team0 (unregistering): Port device team_slave_1 removed [ 32.694136][ T28] team0 (unregistering): Port device team_slave_0 removed [ 32.735336][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.742497][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.779623][ T3559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.871181][ T3559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.013679][ T3559] veth0_vlan: entered promiscuous mode [ 33.023622][ T3559] veth1_vlan: entered promiscuous mode [ 33.054879][ T3559] veth0_macvtap: entered promiscuous mode [ 33.066276][ T3559] veth1_macvtap: entered promiscuous mode [ 33.081220][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.092544][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.103568][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.114188][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.124783][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.135246][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.145132][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.155563][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.167332][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.185244][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.195938][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.205939][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.216437][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.226260][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.236889][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.246783][ T3559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.257391][ T3559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.268664][ T3559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.281800][ T3559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290617][ T3559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.299414][ T3559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.308492][ T3559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.595491][ T3703] loop1: detected capacity change from 0 to 256 [ 33.618463][ T3708] 9p: Unknown Cache mode or invalid value f [ 33.738214][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 33.738578][ T3720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 33.776005][ T3720] loop1: detected capacity change from 0 to 512 [ 33.795709][ T3728] 9pnet_fd: p9_fd_create_tcp (3728): problem connecting socket to 127.0.0.1 [ 33.817024][ T3720] EXT4-fs (loop1): too many log groups per flexible block group [ 33.824801][ T3720] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 33.832265][ T3720] EXT4-fs (loop1): mount failed [ 33.951545][ T3738] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.365424][ T3745] loop3: detected capacity change from 0 to 512 [ 34.385474][ T3745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.398097][ T3745] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.415581][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.521938][ T3753] tipc: Started in network mode [ 34.526868][ T3753] tipc: Node identity ac1414aa, cluster identity 4711 [ 34.581515][ T3753] tipc: Enabled bearer , priority 10 [ 34.582225][ T3753] tipc: Disabling bearer [ 34.638149][ T3767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 34.648168][ T3767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.192'. [ 34.773700][ T3774] loop2: detected capacity change from 0 to 512 [ 34.838342][ T3778] syz.1.198 uses obsolete (PF_INET,SOCK_PACKET) [ 34.839756][ T3774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.845380][ T3776] loop0: detected capacity change from 0 to 2048 [ 34.874377][ T3774] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.906473][ T3776] EXT4-fs: Ignoring removed nobh option [ 34.925889][ T3776] EXT4-fs (loop0): #clusters per group too big: 16384 [ 34.944270][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.965423][ T3776] netlink: 'syz.0.197': attribute type 2 has an invalid length. [ 35.026974][ T3794] tipc: Started in network mode [ 35.031884][ T3794] tipc: Node identity ac1414aa, cluster identity 4711 [ 35.039302][ T3794] tipc: Enabled bearer , priority 10 [ 35.039667][ T3792] 9pnet_fd: p9_fd_create_tcp (3792): problem connecting socket to 127.0.0.1 [ 35.055314][ T3794] tipc: Disabling bearer [ 35.077617][ T3798] loop4: detected capacity change from 0 to 2048 [ 35.086408][ T3798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.093232][ T3798] ext4: Bad value for 'commit' [ 35.095290][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'. [ 35.106956][ T3800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.208'. [ 35.121368][ T3798] loop4: detected capacity change from 0 to 256 [ 35.192434][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 35.302840][ T3827] 9pnet_fd: p9_fd_create_tcp (3827): problem connecting socket to 127.0.0.1 [ 35.330420][ T3831] loop2: detected capacity change from 0 to 2048 [ 35.333362][ T3833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 35.338756][ T3831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.352871][ T3831] ext4: Bad value for 'commit' [ 35.374488][ T3831] loop2: detected capacity change from 0 to 256 [ 35.539102][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 35.546971][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 35.555431][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 35.563624][ T9] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.584036][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 35.592896][ T3847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.229'. [ 35.608142][ T3847] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 35.772830][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 36.003620][ T3871] loop2: detected capacity change from 0 to 2048 [ 36.010583][ T3871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.018237][ T3871] ext4: Bad value for 'commit' [ 36.032979][ T3871] loop2: detected capacity change from 0 to 256 [ 36.113146][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 36.120950][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 36.135130][ T9] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 36.143511][ T9] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 36.182299][ T3887] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 36.200981][ T3889] 9pnet_fd: Insufficient options for proto=fd [ 36.246469][ T3899] 9pnet_fd: p9_fd_create_tcp (3899): problem connecting socket to 127.0.0.1 [ 36.246785][ T3900] loop4: detected capacity change from 0 to 512 [ 36.262896][ T3900] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 36.271880][ T3900] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.278723][ T3900] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.280813][ T3902] loop2: detected capacity change from 0 to 512 [ 36.294679][ T3900] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 36.301056][ T3902] EXT4-fs: Ignoring removed i_version option [ 36.307059][ T3900] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.250: casefold flag without casefold feature [ 36.312451][ T3902] ext4: Unknown parameter 'dont_hash' [ 36.326034][ T3900] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.250: couldn't read orphan inode 16 (err -117) [ 36.342977][ T3900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.394035][ T3095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.411454][ T3910] loop3: detected capacity change from 0 to 2048 [ 36.420431][ T3910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.427459][ T3910] ext4: Bad value for 'commit' [ 36.457533][ T3910] loop3: detected capacity change from 0 to 256 [ 36.543746][ T3923] 9pnet_fd: Insufficient options for proto=fd [ 36.601823][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 36.609618][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 36.618536][ T35] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 36.627708][ T35] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 36.655714][ T3925] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 36.665358][ T3934] 9pnet_fd: p9_fd_create_tcp (3934): problem connecting socket to 127.0.0.1 [ 36.689357][ T3936] loop3: detected capacity change from 0 to 512 [ 36.696890][ T3936] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 36.705144][ T3936] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.711684][ T3936] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.726687][ T3936] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 36.733701][ T3936] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.265: casefold flag without casefold feature [ 36.746815][ T3936] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.265: couldn't read orphan inode 16 (err -117) [ 36.759169][ T3936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.783060][ T3939] loop4: detected capacity change from 0 to 128 [ 36.808050][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.821473][ T3943] loop4: detected capacity change from 0 to 1024 [ 36.828455][ T3943] EXT4-fs: Ignoring removed orlov option [ 36.834341][ T3943] /dev/loop4: Can't open blockdev [ 36.889049][ T3951] loop4: detected capacity change from 0 to 2048 [ 36.896088][ T3951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.902875][ T3951] ext4: Bad value for 'commit' [ 36.920261][ T3951] loop4: detected capacity change from 0 to 256 [ 36.932242][ T3953] 9pnet_fd: Insufficient options for proto=fd [ 37.038165][ T1502] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 37.049520][ T3966] loop3: detected capacity change from 0 to 512 [ 37.059396][ T3967] 9pnet_fd: p9_fd_create_tcp (3967): problem connecting socket to 127.0.0.1 [ 37.076319][ T3966] EXT4-fs (loop3): too many log groups per flexible block group [ 37.084221][ T3966] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 37.091073][ T3966] EXT4-fs (loop3): mount failed [ 37.103665][ T3971] loop2: detected capacity change from 0 to 128 [ 37.143058][ T3975] loop2: detected capacity change from 0 to 512 [ 37.149737][ T3975] EXT4-fs: Ignoring removed i_version option [ 37.155812][ T3975] EXT4-fs: Ignoring removed nobh option [ 37.161652][ T3975] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.174779][ T3975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.185813][ T3975] EXT4-fs (loop2): 1 truncate cleaned up [ 37.191802][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.211660][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.287005][ T3986] 9pnet_fd: Insufficient options for proto=fd [ 37.383250][ T3996] loop2: detected capacity change from 0 to 512 [ 37.389815][ T3996] EXT4-fs: Ignoring removed i_version option [ 37.397193][ T3996] ext4: Unknown parameter 'dont_hash' [ 37.825828][ T3999] loop4: detected capacity change from 0 to 128 [ 37.849936][ T4001] loop4: detected capacity change from 0 to 512 [ 37.859344][ T4001] EXT4-fs: Ignoring removed i_version option [ 37.865492][ T4001] EXT4-fs: Ignoring removed nobh option [ 37.873250][ T4001] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.893813][ T4001] EXT4-fs (loop4): 1 truncate cleaned up [ 37.899567][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 37.899577][ T29] audit: type=1400 audit(1721646387.665:282): avc: denied { create } for pid=4006 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.901077][ T4001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.905697][ T29] audit: type=1400 audit(1721646387.665:283): avc: denied { connect } for pid=4006 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.963005][ T3095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.052219][ T4026] 9pnet_fd: p9_fd_create_tcp (4026): problem connecting socket to 127.0.0.1 [ 38.112413][ T4034] loop4: detected capacity change from 0 to 128 [ 38.191371][ T4045] loop0: detected capacity change from 0 to 512 [ 38.198828][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 38.198940][ T4045] EXT4-fs: Ignoring removed i_version option [ 38.214111][ T4045] EXT4-fs: Ignoring removed nobh option [ 38.220986][ T4045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.231668][ T4046] loop4: detected capacity change from 0 to 512 [ 38.231989][ T4045] EXT4-fs (loop0): 1 truncate cleaned up [ 38.248041][ T4045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.268235][ T4046] EXT4-fs (loop4): too many log groups per flexible block group [ 38.276344][ T4046] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 38.288452][ T3086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.288759][ C0] eth0: bad gso: type: 1, size: 1408 [ 38.297975][ T4046] EXT4-fs (loop4): mount failed [ 38.447768][ T4074] loop3: detected capacity change from 0 to 128 [ 38.555317][ T4085] loop3: detected capacity change from 0 to 512 [ 38.561928][ T4085] EXT4-fs: Ignoring removed i_version option [ 38.567974][ T4085] ext4: Unknown parameter 'dont_hash' [ 38.999643][ T4105] __nla_validate_parse: 13 callbacks suppressed [ 38.999657][ T4105] netlink: 66 bytes leftover after parsing attributes in process `syz.2.326'. [ 39.076807][ T4119] loop2: detected capacity change from 0 to 512 [ 39.084210][ T4119] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.092222][ T4119] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.099077][ T4121] netlink: 308 bytes leftover after parsing attributes in process `syz.4.329'. [ 39.099162][ T4119] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 39.118772][ T4119] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.133766][ T4119] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 39.141290][ T4119] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.331: casefold flag without casefold feature [ 39.154327][ T4119] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.331: couldn't read orphan inode 16 (err -117) [ 39.166649][ T4119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.210919][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.221373][ T4123] loop4: detected capacity change from 0 to 128 [ 39.274302][ T4131] loop2: detected capacity change from 0 to 2048 [ 39.280887][ T4131] EXT4-fs: Ignoring removed orlov option [ 39.292425][ T4132] team0: Device ipvlan2 failed to register rx_handler [ 39.311472][ T4131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.338700][ T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.358811][ T29] audit: type=1400 audit(1721646389.125:284): avc: denied { create } for pid=4122 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 39.369171][ T50] EXT4-fs (loop2): Remounting filesystem read-only [ 39.388489][ T4146] loop0: detected capacity change from 0 to 128 [ 39.398551][ T4146] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.399925][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.518705][ T4167] loop3: detected capacity change from 0 to 2048 [ 39.525594][ T4167] EXT4-fs: Ignoring removed orlov option [ 39.536356][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.562003][ T28] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.577378][ T28] EXT4-fs (loop3): Remounting filesystem read-only [ 39.584257][ T4102] 9pnet_fd: p9_fd_create_tcp (4102): problem connecting socket to 127.0.0.1 [ 39.584912][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.610613][ T4180] loop1: detected capacity change from 0 to 2048 [ 39.625859][ T29] audit: type=1400 audit(1721646389.395:285): avc: denied { write } for pid=4182 comm="syz.3.355" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.626581][ T4181] loop2: detected capacity change from 0 to 512 [ 39.659776][ T4181] EXT4-fs: Ignoring removed i_version option [ 39.664687][ T4180] Alternate GPT is invalid, using primary GPT. [ 39.665849][ T4181] ext4: Unknown parameter 'dont_hash' [ 39.672071][ T4180] loop1: p2 p3 p7 [ 39.715474][ T2787] Alternate GPT is invalid, using primary GPT. [ 39.721801][ T2787] loop1: p2 p3 p7 [ 39.837835][ T4192] loop1: detected capacity change from 0 to 256 [ 39.852254][ T29] audit: type=1400 audit(1721646389.615:286): avc: denied { remount } for pid=4191 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.852422][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 39.888232][ T3077] udevd[3077]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.936184][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 39.960601][ T4193] netlink: 244 bytes leftover after parsing attributes in process `syz.3.358'. [ 39.975267][ T3077] udevd[3077]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.997544][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 40.290618][ T4208] loop4: detected capacity change from 0 to 1024 [ 40.309388][ T4208] EXT4-fs: Ignoring removed orlov option [ 40.318482][ T4208] /dev/loop4: Can't open blockdev [ 40.335831][ T29] audit: type=1400 audit(1721646390.105:287): avc: denied { bind } for pid=4216 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.338240][ T4217] loop0: detected capacity change from 0 to 512 [ 40.380263][ T4217] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 40.382259][ T4219] loop4: detected capacity change from 0 to 256 [ 40.388592][ T4217] ref_ctr increment failed for inode: 0x170 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881000564c0 [ 40.424710][ T4217] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 40.432986][ T4217] ref_ctr decrement failed for inode: 0x170 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881000564c0 [ 40.445946][ T4217] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 40.454259][ T4217] ref_ctr decrement failed for inode: 0x170 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881000564c0 [ 40.478108][ T4223] loop2: detected capacity change from 0 to 2048 [ 40.484763][ T4223] EXT4-fs: Ignoring removed orlov option [ 40.506650][ T4223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.518416][ T4230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 40.529644][ T4230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 40.539186][ T4047] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.563746][ T4047] EXT4-fs (loop2): Remounting filesystem read-only [ 40.571473][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.635780][ T29] audit: type=1400 audit(1721646390.405:288): avc: denied { listen } for pid=4236 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.686408][ T4244] loop3: detected capacity change from 0 to 2048 [ 40.692139][ T29] audit: type=1400 audit(1721646390.445:289): avc: denied { create } for pid=4247 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.712056][ T29] audit: type=1400 audit(1721646390.445:290): avc: denied { setopt } for pid=4247 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.744498][ T4253] loop4: detected capacity change from 0 to 512 [ 40.752299][ T4244] Alternate GPT is invalid, using primary GPT. [ 40.758754][ T4244] loop3: p2 p3 p7 [ 40.771699][ T4253] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 40.780046][ T4253] ref_ctr increment failed for inode: 0x1a6 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100056f40 [ 40.803452][ T4253] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 40.811762][ T4253] ref_ctr decrement failed for inode: 0x1a6 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100056f40 [ 40.822977][ T4253] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 40.822992][ T4253] ref_ctr decrement failed for inode: 0x1a6 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100056f40 [ 40.847559][ T4261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'. [ 40.847611][ T28] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 40.852626][ T4261] loop2: detected capacity change from 0 to 512 [ 40.882483][ T4261] EXT4-fs (loop2): too many log groups per flexible block group [ 40.890297][ T4261] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 40.898548][ T4261] EXT4-fs (loop2): mount failed [ 40.921925][ T4268] loop3: detected capacity change from 0 to 1024 [ 40.929060][ T4268] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.940006][ T4268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.967275][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.993018][ T4280] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 41.041533][ T4292] loop0: detected capacity change from 0 to 512 [ 41.052604][ T4292] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 41.060853][ T4292] ref_ctr increment failed for inode: 0x1a9 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100056f40 [ 41.073284][ T4292] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 41.081769][ T4292] ref_ctr decrement failed for inode: 0x1a9 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100056f40 [ 41.092990][ T4292] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 41.101289][ T4292] ref_ctr decrement failed for inode: 0x1a9 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100056f40 [ 41.570524][ T4326] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 41.593773][ T4328] loop3: detected capacity change from 0 to 512 [ 41.623668][ T4328] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 41.631923][ T4328] ref_ctr increment failed for inode: 0x1f3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888111cf24c0 [ 41.661370][ T4154] udevd[4154]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 41.674521][ T4340] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 41.683026][ T4340] ref_ctr decrement failed for inode: 0x1f3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888111cf24c0 [ 41.696142][ T4339] loop2: detected capacity change from 0 to 512 [ 41.698116][ T4340] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 41.710873][ T4340] ref_ctr decrement failed for inode: 0x1f3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888111cf24c0 [ 41.740108][ T4339] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.417: corrupted in-inode xattr: invalid ea_ino [ 41.780771][ T4339] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.417: couldn't read orphan inode 12 (err -117) [ 41.818833][ T4339] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.855630][ T4339] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.417: Directory hole found for htree leaf block 0 [ 41.878222][ T4339] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.417: Directory hole found for htree leaf block 0 [ 41.897793][ T4339] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.417: Directory hole found for htree leaf block 0 [ 41.914248][ T4353] loop3: detected capacity change from 0 to 128 [ 41.921914][ T4339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'. [ 41.950063][ T4339] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.417: Directory hole found for htree leaf block 0 [ 41.965719][ T4339] sch_fq: defrate 0 ignored. [ 41.991446][ T4351] syz.4.419 (4351) used greatest stack depth: 10056 bytes left [ 41.999848][ T3090] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 42.008971][ T4355] team0: Device ipvlan2 failed to register rx_handler [ 42.083366][ T4370] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 42.106212][ T4047] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 42.108644][ T4373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 42.146127][ T4373] loop4: detected capacity change from 0 to 512 [ 42.171548][ T4373] EXT4-fs (loop4): too many log groups per flexible block group [ 42.179372][ T4373] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 42.191817][ T4373] EXT4-fs (loop4): mount failed [ 42.744958][ T4395] loop3: detected capacity change from 0 to 512 [ 42.755121][ T4395] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.434: corrupted in-inode xattr: invalid ea_ino [ 42.769120][ T4395] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.434: couldn't read orphan inode 12 (err -117) [ 42.781462][ T4395] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.798439][ T4395] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.434: Directory hole found for htree leaf block 0 [ 42.812390][ T4395] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.434: Directory hole found for htree leaf block 0 [ 42.826444][ T4395] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.434: Directory hole found for htree leaf block 0 [ 42.840848][ T4395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.434'. [ 42.861644][ T4395] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.434: Directory hole found for htree leaf block 0 [ 42.902110][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 42.902123][ T29] audit: type=1326 audit(1721646392.686:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.2.438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ca325e99 code=0x0 [ 42.936127][ T4395] sch_fq: defrate 0 ignored. [ 42.968375][ T3084] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 43.052740][ T4420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.098515][ T4420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.111693][ T4420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.122818][ T4420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.132127][ T4420] ref_ctr_offset mismatch. inode: 0x215 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 43.143794][ T4420] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 43.150404][ T4420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.157854][ T4420] vhci_hcd vhci_hcd.0: Device attached [ 43.172669][ T1502] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 43.185124][ T4438] loop4: detected capacity change from 0 to 512 [ 43.205306][ T4438] EXT4-fs (loop4): too many log groups per flexible block group [ 43.213003][ T4438] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 43.219900][ T4438] EXT4-fs (loop4): mount failed [ 43.349445][ T35] vhci_hcd: vhci_device speed not set [ 43.418378][ T35] usb 7-5: new full-speed USB device number 2 using vhci_hcd [ 43.790931][ T4452] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 43.906444][ T4436] vhci_hcd: connection reset by peer [ 43.913805][ T4047] vhci_hcd: stop threads [ 43.918056][ T4047] vhci_hcd: release socket [ 43.922465][ T4047] vhci_hcd: disconnect device [ 43.931057][ T4461] loop1: detected capacity change from 0 to 512 [ 43.974153][ T4461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.001576][ T29] audit: type=1326 audit(1721646393.818:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4464 comm="syz.4.462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41d6a35e99 code=0x0 [ 44.040230][ T4461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.062845][ T4461] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.096364][ T3559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.292716][ T29] audit: type=1326 audit(1721646394.128:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.0.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf4f885e99 code=0x0 [ 44.467731][ T4484] 9pnet_fd: Insufficient options for proto=fd [ 44.480441][ T29] audit: type=1400 audit(1721646394.313:311): avc: denied { create } for pid=4483 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 44.651173][ T29] audit: type=1400 audit(1721646394.499:312): avc: denied { write } for pid=4483 comm="syz.3.467" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.746054][ T4489] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 44.778141][ T29] audit: type=1400 audit(1721646394.623:313): avc: denied { getopt } for pid=4492 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.826324][ T4500] loop4: detected capacity change from 0 to 512 [ 44.833996][ T4500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.867405][ T4500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.879982][ T4500] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.898132][ T3095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.007249][ T29] audit: type=1400 audit(1721646394.860:314): avc: denied { block_suspend } for pid=4511 comm="syz.1.478" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.079787][ T4516] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 45.162751][ T29] audit: type=1326 audit(1721646395.015:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.4.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41d6a35e99 code=0x0 [ 45.306943][ T29] audit: type=1400 audit(1721646395.169:316): avc: denied { listen } for pid=4544 comm="syz.3.491" lport=37982 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.371085][ T29] audit: type=1400 audit(1721646395.200:317): avc: denied { accept } for pid=4544 comm="syz.3.491" lport=37982 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.193870][ T4608] loop2: detected capacity change from 0 to 1024 [ 46.207573][ T4608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.233078][ T4608] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 46.244715][ T4608] System zones: 0-1, 3-12 [ 46.254000][ T4608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.297183][ T4608] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 46.311647][ T4618] process 'syz.4.520' launched './file0' with NULL argv: empty string added [ 46.346487][ T4608] __nla_validate_parse: 4 callbacks suppressed [ 46.346499][ T4608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.516'. [ 46.406464][ T4608] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.417474][ T4632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4632 comm=syz.4.521 [ 46.419090][ T4608] vhci_hcd: invalid port number 23 [ 46.430688][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 46.443899][ T4632] netlink: 'syz.4.521': attribute type 5 has an invalid length. [ 46.454801][ T4632] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.463647][ T4632] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.472479][ T4632] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.481288][ T4632] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.493086][ T4632] vxlan0: entered promiscuous mode [ 46.527130][ T4608] hub 6-0:1.0: USB hub found [ 46.532355][ T4608] hub 6-0:1.0: 8 ports detected [ 46.566231][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.364270][ T4669] loop1: detected capacity change from 0 to 1024 [ 47.427885][ T4669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4669 comm=syz.1.539 [ 47.751461][ T4684] loop3: detected capacity change from 0 to 1024 [ 47.771364][ T4684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.781213][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 47.781225][ T29] audit: type=1400 audit(1721646397.725:333): avc: denied { mounton } for pid=4686 comm="syz.0.546" path="/116/file0" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 47.814513][ T4684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 47.823005][ T4684] System zones: 0-1, 3-12 [ 47.827835][ T4684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.855166][ T4684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.544'. [ 47.885309][ T4695] loop2: detected capacity change from 0 to 512 [ 47.892301][ T4695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.911161][ T4695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.919766][ T4684] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 47.923687][ T4695] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.932224][ T4684] vhci_hcd: invalid port number 23 [ 47.960926][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.001099][ T4684] hub 6-0:1.0: USB hub found [ 48.005818][ T4684] hub 6-0:1.0: 8 ports detected [ 48.027324][ T4700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4700 comm=syz.2.549 [ 48.041712][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 48.050735][ T4700] netlink: 'syz.2.549': attribute type 5 has an invalid length. [ 48.059914][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.070406][ T4700] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.079391][ T4700] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.088114][ T4700] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.097041][ T4700] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.106589][ T4700] vxlan0: entered promiscuous mode [ 48.133052][ T4706] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.154159][ T4706] loop1: detected capacity change from 0 to 512 [ 48.160707][ T4706] EXT4-fs: Ignoring removed bh option [ 48.167257][ T4706] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 48.176688][ T4706] EXT4-fs (loop1): 1 truncate cleaned up [ 48.187246][ T4706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.200594][ T29] audit: type=1400 audit(1721646398.158:334): avc: denied { create } for pid=4705 comm="syz.1.553" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.225458][ T29] audit: type=1400 audit(1721646398.158:335): avc: denied { read write open } for pid=4705 comm="syz.1.553" path="/42/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.248870][ T29] audit: type=1400 audit(1721646398.158:336): avc: denied { mounton } for pid=4705 comm="syz.1.553" path="/42/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.257422][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 48.302559][ T4711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 48.330592][ T35] usb 7-5: enqueue for inactive port 4 [ 48.336306][ T35] usb 7-5: enqueue for inactive port 4 [ 48.342691][ T4706] loop1: detected capacity change from 512 to 64 [ 48.358347][ T29] audit: type=1326 audit(1721646398.313:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41d6a35e99 code=0x0 [ 48.422691][ T35] vhci_hcd: vhci_device speed not set [ 48.448696][ T3559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.468020][ T29] audit: type=1400 audit(1721646398.395:338): avc: denied { unlink } for pid=3559 comm="syz-executor" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.490284][ T29] audit: type=1400 audit(1721646398.395:339): avc: denied { rmdir } for pid=3559 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.512936][ T29] audit: type=1400 audit(1721646398.395:340): avc: denied { unlink } for pid=3559 comm="syz-executor" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.646355][ T4734] loop3: detected capacity change from 0 to 1024 [ 48.662743][ T4734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.697233][ T4734] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 48.705548][ T4734] System zones: 0-1, 3-12 [ 48.711458][ T4734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.733718][ T4734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.562'. [ 48.780246][ T4743] loop1: detected capacity change from 0 to 1024 [ 48.794995][ T4734] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.807212][ T4743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4743 comm=syz.1.564 [ 48.832746][ T4734] vhci_hcd: invalid port number 23 [ 48.865931][ T4748] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.060959][ T4755] loop2: detected capacity change from 0 to 512 [ 49.104655][ T4755] EXT4-fs: Ignoring removed bh option [ 49.113664][ T4755] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 49.124668][ T4755] EXT4-fs (loop2): 1 truncate cleaned up [ 49.133071][ T4753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 49.134371][ T4755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.155099][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.211516][ T4748] loop2: detected capacity change from 512 to 64 [ 49.219889][ T4748] syz.2.565: attempt to access beyond end of device [ 49.219889][ T4748] loop2: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 49.233180][ T4748] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 49.244341][ T4748] Buffer I/O error on device loop2, logical block 36 [ 49.251238][ T4748] syz.2.565: attempt to access beyond end of device [ 49.251238][ T4748] loop2: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 49.264622][ T4748] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 49.275912][ T4748] Buffer I/O error on device loop2, logical block 255 [ 49.282762][ T4748] syz.2.565: attempt to access beyond end of device [ 49.282762][ T4748] loop2: rw=2049, sector=506, nr_sectors = 2 limit=64 [ 49.296024][ T4748] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 49.307255][ T4748] Buffer I/O error on device loop2, logical block 253 [ 49.333579][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.430822][ T4785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4785 comm=syz.3.576 [ 49.444991][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 49.453889][ T4785] netlink: 'syz.3.576': attribute type 5 has an invalid length. [ 49.481961][ T4785] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.490755][ T4785] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.499474][ T4785] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.508203][ T4785] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.517572][ T4785] vxlan0: entered promiscuous mode [ 49.536672][ T4788] loop0: detected capacity change from 0 to 1024 [ 49.543609][ T4788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.568185][ T4788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 49.616689][ T4788] System zones: 0-1, 3-12 [ 49.622159][ T4788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.635772][ T29] audit: type=1326 audit(1721646399.578:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4783 comm="syz.2.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ca325e99 code=0x0 [ 49.683894][ T4788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.578'. [ 49.747319][ T4788] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.755595][ T4788] vhci_hcd: invalid port number 23 [ 49.842606][ T4788] hub 6-0:1.0: USB hub found [ 49.847423][ T4788] hub 6-0:1.0: 8 ports detected [ 49.882275][ T3086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.923307][ T4813] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.941471][ T4813] loop0: detected capacity change from 0 to 512 [ 49.954514][ T4813] EXT4-fs: Ignoring removed bh option [ 49.967829][ T4813] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 49.977616][ T4813] EXT4-fs (loop0): 1 truncate cleaned up [ 49.983813][ T4813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.029204][ T4813] loop0: detected capacity change from 512 to 64 [ 50.040479][ T4813] syz.0.585: attempt to access beyond end of device [ 50.040479][ T4813] loop0: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 50.053681][ T4813] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 50.064881][ T4813] Buffer I/O error on device loop0, logical block 36 [ 50.074135][ T4813] syz.0.585: attempt to access beyond end of device [ 50.074135][ T4813] loop0: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 50.087452][ T4813] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 50.098678][ T4813] Buffer I/O error on device loop0, logical block 255 [ 50.105605][ T4813] syz.0.585: attempt to access beyond end of device [ 50.105605][ T4813] loop0: rw=2049, sector=506, nr_sectors = 2 limit=64 [ 50.118937][ T4813] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 50.130495][ T4813] Buffer I/O error on device loop0, logical block 253 [ 50.152425][ T3086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.327313][ T4825] loop1: detected capacity change from 0 to 1024 [ 50.495122][ T4825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4825 comm=syz.1.590 [ 50.524878][ T4844] loop2: detected capacity change from 0 to 1024 [ 50.545884][ T4844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.558347][ T4844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 50.566799][ T4844] System zones: 0-1, 3-12 [ 50.572063][ T4844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.643524][ T4844] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.651231][ T4844] vhci_hcd: invalid port number 23 [ 50.658818][ T4864] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 50.678886][ T4864] loop3: detected capacity change from 0 to 512 [ 50.685381][ T4864] EXT4-fs: Ignoring removed bh option [ 50.691748][ T4864] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 50.701218][ T4864] EXT4-fs (loop3): 1 truncate cleaned up [ 50.707256][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.722931][ T4844] hub 6-0:1.0: USB hub found [ 50.727896][ T4844] hub 6-0:1.0: 8 ports detected [ 50.755242][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.770370][ T4864] loop3: detected capacity change from 512 to 64 [ 50.779643][ T4869] syz.3.602: attempt to access beyond end of device [ 50.779643][ T4869] loop3: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 50.792828][ T4869] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 50.804002][ T4869] Buffer I/O error on device loop3, logical block 36 [ 50.811156][ T4869] syz.3.602: attempt to access beyond end of device [ 50.811156][ T4869] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 50.824407][ T4869] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 50.835648][ T4869] Buffer I/O error on device loop3, logical block 255 [ 50.871560][ T4869] syz.3.602: attempt to access beyond end of device [ 50.871560][ T4869] loop3: rw=2049, sector=506, nr_sectors = 2 limit=64 [ 50.884931][ T4869] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 50.896176][ T4869] Buffer I/O error on device loop3, logical block 253 [ 50.916668][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.017662][ T4876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4876 comm=syz.4.604 [ 51.033544][ T29] audit: type=1326 audit(1721646401.005:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.2.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ca325e99 code=0x0 [ 51.075643][ T4876] netlink: 'syz.4.604': attribute type 5 has an invalid length. [ 51.318809][ T4901] loop1: detected capacity change from 0 to 1024 [ 51.325389][ T4901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.337003][ T4901] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 51.345242][ T4901] System zones: 0-1, 3-12 [ 51.350322][ T4901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.365789][ T4907] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.379477][ T4901] __nla_validate_parse: 5 callbacks suppressed [ 51.379491][ T4901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.614'. [ 51.386359][ T4907] loop3: detected capacity change from 0 to 512 [ 51.403001][ T4907] EXT4-fs: Ignoring removed bh option [ 51.408810][ T4907] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 51.418299][ T4907] EXT4-fs (loop3): 1 truncate cleaned up [ 51.428163][ T4907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.441485][ T4901] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.451809][ T4901] vhci_hcd: invalid port number 23 [ 51.462313][ T4912] loop0: detected capacity change from 0 to 1024 [ 51.473777][ T4912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4912 comm=syz.0.617 [ 51.491566][ T4907] loop3: detected capacity change from 512 to 64 [ 51.496214][ T4901] hub 6-0:1.0: USB hub found [ 51.503403][ T4901] hub 6-0:1.0: 8 ports detected [ 51.505865][ T4907] syz.3.616: attempt to access beyond end of device [ 51.505865][ T4907] loop3: rw=2049, sector=72, nr_sectors = 2 limit=64 [ 51.521669][ T4907] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 51.532880][ T4907] Buffer I/O error on device loop3, logical block 36 [ 51.539904][ T4907] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 51.551253][ T4907] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 51.564370][ T3559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.637564][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.717496][ T4925] syzkaller0: entered promiscuous mode [ 51.723093][ T4925] syzkaller0: entered allmulticast mode [ 51.766064][ T4940] loop2: detected capacity change from 0 to 1024 [ 51.777636][ T4940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.792496][ T4940] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.807823][ T4940] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 51.810129][ T4944] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.820235][ T4940] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.820235][ T4940] [ 51.820251][ T4940] EXT4-fs (loop2): Total free blocks count 0 [ 51.820262][ T4940] EXT4-fs (loop2): Free/Dirty block details [ 51.849424][ T4940] EXT4-fs (loop2): free_blocks=68451041280 [ 51.849767][ T4944] loop1: detected capacity change from 0 to 512 [ 51.855252][ T4940] EXT4-fs (loop2): dirty_blocks=64 [ 51.855269][ T4940] EXT4-fs (loop2): Block reservation details [ 51.855278][ T4940] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 51.862584][ T4947] Direct I/O collision with buffered writes! File: /bus Comm: syz.2.629 [ 51.870312][ T4944] EXT4-fs: Ignoring removed bh option [ 51.890202][ T4940] syz.2.629 (4940) used greatest stack depth: 9672 bytes left [ 51.903372][ T4944] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 51.915389][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.929459][ T4944] EXT4-fs (loop1): 1 truncate cleaned up [ 51.943380][ T4944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.951844][ T4953] loop2: detected capacity change from 0 to 1024 [ 51.965031][ T4953] EXT4-fs: Ignoring removed nobh option [ 51.981967][ T4953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.992269][ T4959] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.003944][ T4953] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.028638][ T4944] loop1: detected capacity change from 512 to 64 [ 52.036020][ T4960] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 52.047517][ T4960] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 52.058981][ T4960] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 52.205417][ T4962] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.632' sets config #536870920 [ 52.231544][ T3559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.241669][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.342549][ T4976] syzkaller0: entered promiscuous mode [ 52.344486][ T4982] loop1: detected capacity change from 0 to 1024 [ 52.348032][ T4976] syzkaller0: entered allmulticast mode [ 52.391345][ T4982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.407132][ T4982] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 52.422152][ T4982] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 52.434532][ T4982] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.434532][ T4982] [ 52.444459][ T4982] EXT4-fs (loop1): Total free blocks count 0 [ 52.450677][ T4982] EXT4-fs (loop1): Free/Dirty block details [ 52.456628][ T4982] EXT4-fs (loop1): free_blocks=68451041280 [ 52.462684][ T4982] EXT4-fs (loop1): dirty_blocks=64 [ 52.466374][ T4995] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.467779][ T4982] EXT4-fs (loop1): Block reservation details [ 52.467791][ T4982] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 52.470121][ T4996] Direct I/O collision with buffered writes! File: /bus Comm: syz.1.643 [ 52.506060][ T4995] loop3: detected capacity change from 0 to 512 [ 52.514222][ T4995] EXT4-fs: Ignoring removed bh option [ 52.524812][ T5001] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.534076][ T3559] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.534887][ T4995] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.561598][ T4995] EXT4-fs (loop3): 1 truncate cleaned up [ 52.570739][ T4995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.579070][ T5006] loop4: detected capacity change from 0 to 1024 [ 52.593779][ T5006] EXT4-fs: Ignoring removed nobh option [ 52.614856][ T5004] loop1: detected capacity change from 0 to 1024 [ 52.625291][ T4995] loop3: detected capacity change from 512 to 64 [ 52.633817][ T4995] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 52.638441][ T5004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5004 comm=syz.1.650 [ 52.645857][ T4995] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 52.668708][ T4995] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 52.668907][ T5006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.700306][ T3084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.724519][ T5006] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.780088][ T5019] batadv0: entered promiscuous mode [ 52.790047][ T5019] batadv_slave_0: entered promiscuous mode [ 52.796137][ T5019] batadv_slave_0: left promiscuous mode [ 52.802041][ T5019] batadv0: left promiscuous mode [ 52.904085][ T5037] loop3: detected capacity change from 0 to 1024 [ 52.920868][ T5035] syzkaller0: entered promiscuous mode [ 52.926338][ T5035] syzkaller0: entered allmulticast mode [ 52.932231][ T5027] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.651' sets config #536870920 [ 52.955944][ T5037] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 52.981062][ T5037] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 52.993401][ T5037] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.993401][ T5037] [ 53.003259][ T5037] EXT4-fs (loop3): Total free blocks count 0 [ 53.009306][ T5037] EXT4-fs (loop3): Free/Dirty block details [ 53.015190][ T5037] EXT4-fs (loop3): free_blocks=68451041280 [ 53.021025][ T5037] EXT4-fs (loop3): dirty_blocks=64 [ 53.026145][ T5037] EXT4-fs (loop3): Block reservation details [ 53.032112][ T5037] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 53.039035][ T5042] Direct I/O collision with buffered writes! File: /bus Comm: syz.3.661 [ 53.051320][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 53.051333][ T29] audit: type=1400 audit(1721646403.124:382): avc: denied { ioctl } for pid=5040 comm="syz.4.662" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.097670][ T5045] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.120000][ T5045] loop3: detected capacity change from 0 to 512 [ 53.126508][ T5045] EXT4-fs: Ignoring removed bh option [ 53.132465][ T5045] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 53.141980][ T5045] EXT4-fs (loop3): 1 truncate cleaned up [ 53.148953][ T5048] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.193305][ T5045] loop3: detected capacity change from 512 to 64 [ 53.201421][ T5045] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 53.213237][ T5045] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 53.224548][ T5045] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 53.269402][ T5066] batadv0: entered promiscuous mode [ 53.275688][ T5066] batadv_slave_0: entered promiscuous mode [ 53.281716][ T5066] batadv_slave_0: left promiscuous mode [ 53.287614][ T5066] batadv0: left promiscuous mode [ 53.301946][ T5073] loop0: detected capacity change from 0 to 1024 [ 53.315417][ T5073] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.330385][ T5073] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 53.342682][ T5073] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.342682][ T5073] [ 53.352339][ T5073] EXT4-fs (loop0): Total free blocks count 0 [ 53.358296][ T5073] EXT4-fs (loop0): Free/Dirty block details [ 53.364911][ T5073] EXT4-fs (loop0): free_blocks=68451041280 [ 53.370751][ T5073] EXT4-fs (loop0): dirty_blocks=64 [ 53.376076][ T5073] EXT4-fs (loop0): Block reservation details [ 53.382092][ T5073] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 53.413744][ T5082] loop1: detected capacity change from 0 to 1024 [ 53.419158][ T5080] syzkaller0: entered promiscuous mode [ 53.425631][ T5080] syzkaller0: entered allmulticast mode [ 53.427621][ T5082] EXT4-fs: Ignoring removed nobh option [ 53.450358][ T5077] Direct I/O collision with buffered writes! File: /bus Comm: syz.0.673 [ 53.485797][ T29] audit: type=1326 audit(1721646403.563:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.499186][ T5092] usb usb1: usbfs: process 5092 (syz.4.680) did not claim interface 0 before use [ 53.509445][ T29] audit: type=1326 audit(1721646403.563:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.522753][ T5092] netlink: 56 bytes leftover after parsing attributes in process `syz.4.680'. [ 53.542210][ T29] audit: type=1326 audit(1721646403.563:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.542238][ T29] audit: type=1326 audit(1721646403.563:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.585630][ T5082] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.597934][ T29] audit: type=1326 audit(1721646403.563:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.628596][ T29] audit: type=1326 audit(1721646403.563:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.651903][ T29] audit: type=1326 audit(1721646403.563:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.659439][ T5094] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 53.675206][ T29] audit: type=1326 audit(1721646403.563:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb88ecb5e99 code=0x7ffc0000 [ 53.706177][ T29] audit: type=1326 audit(1721646403.563:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5088 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 53.742419][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.751415][ T5094] bond0: (slave team0): Enslaving as an active interface with an up link [ 53.761164][ T5092] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 53.776422][ T5092] bond0: (slave team0): Releasing backup interface [ 53.785992][ C0] hrtimer: interrupt took 27970 ns [ 53.796939][ T5092] bridge0: port 3(team0) entered blocking state [ 53.803419][ T5092] bridge0: port 3(team0) entered disabled state [ 53.810082][ T5097] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.675' sets config #536870920 [ 53.810357][ T5092] team0: entered allmulticast mode [ 53.825111][ T5092] team_slave_0: entered allmulticast mode [ 53.831083][ T5092] team_slave_1: entered allmulticast mode [ 53.842240][ T5092] team0: entered promiscuous mode [ 53.847556][ T5092] team_slave_0: entered promiscuous mode [ 53.853683][ T5092] team_slave_1: entered promiscuous mode [ 53.871331][ T5107] loop1: detected capacity change from 0 to 512 [ 53.884635][ T5109] loop2: detected capacity change from 0 to 1024 [ 53.893253][ T5109] EXT4-fs: Ignoring removed orlov option [ 53.898992][ T5109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.902725][ T5112] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.907909][ T5107] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.682: corrupted in-inode xattr: invalid ea_ino [ 53.926921][ T5107] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.682: couldn't read orphan inode 12 (err -117) [ 53.930723][ T5109] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.684: attempt to clear invalid blocks 1886221359 len 1 [ 53.952022][ T5107] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.682: Directory hole found for htree leaf block 0 [ 53.969640][ T5107] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.682: Directory hole found for htree leaf block 0 [ 53.991359][ T5121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.001169][ T5107] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.682: Directory hole found for htree leaf block 0 [ 54.017284][ T5119] batadv0: entered promiscuous mode [ 54.023338][ T5119] batadv_slave_0: entered promiscuous mode [ 54.029334][ T5119] batadv_slave_0: left promiscuous mode [ 54.035067][ T5119] batadv0: left promiscuous mode [ 54.044074][ T5107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.682'. [ 54.058362][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 54.065715][ T5107] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.682: Directory hole found for htree leaf block 0 [ 54.067422][ T5121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.686'. [ 54.097930][ T5107] sch_fq: defrate 0 ignored. [ 54.105276][ T5121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.115518][ T5121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.124749][ T5121] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.151968][ T5121] ref_ctr_offset mismatch. inode: 0x36c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 54.163641][ T5132] loop0: detected capacity change from 0 to 512 [ 54.174103][ T5121] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 54.180726][ T5121] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.188191][ T5121] vhci_hcd vhci_hcd.0: Device attached [ 54.208342][ T5132] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.213713][ T5140] loop1: detected capacity change from 0 to 1024 [ 54.232183][ T5140] EXT4-fs: Ignoring removed nobh option [ 54.246751][ T5135] vhci_hcd: connection closed [ 54.246939][ T50] vhci_hcd: stop threads [ 54.249988][ T5144] usb usb1: usbfs: process 5144 (syz.4.695) did not claim interface 0 before use [ 54.251670][ T50] vhci_hcd: release socket [ 54.258091][ T5144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.695'. [ 54.265032][ T50] vhci_hcd: disconnect device [ 54.285864][ T5132] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 54.294611][ T5140] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.329610][ T5148] loop3: detected capacity change from 0 to 1024 [ 54.339538][ T5148] EXT4-fs: Ignoring removed orlov option [ 54.345291][ T5148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.362537][ T5148] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #14: comm syz.3.696: attempt to clear invalid blocks 1886221359 len 1 [ 54.389755][ T5144] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 54.398001][ T5144] team0: left allmulticast mode [ 54.402956][ T5144] team_slave_0: left allmulticast mode [ 54.408461][ T5144] team_slave_1: left allmulticast mode [ 54.413965][ T5144] team0: left promiscuous mode [ 54.418770][ T5144] team_slave_0: left promiscuous mode [ 54.424203][ T5144] team_slave_1: left promiscuous mode [ 54.429891][ T5144] bridge0: port 3(team0) entered disabled state [ 54.438449][ T5144] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.447982][ T5144] bond0: (slave team0): Enslaving as an active interface with an up link [ 54.457051][ T5153] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 54.465592][ T5153] bond0: (slave team0): Releasing backup interface [ 54.475293][ T5153] bridge0: port 3(team0) entered blocking state [ 54.481689][ T5153] bridge0: port 3(team0) entered disabled state [ 54.488082][ T5153] team0: entered allmulticast mode [ 54.493185][ T5153] team_slave_0: entered allmulticast mode [ 54.497181][ T5149] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.694' sets config #536870920 [ 54.498986][ T5153] team_slave_1: entered allmulticast mode [ 54.516164][ T5153] team0: entered promiscuous mode [ 54.521313][ T5153] team_slave_0: entered promiscuous mode [ 54.527225][ T5153] team_slave_1: entered promiscuous mode [ 54.533316][ T5157] netlink: 'syz.3.697': attribute type 10 has an invalid length. [ 54.543752][ T5157] team0: Port device netdevsim1 added [ 54.594907][ T5161] 9pnet_fd: Insufficient options for proto=fd [ 54.626059][ T5165] batadv0: entered promiscuous mode [ 54.639388][ T5165] batadv_slave_0: entered promiscuous mode [ 54.645482][ T5165] batadv_slave_0: left promiscuous mode [ 54.651176][ T5165] batadv0: left promiscuous mode [ 54.695473][ T5180] loop4: detected capacity change from 0 to 256 [ 54.711822][ T5182] loop3: detected capacity change from 0 to 512 [ 54.719172][ T5182] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.734475][ T5182] EXT4-fs (loop3): 1 orphan inode deleted [ 54.740345][ T5182] EXT4-fs (loop3): 1 truncate cleaned up [ 54.750359][ T5182] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #12: block 7: comm syz.3.707: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 54.769178][ T5182] EXT4-fs (loop3): Remounting filesystem read-only [ 54.853906][ T5192] loop3: detected capacity change from 0 to 512 [ 54.879402][ T5192] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.970698][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 54.984396][ T5198] netlink: 244 bytes leftover after parsing attributes in process `syz.1.708'. [ 55.218755][ T5192] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 55.347651][ T5201] netlink: 'syz.2.711': attribute type 10 has an invalid length. [ 55.358785][ T5201] team0: Port device netdevsim1 added [ 55.372778][ T5204] usb usb1: usbfs: process 5204 (syz.0.712) did not claim interface 0 before use [ 55.382638][ T5204] netlink: 56 bytes leftover after parsing attributes in process `syz.0.712'. [ 55.405026][ T5204] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 55.432378][ T5204] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.449517][ T5204] bond0: (slave team0): Enslaving as an active interface with an up link [ 55.460393][ T5209] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 55.476341][ T5209] bond0: (slave team0): Releasing backup interface [ 55.492274][ T5209] bridge0: port 3(team0) entered blocking state [ 55.498689][ T5209] bridge0: port 3(team0) entered disabled state [ 55.506673][ T5209] team0: entered allmulticast mode [ 55.511831][ T5209] team_slave_0: entered allmulticast mode [ 55.517579][ T5209] team_slave_1: entered allmulticast mode [ 55.537473][ T5209] team0: entered promiscuous mode [ 55.542562][ T5209] team_slave_0: entered promiscuous mode [ 55.548274][ T5209] team_slave_1: entered promiscuous mode [ 55.714006][ T5232] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 55.751597][ T5234] loop2: detected capacity change from 0 to 512 [ 55.759900][ T5234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.785924][ T5234] EXT4-fs (loop2): 1 orphan inode deleted [ 55.791753][ T5234] EXT4-fs (loop2): 1 truncate cleaned up [ 55.803487][ T5234] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #12: block 7: comm syz.2.725: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 55.840008][ T5234] EXT4-fs (loop2): Remounting filesystem read-only [ 55.873071][ T5244] usb usb1: usbfs: process 5244 (syz.1.727) did not claim interface 0 before use [ 55.898433][ T5244] netlink: 56 bytes leftover after parsing attributes in process `syz.1.727'. [ 55.946042][ T5244] netlink: 'syz.1.727': attribute type 10 has an invalid length. [ 56.012869][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.026297][ T5244] bond0: (slave team0): Enslaving as an active interface with an up link [ 56.035977][ T5264] netlink: 'syz.1.727': attribute type 10 has an invalid length. [ 56.082562][ T5264] bond0: (slave team0): Releasing backup interface [ 56.107859][ T5264] bridge0: port 3(team0) entered blocking state [ 56.114158][ T5264] bridge0: port 3(team0) entered disabled state [ 56.121296][ T5264] team0: entered allmulticast mode [ 56.126442][ T5264] team_slave_0: entered allmulticast mode [ 56.132283][ T5264] team_slave_1: entered allmulticast mode [ 56.138706][ T5264] team0: entered promiscuous mode [ 56.143817][ T5264] team_slave_0: entered promiscuous mode [ 56.149683][ T5264] team_slave_1: entered promiscuous mode [ 56.332914][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 56.383859][ T5303] loop4: detected capacity change from 0 to 256 [ 56.565218][ T5321] loop3: detected capacity change from 0 to 736 [ 56.880905][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 56.934864][ T5334] tap0: tun_chr_ioctl cmd 1074025677 [ 56.941856][ T5334] tap0: linktype set to 270 [ 57.037485][ T5345] loop0: detected capacity change from 0 to 736 [ 57.060180][ T5346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 57.143390][ T5350] bond0: option mode: unable to set because the bond device has slaves [ 57.417909][ T5365] netlink: 184 bytes leftover after parsing attributes in process `syz.4.775'. [ 57.448201][ T5368] tap0: tun_chr_ioctl cmd 1074025677 [ 57.454041][ T5368] tap0: linktype set to 270 [ 57.559103][ T5376] loop3: detected capacity change from 0 to 736 [ 57.578974][ T5378] capability: warning: `syz.4.781' uses 32-bit capabilities (legacy support in use) [ 57.595564][ C0] eth0: bad gso: type: 1, size: 1408 [ 57.605226][ T5380] loop4: detected capacity change from 0 to 128 [ 57.620510][ C0] eth0: bad gso: type: 1, size: 1408 [ 57.832633][ T5388] loop2: detected capacity change from 0 to 256 [ 58.020424][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 58.020436][ T29] audit: type=1400 audit(1721646408.187:460): avc: denied { mounton } for pid=5394 comm="syz.0.788" path="/proc/364/task" dev="proc" ino=10240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 58.125098][ T5403] tap0: tun_chr_ioctl cmd 1074025677 [ 58.130827][ T5401] loop1: detected capacity change from 0 to 8192 [ 58.136325][ T5403] tap0: linktype set to 270 [ 58.313816][ T5410] loop1: detected capacity change from 0 to 128 [ 58.383533][ T5421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 58.405596][ T5423] loop1: detected capacity change from 0 to 2048 [ 58.412352][ T5423] EXT4-fs: Ignoring removed oldalloc option [ 58.419854][ T5423] EXT4-fs (loop1): invalid inodes per group: 63264 [ 58.419854][ T5423] [ 58.462722][ T5428] 9pnet_fd: Insufficient options for proto=fd [ 58.593486][ T5432] loop4: detected capacity change from 0 to 128 [ 58.614761][ T5434] netlink: 14 bytes leftover after parsing attributes in process `syz.4.805'. [ 58.671304][ C0] eth0: bad gso: type: 1, size: 1408 [ 58.695626][ T29] audit: type=1400 audit(1721646408.878:461): avc: denied { mount } for pid=5439 comm="syz.3.807" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.737612][ T5442] loop4: detected capacity change from 0 to 736 [ 58.856796][ T29] audit: type=1400 audit(1721646409.040:462): avc: denied { relabelfrom } for pid=5448 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.876598][ T29] audit: type=1400 audit(1721646409.040:463): avc: denied { relabelto } for pid=5448 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.897794][ T29] audit: type=1400 audit(1721646409.060:464): avc: denied { unmount } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.944880][ T5453] loop3: detected capacity change from 0 to 2048 [ 58.951833][ T5453] EXT4-fs: Ignoring removed oldalloc option [ 58.959269][ T5453] EXT4-fs (loop3): invalid inodes per group: 63264 [ 58.959269][ T5453] [ 58.979107][ T5455] loop2: detected capacity change from 0 to 512 [ 58.986532][ T5455] EXT4-fs (loop2): failed to initialize system zone (-117) [ 58.994028][ T5455] EXT4-fs (loop2): mount failed [ 59.048066][ T29] audit: type=1400 audit(1721646409.233:465): avc: denied { execute } for pid=5460 comm="syz.2.816" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 59.114681][ T5469] loop1: detected capacity change from 0 to 736 [ 59.116980][ C0] eth0: bad gso: type: 1, size: 1408 [ 59.140205][ C0] eth0: bad gso: type: 1, size: 1408 [ 59.370163][ T5476] usb usb1: usbfs: process 5476 (syz.0.822) did not claim interface 0 before use [ 59.383956][ T5479] loop1: detected capacity change from 0 to 512 [ 59.398383][ T5476] netlink: 56 bytes leftover after parsing attributes in process `syz.0.822'. [ 59.423933][ T5479] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.438586][ T5476] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 59.447563][ T5476] team0: left allmulticast mode [ 59.447666][ T5479] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 59.452520][ T5476] team_slave_0: left allmulticast mode [ 59.466643][ T5476] team_slave_1: left allmulticast mode [ 59.472270][ T5476] team0: left promiscuous mode [ 59.477188][ T5476] team_slave_0: left promiscuous mode [ 59.482924][ T5476] team_slave_1: left promiscuous mode [ 59.488917][ T5476] bridge0: port 3(team0) entered disabled state [ 59.500816][ T5476] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.511630][ T5476] bond0: (slave team0): Enslaving as an active interface with an up link [ 59.569740][ T5484] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 59.579556][ T5484] bond0: (slave team0): Releasing backup interface [ 59.594539][ T5484] bridge0: port 3(team0) entered blocking state [ 59.600902][ T5484] bridge0: port 3(team0) entered disabled state [ 59.607694][ T5484] team0: entered allmulticast mode [ 59.612960][ T5484] team_slave_0: entered allmulticast mode [ 59.618762][ T5484] team_slave_1: entered allmulticast mode [ 59.628297][ T5484] team0: entered promiscuous mode [ 59.633493][ T5484] team_slave_0: entered promiscuous mode [ 59.639441][ T5484] team_slave_1: entered promiscuous mode [ 59.686848][ T5489] netlink: 14 bytes leftover after parsing attributes in process `syz.0.826'. [ 59.719639][ T5491] loop0: detected capacity change from 0 to 256 [ 59.752436][ T5491] FAT-fs (loop0): Directory bread(block 64) failed [ 59.764709][ T29] audit: type=1400 audit(1721646409.963:466): avc: denied { accept } for pid=5494 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.773569][ T5491] FAT-fs (loop0): Directory bread(block 65) failed [ 59.791215][ T5491] FAT-fs (loop0): Directory bread(block 66) failed [ 59.797853][ T5491] FAT-fs (loop0): Directory bread(block 67) failed [ 59.804482][ T5491] FAT-fs (loop0): Directory bread(block 68) failed [ 59.811079][ T5491] FAT-fs (loop0): Directory bread(block 69) failed [ 59.817951][ T5491] FAT-fs (loop0): Directory bread(block 70) failed [ 59.824497][ T5491] FAT-fs (loop0): Directory bread(block 71) failed [ 59.835412][ T5491] FAT-fs (loop0): Directory bread(block 72) failed [ 59.849851][ T5491] FAT-fs (loop0): Directory bread(block 73) failed [ 59.878493][ T5500] netlink: 'syz.1.831': attribute type 7 has an invalid length. [ 59.886192][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 59.910440][ T5502] loop3: detected capacity change from 0 to 512 [ 59.943775][ T5502] EXT4-fs (loop3): failed to initialize system zone (-117) [ 59.973609][ T5502] EXT4-fs (loop3): mount failed [ 60.027581][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.833'. [ 60.094135][ T5517] loop3: detected capacity change from 0 to 8192 [ 60.359394][ T29] audit: type=1400 audit(1721646410.572:467): avc: denied { create } for pid=5535 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.370337][ T5538] loop3: detected capacity change from 0 to 256 [ 60.391022][ T29] audit: type=1400 audit(1721646410.572:468): avc: denied { ioctl } for pid=5535 comm="syz.4.845" path="socket:[11101]" dev="sockfs" ino=11101 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.405035][ T5538] FAT-fs (loop3): Directory bread(block 64) failed [ 60.422539][ T5538] FAT-fs (loop3): Directory bread(block 65) failed [ 60.429286][ T5538] FAT-fs (loop3): Directory bread(block 66) failed [ 60.435988][ T5538] FAT-fs (loop3): Directory bread(block 67) failed [ 60.442749][ T5538] FAT-fs (loop3): Directory bread(block 68) failed [ 60.449375][ T5538] FAT-fs (loop3): Directory bread(block 69) failed [ 60.455973][ T5538] FAT-fs (loop3): Directory bread(block 70) failed [ 60.462625][ T5538] FAT-fs (loop3): Directory bread(block 71) failed [ 60.469171][ T5538] FAT-fs (loop3): Directory bread(block 72) failed [ 60.475761][ T5538] FAT-fs (loop3): Directory bread(block 73) failed [ 60.529781][ T5541] hub 6-0:1.0: USB hub found [ 60.534439][ T5541] hub 6-0:1.0: 8 ports detected [ 60.858729][ T29] audit: type=1400 audit(1721646411.068:469): avc: denied { bind } for pid=5551 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.898038][ T5557] loop0: detected capacity change from 0 to 128 [ 60.987443][ T5568] loop0: detected capacity change from 0 to 8192 [ 61.038508][ T5568] loop0: p2 p3 p4 [ 61.042380][ T5568] loop0: p2 size 32768 extends beyond EOD, truncated [ 61.049795][ T5568] loop0: p3 size 16711680 extends beyond EOD, truncated [ 61.057409][ T5568] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 61.153651][ T2787] loop0: p2 p3 p4 [ 61.157663][ T2787] loop0: p2 size 32768 extends beyond EOD, truncated [ 61.164745][ T2787] loop0: p3 size 16711680 extends beyond EOD, truncated [ 61.172601][ T2787] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 61.195050][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.195184][ T3077] udevd[3077]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 61.204917][ T4154] udevd[4154]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 61.389492][ T5582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 61.403185][ T5582] veth5: entered promiscuous mode [ 61.408335][ T5582] veth5: entered allmulticast mode [ 61.697914][ T5595] loop1: detected capacity change from 0 to 128 [ 61.919027][ T5602] loop2: detected capacity change from 0 to 1024 [ 61.926394][ T5602] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.936997][ T5602] JBD2: no valid journal superblock found [ 61.942773][ T5602] EXT4-fs (loop2): Could not load journal inode [ 62.091925][ T5611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.873'. [ 62.106994][ T5611] veth3: entered promiscuous mode [ 62.112038][ T5611] veth3: entered allmulticast mode [ 62.120851][ T5610] macvlan2: entered promiscuous mode [ 62.126392][ T5610] vlan1: entered promiscuous mode [ 62.132322][ T5610] macvlan2: entered allmulticast mode [ 62.137755][ T5610] vlan1: entered allmulticast mode [ 62.142876][ T5610] veth0_vlan: entered allmulticast mode [ 62.148803][ T5610] team0: Port device macvlan2 added [ 62.310882][ T5618] loop0: detected capacity change from 0 to 2048 [ 62.432910][ T5625] loop3: detected capacity change from 0 to 256 [ 62.447406][ T5625] FAT-fs (loop3): Directory bread(block 64) failed [ 62.455457][ T5625] FAT-fs (loop3): Directory bread(block 65) failed [ 62.463489][ T5625] FAT-fs (loop3): Directory bread(block 66) failed [ 62.470123][ T5625] FAT-fs (loop3): Directory bread(block 67) failed [ 62.476968][ T5625] FAT-fs (loop3): Directory bread(block 68) failed [ 62.484622][ T5625] FAT-fs (loop3): Directory bread(block 69) failed [ 62.491461][ T5625] FAT-fs (loop3): Directory bread(block 70) failed [ 62.498108][ T5625] FAT-fs (loop3): Directory bread(block 71) failed [ 62.505864][ T5625] FAT-fs (loop3): Directory bread(block 72) failed [ 62.512544][ T5625] FAT-fs (loop3): Directory bread(block 73) failed [ 62.777514][ T5642] loop3: detected capacity change from 0 to 8192 [ 62.816873][ T5642] loop3: p2 p3 p4 [ 62.821019][ T5642] loop3: p2 size 32768 extends beyond EOD, truncated [ 62.829455][ T5642] loop3: p3 size 16711680 extends beyond EOD, truncated [ 62.837161][ T5642] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 63.038187][ T2787] loop3: p2 p3 p4 [ 63.042126][ T2787] loop3: p2 size 32768 extends beyond EOD, truncated [ 63.049512][ T2787] loop3: p3 size 16711680 extends beyond EOD, truncated [ 63.057092][ T2787] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 63.091289][ T4154] udevd[4154]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 63.094122][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 63.103377][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.127094][ T3077] udevd[3077]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 63.144741][ T4154] udevd[4154]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 63.158236][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.164692][ T5655] loop4: detected capacity change from 0 to 256 [ 63.185267][ T5655] FAT-fs (loop4): Directory bread(block 64) failed [ 63.205002][ T5655] FAT-fs (loop4): Directory bread(block 65) failed [ 63.214792][ T5655] FAT-fs (loop4): Directory bread(block 66) failed [ 63.221378][ T5655] FAT-fs (loop4): Directory bread(block 67) failed [ 63.228980][ T5655] FAT-fs (loop4): Directory bread(block 68) failed [ 63.235666][ T5655] FAT-fs (loop4): Directory bread(block 69) failed [ 63.243250][ T5655] FAT-fs (loop4): Directory bread(block 70) failed [ 63.249796][ T5655] FAT-fs (loop4): Directory bread(block 71) failed [ 63.251554][ T5657] loop3: detected capacity change from 0 to 8192 [ 63.257593][ T5655] FAT-fs (loop4): Directory bread(block 72) failed [ 63.270207][ T5655] FAT-fs (loop4): Directory bread(block 73) failed [ 63.355006][ T5666] loop0: detected capacity change from 0 to 128 [ 63.525617][ T5677] loop4: detected capacity change from 0 to 4096 [ 63.562754][ T5675] loop0: detected capacity change from 0 to 8192 [ 63.592345][ T5686] loop1: detected capacity change from 0 to 512 [ 63.617646][ T5675] loop0: p2 p3 p4 [ 63.621606][ T5675] loop0: p2 size 32768 extends beyond EOD, truncated [ 63.634236][ T5690] loop4: detected capacity change from 0 to 256 [ 63.645331][ T5675] loop0: p3 size 16711680 extends beyond EOD, truncated [ 63.656339][ T5675] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 63.663763][ T5692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'. [ 63.689651][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 63.689716][ T29] audit: type=1400 audit(1721646413.933:540): avc: denied { mount } for pid=5693 comm="syz.4.907" name="/" dev="ramfs" ino=12345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.721949][ T5694] syz.4.907[5694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.722064][ T5694] syz.4.907[5694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.722584][ T5692] veth5: entered promiscuous mode [ 63.744619][ T29] audit: type=1400 audit(1721646413.973:541): avc: denied { mounton } for pid=5693 comm="syz.4.907" path="/168/file0" dev="ramfs" ino=12345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 63.749656][ T5692] veth5: entered allmulticast mode [ 63.786354][ T29] audit: type=1400 audit(1721646414.034:542): avc: denied { unmount } for pid=3095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.829255][ T2787] loop0: p2 p3 p4 [ 63.833293][ T2787] loop0: p2 size 32768 extends beyond EOD, truncated [ 63.840975][ T2787] loop0: p3 size 16711680 extends beyond EOD, truncated [ 63.856608][ T2787] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 63.900005][ T3077] udevd[3077]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 63.955415][ T5712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.971370][ T5715] loop0: detected capacity change from 0 to 512 [ 63.982771][ T5712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 63.997200][ T5712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.916'. [ 64.008199][ T5712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.028793][ T5712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.051647][ T5712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 64.063059][ T5712] ref_ctr_offset mismatch. inode: 0x3af offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 64.087020][ T29] audit: type=1326 audit(1721646414.337:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.3.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb88ecb5e99 code=0x0 [ 64.106925][ T5723] loop0: detected capacity change from 0 to 8192 [ 64.119863][ T5712] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 64.126470][ T5712] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 64.126480][ T5721] loop1: detected capacity change from 0 to 8192 [ 64.140320][ T5712] vhci_hcd vhci_hcd.0: Device attached [ 64.154149][ T5724] vhci_hcd: connection closed [ 64.154290][ T55] vhci_hcd: stop threads [ 64.163268][ T55] vhci_hcd: release socket [ 64.167696][ T55] vhci_hcd: disconnect device [ 64.173399][ T5723] loop0: p2 p3 p4 [ 64.178019][ T5723] loop0: p2 size 32768 extends beyond EOD, truncated [ 64.208672][ T5723] loop0: p3 size 16711680 extends beyond EOD, truncated [ 64.221636][ T5723] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 64.235219][ T29] audit: type=1400 audit(1721646414.489:544): avc: denied { mounton } for pid=5720 comm="syz.0.921" path="/186/bus" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.284232][ T5728] ================================================================== [ 64.292330][ T5728] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 64.300850][ T5728] [ 64.303169][ T5728] write to 0xffff888108565538 of 8 bytes by task 5721 on cpu 1: [ 64.310878][ T5728] sync_mapping_buffers+0x162/0x7e0 [ 64.316081][ T5728] fat_file_fsync+0xad/0x100 [ 64.320688][ T5728] vfs_fsync_range+0x122/0x140 [ 64.325459][ T5728] generic_file_write_iter+0x191/0x1d0 [ 64.330926][ T5728] iter_file_splice_write+0x5e6/0x970 [ 64.336296][ T5728] direct_splice_actor+0x16c/0x2c0 [ 64.341415][ T5728] splice_direct_to_actor+0x305/0x670 [ 64.346793][ T5728] do_splice_direct+0xd7/0x150 [ 64.351558][ T5728] do_sendfile+0x3ab/0x950 [ 64.356056][ T5728] __x64_sys_sendfile64+0xbd/0x150 [ 64.361170][ T5728] x64_sys_call+0xfc3/0x2e00 [ 64.365771][ T5728] do_syscall_64+0xc9/0x1c0 [ 64.370275][ T5728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.376268][ T5728] [ 64.378591][ T5728] read to 0xffff888108565538 of 8 bytes by task 5728 on cpu 0: [ 64.386132][ T5728] mark_buffer_dirty_inode+0x96/0x1c0 [ 64.391520][ T5728] fat_mirror_bhs+0x241/0x330 [ 64.396206][ T5728] fat_ent_write+0xcc/0xe0 [ 64.400629][ T5728] fat_chain_add+0x15f/0x400 [ 64.405221][ T5728] fat_add_cluster+0x78/0xe0 [ 64.409819][ T5728] fat_fallocate+0x129/0x1d0 [ 64.414413][ T5728] vfs_fallocate+0x392/0x3e0 [ 64.419002][ T5728] do_vfs_ioctl+0x1481/0x1560 [ 64.423691][ T5728] __se_sys_ioctl+0x81/0x150 [ 64.428301][ T5728] __x64_sys_ioctl+0x43/0x50 [ 64.432900][ T5728] x64_sys_call+0x1688/0x2e00 [ 64.437594][ T5728] do_syscall_64+0xc9/0x1c0 [ 64.442110][ T5728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.448024][ T5728] [ 64.450343][ T5728] value changed: 0xffff888108472608 -> 0x0000000000000000 [ 64.457454][ T5728] [ 64.459779][ T5728] Reported by Kernel Concurrency Sanitizer on: [ 64.465936][ T5728] CPU: 0 UID: 0 PID: 5728 Comm: syz.1.919 Not tainted 6.10.0-syzkaller-11840-g933069701c1b #0 [ 64.476177][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.486226][ T5728] ================================================================== [ 64.553935][ T2787] loop0: p2 p3 p4 [ 64.557932][ T2787] loop0: p2 size 32768 extends beyond EOD, truncated [ 64.565315][ T2787] loop0: p3 size 16711680 extends beyond EOD, truncated [ 64.573710][ T2787] loop0: p4 size 3599499392 extends beyond EOD, truncated