last executing test programs: 4m1.408956502s ago: executing program 3 (id=4): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000f80)=ANY=[@ANYBLOB="380000002c000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0b0004ac2fdf79a4c03b3e34d7a2b33fa5bed25385b940c4"], 0x38}], 0x1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x9, 0xf5f8}}, './file0\x00'}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r12, 0xc0a85320, 0x0) close(r12) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x38, 0x26, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x8, 0xa}, {0x9, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c004}, 0x20008821) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffe0, 0xffe0}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="700000001a0001002abd7000fbdbdf250a200005fc0400050000000008001900", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="080010000100000008001900", @ANYRES32=r14, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x14010}, 0x4000000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlockall() 3m59.861243217s ago: executing program 3 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e654d4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 3m59.757344125s ago: executing program 3 (id=18): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 3m59.460253919s ago: executing program 3 (id=22): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0xa8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6", 0x21}], 0x1}, 0x20000884) 3m57.913336355s ago: executing program 1 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 3m57.900664126s ago: executing program 3 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x20, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x562, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040}, 0xc810) 3m57.900427885s ago: executing program 32 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x20, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x562, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040}, 0xc810) 3m57.827705512s ago: executing program 1 (id=34): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="3400000011000500000000000003000007000000", @ANYRES32, @ANYBLOB="010000000000000014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 3m57.766997526s ago: executing program 1 (id=35): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 3m57.670460265s ago: executing program 1 (id=36): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) lseek(r0, 0x1, 0x4) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 3m57.010960147s ago: executing program 1 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 3m56.578683653s ago: executing program 1 (id=44): fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x3b) close_range(r3, 0xffffffffffffffff, 0x0) 3m56.552317045s ago: executing program 33 (id=44): fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x3b) close_range(r3, 0xffffffffffffffff, 0x0) 3m52.120954773s ago: executing program 5 (id=100): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 3m51.812073628s ago: executing program 5 (id=104): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="3400000011000500000000000003000007000000", @ANYRES32, @ANYBLOB="010000000000000014001a80100004800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 3m51.262947052s ago: executing program 5 (id=109): ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) 3m51.102522145s ago: executing program 5 (id=112): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$eJzs3c9vI1cdAPCvZ+PEyaZNWnoARNulLSxotU7ibaOqBygnhFAlRI9FSkPiRFHsOIqd0oQ9pGeuSFTiBEf+AM49IXHkguDGpRyQ+BGBGiQORjOeZL1Zu4k2iR3Fn480mvfmeef7fZud99YviV8AI+tORBxExHhEvB8RM/n1Qn7E250jfd1nhw9Xjg4frhSi3X73n4WsPb0WXX8mdTu/ZykifvjdiB8Xnozb3NvfXK7Vqjt5fa5V355r7u3f36gvr1fXq1uVyuLC4vybD96oXFpfX66P56UXP/3DwTd/mqY1nV/p7sdl6nS9eBInNRYR37+KYENwK+/P+LAT4akkEfF8RLySPf8zcSv7agIAN1m7PRPtme46AHDTJdkaWCEp52sB05Ek5XJnDe+FmEpqjWbr3lpjd2u1s1Y2G8VkbaNWnc/XCmejWEjrC1n5Ub1yqv4gIp6LiJ9PTGb18kqjtjrM//gAwAi7fWr+/89EZ/4/04tLA8gOALgypWEnAAAMnPkfAEaP+R8ARo/5HwBGT2f+nxx2GgDAAHn/DwCjx/wPACPlB++8kx7to/zzr1c/2NvdbHxwf7Xa3CzXd1fKK42d7fJ6o7GefWZP/az71RqN7YXXY/fD2W9tN1tzzb39pXpjd6u1lH2u91K1mL3qYAA9AwD6ee7lT/5cSGfktyazI7r2cigONTPgqiXDTgAYmlvDTgAYGrt9wei6wHt8ywNwQ/TYovcxpV6/INRut9tXlxJwxe5+yfo/jKqu9X8/BQwjxvo/jC7r/zC62u3Ceff8j/O+EAC43qzxA32+//98fv5N/s2BH62efsXHV5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG/H+/+W873ApyNJyuWIZyJiNoqFtY1adT4ino2IP00UJ9L6wpBzBgAuKvlbId//6+7Ma9OPNb10+6Q4HhE/+eW7v/hwudXa+WPEeOFfE8fXWx/n1yuDzx4AONvxPJ2du97If3b4cOX4GGQ+f/9ORJQ68Y8Ox+PoJP5YjGXnUhQjYurfhbzeUehau7iIg48i4ou9+l+I6WwNpLPz6en4aexnBho/eSx+krV1zunfxRcuIRcYNZ+k48/bvZ6/JO5k597PfykboS4uH//SW60cZWPgo/jH49+tPuPfnfPGeP133+uUJp9s+yjiy2MRx7GPusaf4/iFPvFfO2f8v3zlpVf6tbV/FXE3esfvjjXXqm/PNff272/Ul9er69WtSmVxYXH+zQdvVObWNn5fnZ/rPxv84617z/ZrS/s/1Sd+6Yz+f+2c/f/1/95/76s9ro/l8b/xaq/4SbzwOfHTOfHr54y/PPXbUr+2NP5qn/6f9fW/d874n/51/4ltwwGA4Wnu7W8u12rVnYsX3stvmV2J5BLv/LSFUgwzusLlF9J/X9cgjZ6Fbw8q1nj0bvrZq50H8FRTu/1UsfqNGJex6gZcBycPfUT8d9jJAAAAAAAAAAAAAAAAPQ3iN5aG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABurv8HAAD//5B9y08=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) lseek(r0, 0x1, 0x4) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 3m50.752222544s ago: executing program 5 (id=129): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=r1}, 0x20) 3m49.667103762s ago: executing program 6 (id=142): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1808704, &(0x7f0000000500), 0xfd, 0x49f, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r1, 0x2008002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x1000000) 3m49.522617164s ago: executing program 5 (id=145): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288", 0x11}], 0x1}}], 0x1, 0x24044015) 3m49.522561683s ago: executing program 34 (id=145): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288", 0x11}], 0x1}}], 0x1, 0x24044015) 3m48.592998899s ago: executing program 6 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000000000000000000ff0000000001e00000020000000000000000000000004e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x4c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m46.274736426s ago: executing program 6 (id=168): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060"], 0xfdef) 3m46.177603054s ago: executing program 6 (id=173): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) lseek(r0, 0x1, 0x4) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 3m45.693775163s ago: executing program 6 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 3m45.096105761s ago: executing program 6 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c0002800600010002000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 3m45.095958902s ago: executing program 35 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c0002800600010002000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.660195444s ago: executing program 2 (id=3558): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001400010126bd7000fbdbdf250a2019ca", @ANYRES32, @ANYBLOB="0300"/18], 0x40}, 0x1, 0x0, 0x0, 0x44051}, 0x8004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.601634399s ago: executing program 2 (id=3559): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[0x0]) 2.491675458s ago: executing program 2 (id=3560): munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 2.441866722s ago: executing program 2 (id=3561): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 2.441711452s ago: executing program 2 (id=3562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a01010000000000000000070000060900010073797a1c5e0000000800024000000002140000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c080}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b40)={0x14, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}}, 0x4000) 2.441476082s ago: executing program 2 (id=3563): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) 2.163061995s ago: executing program 0 (id=3568): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 2.081085411s ago: executing program 0 (id=3569): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 1.089570702s ago: executing program 0 (id=3577): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) close(r1) 1.002206949s ago: executing program 0 (id=3579): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 943.386753ms ago: executing program 0 (id=3580): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$eJzs3c9uEmEQAPChpfwxHnozMTFZ40FPjfoENaYmRhKTGg56a2JP5QQX4NI+hq/ge/kApicu5jO4bEGgiERA9Pe7dLrzze4OG5a9MKTIfbn3KWq1Uuwdx3EMSnEYe1G4imnlmS0AwO4YpBRfU+73qz0HAMAuWuLz/9uGTwkAWLN37z+8edFonJxmWS3i+qrb7Dbzv3n+1evGydPsh8Nx1XW329y/yT/Lpp8dhvmDuDPKP8/rs5t0JSKalXjyKM8Pcy/fNrKf66vxcc29AwAAAAAAAAAAAAAAAAAAAADAtjyIrDB3vs/R0XS+Psrn/03MB5qa31OO+8V44PF4oHS5iaYAAAAAAAAAAAAAAAAAAABgx3R6/YuzVuu8PQ6qETG5pTxnze1BabTjpRZvP9iL1crrozZXOGhp9BKtt8H6/Iu7TBDlv+XqrBpkf2qH1eIyz6bqUVpQntIwmP8uKMZi3FpeiYjFJ/b4dNW+Biml1ueH7U4v0sLF43tEdWN3IwAAAAAAAAAAAAAAAAAA+L9NfOt7Rm1/G2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvX6fWLX/nvX5y1WuftTm/p4DIi7sYvFxfHOoja9hoFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn/Y9AAD//ybtHK4=") socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x23) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) ioprio_set$pid(0x1, 0x0, 0x2000) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x10, 0x8}, {0x8, 0x9}, {0x1, 0xf}}}, 0x24}}, 0x20040054) 576.494513ms ago: executing program 4 (id=3590): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000006}, 0x94) 529.077297ms ago: executing program 4 (id=3592): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x90000, r2, 0x1000000}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 453.773213ms ago: executing program 4 (id=3595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 390.451698ms ago: executing program 4 (id=3597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="69640b5f251511e28d78", 0xa}, {0x0}], 0x2, 0x204, 0xff, 0x4) 349.754401ms ago: executing program 8 (id=3598): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 304.106695ms ago: executing program 8 (id=3599): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xc) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x100000006) getdents(0xffffffffffffffff, 0x0, 0x0) 277.405997ms ago: executing program 4 (id=3600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a01010000000000000000070000060900010073797a1c5e0000000800024000000002140000001100"], 0x50}, 0x1, 0x0, 0x0, 0x2000c080}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b40)={0x14, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}}, 0x4000) 276.978067ms ago: executing program 7 (id=3601): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) close(r2) 258.647879ms ago: executing program 7 (id=3602): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000006}, 0x94) 248.901719ms ago: executing program 4 (id=3603): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 235.308071ms ago: executing program 8 (id=3604): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 234.882121ms ago: executing program 7 (id=3605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0, r1}, 0xc) 162.685496ms ago: executing program 8 (id=3606): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5219}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='signal_deliver\x00', r1}, 0x18) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x6d285c1d]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x14) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) 162.560996ms ago: executing program 7 (id=3607): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x90000, r2, 0x1000000}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 148.558887ms ago: executing program 8 (id=3608): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x6, 0x2406}) 87.527723ms ago: executing program 7 (id=3609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) 42.602926ms ago: executing program 8 (id=3610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="69640b5f251511e28d78", 0xa}, {0x0}], 0x2, 0x204, 0xff, 0x4) 33.471717ms ago: executing program 0 (id=3611): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14806, &(0x7f00000000c0)=ANY=[], 0x1, 0x70c, &(0x7f0000001500)="$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") utime(&(0x7f0000000180)='./file1\x00', 0x0) 0s ago: executing program 7 (id=3612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) kernel console output (not intermixed with test programs): 221.609002][T11515] lo speed is unknown, defaulting to 1000 [ 221.619656][T11517] netlink: 520 bytes leftover after parsing attributes in process `syz.8.2567'. [ 221.647269][T11519] netlink: 136 bytes leftover after parsing attributes in process `syz.8.2568'. [ 221.673808][T11521] tipc: Enabling of bearer rejected, failed to enable media [ 221.683689][T11521] syzkaller0: entered promiscuous mode [ 221.689318][T11521] syzkaller0: entered allmulticast mode [ 221.792307][T11537] loop4: detected capacity change from 0 to 512 [ 221.809167][T11537] EXT4-fs (loop4): 1 truncate cleaned up [ 221.815551][T11537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.830458][ T29] audit: type=1400 audit(1754397498.807:462): avc: denied { setattr } for pid=11536 comm="syz.4.2577" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.869084][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.887980][T11542] netlink: 520 bytes leftover after parsing attributes in process `syz.4.2579'. [ 222.021235][T11559] loop4: detected capacity change from 0 to 512 [ 222.052065][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2589'. [ 223.100494][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.109135][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.260608][T11616] loop7: detected capacity change from 0 to 512 [ 223.269438][T11616] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 223.281635][T11616] EXT4-fs (loop7): 1 truncate cleaned up [ 223.288183][T11616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.338756][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.430721][T11634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.713560][T11642] tipc: Enabled bearer , priority 0 [ 223.746375][T11642] syzkaller0: entered promiscuous mode [ 223.752164][T11642] syzkaller0: entered allmulticast mode [ 223.808955][T11642] tipc: Resetting bearer [ 223.841713][T11641] tipc: Resetting bearer [ 223.922596][T11649] usb usb8: usbfs: process 11649 (syz.2.2622) did not claim interface 0 before use [ 223.933497][T11641] tipc: Disabling bearer [ 223.991668][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.019497][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.038970][T11663] tipc: Enabling of bearer rejected, failed to enable media [ 224.053805][T11663] syzkaller0: entered promiscuous mode [ 224.059581][T11663] syzkaller0: entered allmulticast mode [ 224.070507][T11660] loop4: detected capacity change from 0 to 4096 [ 224.091122][T11670] tmpfs: Unknown parameter 'usrquota' [ 224.107583][T11660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.224057][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.255584][T11680] loop4: detected capacity change from 0 to 2048 [ 224.397695][T11680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.414542][T11680] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2638: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 224.433075][T11680] EXT4-fs (loop4): Remounting filesystem read-only [ 224.635466][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.794723][T11697] usb usb8: usbfs: process 11697 (syz.7.2643) did not claim interface 0 before use [ 225.070010][T11710] loop7: detected capacity change from 0 to 512 [ 225.081196][T11713] ip_vti0: entered allmulticast mode [ 225.087298][T11713] ip6tnl1: entered allmulticast mode [ 225.087621][T11710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.106503][T11710] ext4 filesystem being mounted at /455/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.120819][ T29] audit: type=1400 audit(1754398270.097:463): avc: denied { read } for pid=11709 comm="syz.7.2649" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 225.151889][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.412975][T11730] loop7: detected capacity change from 0 to 1764 [ 225.500596][T11739] gretap0: entered allmulticast mode [ 225.508727][T11739] ip_vti0: entered allmulticast mode [ 225.514139][T11739] ip6_vti0: entered allmulticast mode [ 225.521882][T11739] ip6tnl1: entered allmulticast mode [ 226.171301][T11758] loop7: detected capacity change from 0 to 512 [ 226.874632][ T29] audit: type=1400 audit(1754398271.859:464): avc: denied { create } for pid=11802 comm="syz.0.2688" name="shortname=lower,uni_xlate=1,shortname=lower,shortname=winnt,rodir," scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 226.937711][T11804] tipc: Enabled bearer , priority 0 [ 226.986257][T11804] tipc: Resetting bearer [ 227.319902][ T29] audit: type=1400 audit(1754398271.929:465): avc: denied { append } for pid=11805 comm="syz.0.2690" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.583813][ T3585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.676748][T11796] tipc: Disabling bearer [ 227.696708][T11838] lo: entered allmulticast mode [ 227.703770][T11838] tunl0: entered allmulticast mode [ 227.710566][T11838] gre0: entered allmulticast mode [ 227.719237][T11838] gretap0: entered allmulticast mode [ 227.726457][T11838] erspan0: entered allmulticast mode [ 227.734186][T11838] ip_vti0: entered allmulticast mode [ 227.739859][T11838] ip6_vti0: entered allmulticast mode [ 227.746867][T11838] sit0: entered allmulticast mode [ 227.755935][T11838] ip6tnl0: entered allmulticast mode [ 227.763294][T11838] ip6gre0: entered allmulticast mode [ 227.770825][T11838] ip6gretap0: entered allmulticast mode [ 227.778454][T11838] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.785760][T11838] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.793468][T11838] bridge0: entered allmulticast mode [ 227.800362][T11838] vcan0: entered allmulticast mode [ 227.806517][T11838] bond0: entered allmulticast mode [ 227.811661][T11838] bond_slave_0: entered allmulticast mode [ 227.817758][T11838] bond_slave_1: entered allmulticast mode [ 227.825622][T11838] team0: entered allmulticast mode [ 227.830893][T11838] team_slave_0: entered allmulticast mode [ 227.837217][T11838] team_slave_1: entered allmulticast mode [ 227.844963][T11838] dummy0: entered allmulticast mode [ 227.851730][T11838] nlmon0: entered allmulticast mode [ 227.858341][T11838] caif0: entered allmulticast mode [ 227.863780][T11838] batadv0: entered allmulticast mode [ 227.871006][T11838] vxcan0: entered allmulticast mode [ 227.877156][T11838] vxcan1: entered allmulticast mode [ 227.884418][T11838] wg0: entered allmulticast mode [ 227.890367][T11838] wg1: entered allmulticast mode [ 227.896754][T11838] wg2: entered allmulticast mode [ 227.902779][T11838] veth0_to_bridge: entered allmulticast mode [ 227.911573][T11838] veth1_to_bridge: entered allmulticast mode [ 227.920500][T11838] veth0_to_bond: entered allmulticast mode [ 227.928163][T11838] veth1_to_bond: entered allmulticast mode [ 227.936647][T11838] veth0_to_team: entered allmulticast mode [ 227.944880][T11838] veth1_to_team: entered allmulticast mode [ 227.952834][T11838] veth0_to_batadv: entered allmulticast mode [ 227.960008][T11838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.967596][T11838] batadv_slave_0: entered allmulticast mode [ 227.975019][T11838] veth1_to_batadv: entered allmulticast mode [ 227.982368][T11838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.990091][T11838] batadv_slave_1: entered allmulticast mode [ 227.997214][T11838] xfrm0: entered allmulticast mode [ 228.004328][T11838] veth0_to_hsr: entered allmulticast mode [ 228.011049][T11838] hsr_slave_0: entered allmulticast mode [ 228.018412][T11838] veth1_to_hsr: entered allmulticast mode [ 228.025257][T11838] hsr_slave_1: entered allmulticast mode [ 228.031853][T11838] hsr0: entered allmulticast mode [ 228.037850][T11838] veth1_virt_wifi: entered allmulticast mode [ 228.045301][T11838] veth0_virt_wifi: entered allmulticast mode [ 228.052977][T11838] veth1_vlan: entered allmulticast mode [ 228.059427][T11838] veth0_vlan: entered allmulticast mode [ 228.068070][T11838] vlan0: entered allmulticast mode [ 228.073373][T11838] vlan1: entered allmulticast mode [ 228.078897][T11838] macvlan0: entered allmulticast mode [ 228.086005][T11838] macvlan1: entered allmulticast mode [ 228.092352][T11838] ipvlan0: entered allmulticast mode [ 228.098067][T11838] ipvlan1: entered allmulticast mode [ 228.103766][T11838] veth1_macvtap: entered allmulticast mode [ 228.110552][T11838] veth0_macvtap: entered allmulticast mode [ 228.117755][T11838] macvtap0: entered allmulticast mode [ 228.124778][T11838] macsec0: entered allmulticast mode [ 228.131149][T11838] geneve0: entered allmulticast mode [ 228.138510][T11838] geneve1: entered allmulticast mode [ 228.145317][T11838] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 228.153662][T11838] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 228.162140][T11838] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 228.170826][T11838] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 228.178928][T11838] ipvlan2: entered allmulticast mode [ 228.184858][T11838] gretap1: entered allmulticast mode [ 228.190423][T11838] ipvlan3: entered allmulticast mode [ 228.196708][T11838] bond1: entered allmulticast mode [ 228.202257][T11838] bridge1: entered allmulticast mode [ 228.208499][T11838] ip6tnl1: entered allmulticast mode [ 228.213902][T11838] vxcan2: entered allmulticast mode [ 228.219165][T11838] vxcan3: entered allmulticast mode [ 228.226894][ T3585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.243194][ T3563] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.256212][ T3563] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.265295][ T3563] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.278794][ T3563] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.292938][ T3585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.420426][T11828] lo speed is unknown, defaulting to 1000 [ 228.451351][ T3585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.479547][T11856] loop7: detected capacity change from 0 to 1764 [ 228.534111][T11861] loop7: detected capacity change from 0 to 4096 [ 228.544754][T11861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.560145][ T3585] bridge_slave_1: left allmulticast mode [ 228.565903][ T3585] bridge_slave_1: left promiscuous mode [ 228.571738][ T3585] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.591547][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.604223][ T3585] bridge_slave_0: left allmulticast mode [ 228.609972][ T3585] bridge_slave_0: left promiscuous mode [ 228.615808][ T3585] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.677770][ T3585] bond1 (unregistering): (slave gretap2): Releasing active interface [ 228.764042][ T3585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.774358][ T3585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.784482][ T3585] bond0 (unregistering): Released all slaves [ 228.793607][ T3585] bond1 (unregistering): Released all slaves [ 228.805057][T11828] chnl_net:caif_netlink_parms(): no params data found [ 228.829085][ T3585] tipc: Left network mode [ 228.829099][T11875] __nla_validate_parse: 4 callbacks suppressed [ 228.829115][T11875] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2713'. [ 228.857810][ T3585] hsr_slave_0: left promiscuous mode [ 228.864550][ T3585] hsr_slave_1: left promiscuous mode [ 228.870392][ T3585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.878059][ T3585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.888152][ T3585] veth1_macvtap: left promiscuous mode [ 228.894014][ T3585] veth0_macvtap: left promiscuous mode [ 228.899651][ T3585] veth1_vlan: left promiscuous mode [ 228.905567][ T3585] veth0_vlan: left promiscuous mode [ 228.963624][ T3585] team0 (unregistering): Port device team_slave_1 removed [ 228.975002][ T3585] team0 (unregistering): Port device team_slave_0 removed [ 229.009351][ T3513] lo speed is unknown, defaulting to 1000 [ 229.015366][ T3513] infiniband syz0: ib_query_port failed (-19) [ 229.022481][T11880] tipc: Enabled bearer , priority 0 [ 229.034601][T11878] syzkaller0: entered promiscuous mode [ 229.040210][T11878] syzkaller0: entered allmulticast mode [ 229.047332][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.054738][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.062128][T11828] bridge_slave_0: entered allmulticast mode [ 229.068578][T11828] bridge_slave_0: entered promiscuous mode [ 229.075888][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.083115][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.090494][T11828] bridge_slave_1: entered allmulticast mode [ 229.097274][T11828] bridge_slave_1: entered promiscuous mode [ 229.113969][T11878] tipc: Resetting bearer [ 229.121384][T11828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.131402][T11877] tipc: Resetting bearer [ 229.139375][T11877] tipc: Disabling bearer [ 229.147585][T11828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.167553][T11828] team0: Port device team_slave_0 added [ 229.174124][T11828] team0: Port device team_slave_1 added [ 229.189777][T11828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.196879][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.223110][T11828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.234749][T11828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.241755][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.267837][T11828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.301292][T11828] hsr_slave_0: entered promiscuous mode [ 229.307374][T11828] hsr_slave_1: entered promiscuous mode [ 229.313471][T11828] debugfs: 'hsr0' already exists in 'hsr' [ 229.319372][T11828] Cannot create hsr debugfs directory [ 229.333904][ T3585] IPVS: stop unused estimator thread 0... [ 229.455839][T11895] loop8: detected capacity change from 0 to 512 [ 229.474361][T11895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.487897][T11895] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.493081][T11900] loop7: detected capacity change from 0 to 512 [ 229.504010][T11895] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 229.505008][ T29] audit: type=1400 audit(1754398274.491:466): avc: denied { link } for pid=11894 comm="syz.8.2719" name="file1" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 229.515318][T11895] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 229.548331][T11895] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2719: Failed to acquire dquot type 1 [ 229.564057][T11900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.577051][T11900] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.597839][ T4403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.609404][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.659044][T11912] loop7: detected capacity change from 0 to 128 [ 229.669223][T11908] loop8: detected capacity change from 0 to 4096 [ 229.674138][T11828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.686513][T11828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.690593][T11908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.709070][T11828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.720204][T11828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.727967][ T4403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.762272][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.766280][T11925] loop7: detected capacity change from 0 to 512 [ 229.769420][T11828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.777578][T11925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 229.783038][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.791466][T11925] System zones: 1-12 [ 229.798086][T11828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.802428][T11925] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.2728: Directory hole found for htree index block 0 [ 229.823245][T11925] EXT4-fs (loop7): Remounting filesystem read-only [ 229.831565][T11925] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 229.833226][T11828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.847563][T11925] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 229.856009][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.856263][T11925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.876863][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.896713][T11828] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.902645][T11925] EXT4-fs (loop7): shut down requested (2) [ 229.907647][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.916560][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.925139][ T29] audit: type=1400 audit(1754398274.912:467): avc: denied { read } for pid=2974 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 229.936874][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.947649][ T29] audit: type=1400 audit(1754398274.912:468): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.954591][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.976138][ T29] audit: type=1400 audit(1754398274.912:469): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.987876][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.005986][ T29] audit: type=1400 audit(1754398274.912:470): avc: denied { add_name } for pid=2974 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.034248][T11828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.046356][T11828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.089775][T11933] loop4: detected capacity change from 0 to 512 [ 230.114402][T11933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.138238][T11933] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.165353][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.177482][T11828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.290005][T11828] veth0_vlan: entered promiscuous mode [ 230.303597][T11969] netlink: 71 bytes leftover after parsing attributes in process `syz.7.2743'. [ 230.322897][T11828] veth1_vlan: entered promiscuous mode [ 230.338903][T11828] veth0_macvtap: entered promiscuous mode [ 230.349881][T11828] veth1_macvtap: entered promiscuous mode [ 230.395247][T11828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.406728][T11828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.428039][ T3563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.438876][ T3563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.448485][ T3563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.463764][ T3563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.489756][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 230.489773][ T29] audit: type=1400 audit(1754398275.462:474): avc: denied { mount } for pid=11828 comm="syz-executor" name="/" dev="gadgetfs" ino=3783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 230.537887][T11992] loop7: detected capacity change from 0 to 512 [ 230.548854][T11992] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2752: bg 0: block 5: invalid block bitmap [ 230.570640][T11992] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 230.585719][T11992] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2752: invalid indirect mapped block 3 (level 2) [ 230.610239][T11992] EXT4-fs (loop7): 2 truncates cleaned up [ 230.616499][T11992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.686473][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.850985][T12005] Process accounting resumed [ 230.862729][T12027] tipc: Started in network mode [ 230.867657][T12027] tipc: Node identity 568f45d99a55, cluster identity 4711 [ 230.874939][T12027] tipc: Enabled bearer , priority 0 [ 230.882985][T12027] syzkaller0: entered promiscuous mode [ 230.888699][T12027] syzkaller0: entered allmulticast mode [ 230.897787][T12028] syz.2.2756: attempt to access beyond end of device [ 230.897787][T12028] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 230.924915][T12024] tipc: Resetting bearer [ 230.934533][T12024] tipc: Disabling bearer [ 230.946481][T12032] ip_vti0: left allmulticast mode [ 231.026077][T12037] loop7: detected capacity change from 0 to 1024 [ 231.037128][T12037] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.051923][T12037] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 231.061920][T12037] EXT4-fs (loop7): orphan cleanup on readonly fs [ 231.069064][T12037] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz.7.2769: Invalid inode table block 0 in block_group 0 [ 231.084694][T12037] EXT4-fs (loop7): Remounting filesystem read-only [ 231.091403][T12037] Quota error (device loop7): write_blk: dquota write failed [ 231.098840][T12037] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 231.110452][T12037] EXT4-fs (loop7): 1 truncate cleaned up [ 231.120842][T12037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.137483][T12037] EXT4-fs (loop7): shut down requested (0) [ 231.213642][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.256598][T12048] usb usb8: usbfs: process 12048 (syz.8.2771) did not claim interface 0 before use [ 231.580588][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.662394][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.898414][T12062] loop7: detected capacity change from 0 to 512 [ 231.906349][T12060] loop4: detected capacity change from 0 to 512 [ 231.915671][T12060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 231.924300][T12060] System zones: 1-12 [ 231.929159][T12062] EXT4-fs: Ignoring removed nobh option [ 231.935571][T12060] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2778: Directory hole found for htree index block 0 [ 231.950229][T12060] EXT4-fs (loop4): Remounting filesystem read-only [ 231.956784][T12060] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 231.965117][T12060] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 231.969390][T12062] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.2779: corrupted inode contents [ 231.973776][T12060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.006086][T12062] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.2779: mark_inode_dirty error [ 232.021280][T12062] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.2779: corrupted inode contents [ 232.034764][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.045797][T12062] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.2779: mark_inode_dirty error [ 232.058002][T12062] Quota error (device loop7): write_blk: dquota write failed [ 232.067429][T12062] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 232.094308][T12062] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2779: Failed to acquire dquot type 0 [ 232.107548][T12062] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2779: corrupted inode contents [ 232.122511][T12062] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.2779: mark_inode_dirty error [ 232.135328][T12062] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2779: corrupted inode contents [ 232.168642][T12062] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2779: mark_inode_dirty error [ 232.182696][T12062] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2779: corrupted inode contents [ 232.198602][T12062] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 232.209190][T12062] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2779: corrupted inode contents [ 232.222130][T12062] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.2779: mark_inode_dirty error [ 232.235027][T12062] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 232.260120][T12062] EXT4-fs (loop7): 1 truncate cleaned up [ 232.266403][T12062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.281055][T12062] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.345161][T12062] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.2779: iget: bad i_size value: 360287970189639690 [ 232.381602][T12062] EXT4-fs (loop7): shut down requested (0) [ 232.464066][ T3554] bridge_slave_1: left promiscuous mode [ 232.469917][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.483225][ T3554] bridge_slave_0: left promiscuous mode [ 232.489023][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.572717][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.595574][ T3554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.629634][ T3554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.639366][ T3554] bond0 (unregistering): Released all slaves [ 232.651971][ T3554] bond1 (unregistering): Released all slaves [ 232.714851][ T3554] tipc: Disabling bearer [ 232.719944][ T3554] tipc: Left network mode [ 232.732455][T12091] loop7: detected capacity change from 0 to 8192 [ 232.747953][T12091] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.761337][T12072] chnl_net:caif_netlink_parms(): no params data found [ 232.826343][ T3554] hsr_slave_0: left promiscuous mode [ 232.837265][ T3554] hsr_slave_1: left promiscuous mode [ 232.849891][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.900142][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.082966][ T3554] team0 (unregistering): Port device team_slave_1 removed [ 233.121213][ T3554] team0 (unregistering): Port device team_slave_0 removed [ 233.212714][ T29] audit: type=1400 audit(1754398278.175:475): avc: denied { watch watch_reads } for pid=12114 comm="syz.0.2794" path="/11/file0" dev="mqueue" ino=33455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 233.356999][T12072] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.364242][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.401404][T12072] bridge_slave_0: entered allmulticast mode [ 233.408006][T12072] bridge_slave_0: entered promiscuous mode [ 233.415143][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.422269][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.429618][T12072] bridge_slave_1: entered allmulticast mode [ 233.436306][T12072] bridge_slave_1: entered promiscuous mode [ 233.449709][T12127] loop4: detected capacity change from 0 to 128 [ 233.463332][T12072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.476081][T12072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.502163][T12072] team0: Port device team_slave_0 added [ 233.512825][T12132] tipc: Enabled bearer , priority 0 [ 233.520367][T12072] team0: Port device team_slave_1 added [ 233.526815][T12132] syzkaller0: entered promiscuous mode [ 233.532620][T12132] syzkaller0: entered allmulticast mode [ 233.549960][T12072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.557190][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.583810][T12072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.597128][T12130] tipc: Resetting bearer [ 233.605011][T12130] tipc: Disabling bearer [ 233.612814][T12072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.619887][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.646592][T12072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.658468][ T3554] IPVS: stop unused estimator thread 0... [ 233.725327][T12072] hsr_slave_0: entered promiscuous mode [ 233.734395][T12072] hsr_slave_1: entered promiscuous mode [ 233.740466][T12072] debugfs: 'hsr0' already exists in 'hsr' [ 233.746511][T12072] Cannot create hsr debugfs directory [ 233.759824][T12151] netlink: 'syz.8.2808': attribute type 12 has an invalid length. [ 233.767780][T12151] netlink: 'syz.8.2808': attribute type 29 has an invalid length. [ 233.775708][T12151] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2808'. [ 233.785235][T12151] netlink: 'syz.8.2808': attribute type 2 has an invalid length. [ 233.793192][T12151] netlink: 'syz.8.2808': attribute type 3 has an invalid length. [ 233.896400][T12164] tipc: Enabling of bearer rejected, failed to enable media [ 233.929140][T12169] loop4: detected capacity change from 0 to 128 [ 234.179633][T12072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.190401][T12072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.205944][T12072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.221025][T12072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.546214][T12072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.623119][T12072] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.689065][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.696231][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.719853][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.727063][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.772051][T12191] loop7: detected capacity change from 0 to 1024 [ 234.781660][T12191] EXT4-fs: Ignoring removed orlov option [ 234.818391][T12191] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 234.886549][T12072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.075359][T12072] veth0_vlan: entered promiscuous mode [ 235.180029][T12072] veth1_vlan: entered promiscuous mode [ 235.197756][T12072] veth0_macvtap: entered promiscuous mode [ 235.205676][T12072] veth1_macvtap: entered promiscuous mode [ 235.216969][T12191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.269723][T12072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.307020][ T29] audit: type=1400 audit(1754398280.277:476): avc: denied { rename } for pid=12190 comm="syz.7.2819" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.410285][T12072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.462771][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.510206][ T3571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.605035][ T3571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.647443][ T3571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.667624][T12216] loop4: detected capacity change from 0 to 8192 [ 235.676582][T12219] loop7: detected capacity change from 0 to 512 [ 235.680876][ T3571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.694267][T12216] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.709669][T12219] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.2824: corrupted in-inode xattr: invalid ea_ino [ 235.765897][T12219] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2824: couldn't read orphan inode 15 (err -117) [ 235.806005][T12230] tipc: Enabling of bearer rejected, failed to enable media [ 235.812614][T12219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.817224][T12229] loop4: detected capacity change from 0 to 128 [ 235.910555][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.196299][T12263] gretap0: left allmulticast mode [ 236.201619][T12263] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2838'. [ 236.225382][T12265] loop8: detected capacity change from 0 to 512 [ 236.247638][T12265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.274937][T12265] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.381883][ T4403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.549704][T12292] loop4: detected capacity change from 0 to 512 [ 236.588940][T12296] tipc: Started in network mode [ 236.593889][T12296] tipc: Node identity 265aed0ee93b, cluster identity 4711 [ 236.601238][T12296] tipc: Enabled bearer , priority 0 [ 236.610321][T12298] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2850'. [ 236.624228][T12296] tipc: Resetting bearer [ 236.637996][T12295] tipc: Disabling bearer [ 236.638707][T12301] No control pipe specified [ 236.912973][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2861'. [ 236.948506][T12324] tipc: Enabled bearer , priority 0 [ 236.963790][T12324] tipc: Resetting bearer [ 236.974381][T12323] tipc: Disabling bearer [ 237.702239][T12365] usb usb8: usbfs: process 12365 (syz.8.2880) did not claim interface 0 before use [ 237.846219][T12383] loop8: detected capacity change from 0 to 512 [ 237.865453][T12383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.878539][T12383] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.903634][T12383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.912400][T12383] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 237.923293][T12383] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 237.942034][ T4403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.974151][T12391] tipc: Enabling of bearer rejected, failed to enable media [ 238.026368][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2892'. [ 238.354508][T12408] usb usb8: usbfs: process 12408 (syz.7.2893) did not claim interface 0 before use [ 238.384687][T12410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2897'. [ 238.455577][T12414] loop4: detected capacity change from 0 to 512 [ 238.534832][T12414] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2899: casefold flag without casefold feature [ 238.615458][T12414] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2899: couldn't read orphan inode 15 (err -117) [ 238.694953][T12414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.726027][T12424] loop7: detected capacity change from 0 to 512 [ 238.732930][T12424] EXT4-fs: Ignoring removed nobh option [ 238.744011][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.776579][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.785249][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.799334][T12424] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.2902: corrupted inode contents [ 238.814015][T12424] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.2902: mark_inode_dirty error [ 238.826688][T12424] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.2902: corrupted inode contents [ 238.839716][T12424] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.2902: mark_inode_dirty error [ 238.852686][T12424] Quota error (device loop7): write_blk: dquota write failed [ 238.860332][T12424] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 238.870878][T12424] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2902: Failed to acquire dquot type 0 [ 238.884016][T12424] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2902: corrupted inode contents [ 238.896709][T12424] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.2902: mark_inode_dirty error [ 238.908873][T12424] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2902: corrupted inode contents [ 238.921888][T12424] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2902: mark_inode_dirty error [ 238.934563][T12424] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2902: corrupted inode contents [ 238.946979][T12424] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 238.956308][T12424] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2902: corrupted inode contents [ 238.968983][T12424] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.2902: mark_inode_dirty error [ 238.980652][T12424] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 238.990769][T12424] EXT4-fs (loop7): 1 truncate cleaned up [ 238.996948][T12424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.010130][T12424] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.015455][T12442] loop4: detected capacity change from 0 to 512 [ 239.024442][T12424] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.2902: iget: bad i_size value: 360287970189639690 [ 239.045851][T12424] EXT4-fs (loop7): shut down requested (0) [ 239.064494][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.086622][T12444] loop7: detected capacity change from 0 to 512 [ 239.244726][T12444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.257988][T12444] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.302912][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.359993][T12452] syz.4.2912: attempt to access beyond end of device [ 239.359993][T12452] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 239.856900][T12468] netlink: 'syz.0.2921': attribute type 4 has an invalid length. [ 239.879075][T12468] netlink: 'syz.0.2921': attribute type 4 has an invalid length. [ 239.892218][T12470] loop8: detected capacity change from 0 to 512 [ 239.919622][ T29] audit: type=1400 audit(1754398284.911:477): avc: denied { mounton } for pid=12469 comm="syz.8.2922" path="/588/file0/file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 239.975578][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.994800][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.036234][T12481] usb usb8: usbfs: process 12481 (syz.7.2913) did not claim interface 0 before use [ 240.052778][T12483] loop4: detected capacity change from 0 to 512 [ 240.061447][T12485] lo: entered allmulticast mode [ 240.068581][T12485] tunl0: entered allmulticast mode [ 240.074870][T12483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 240.076866][T12485] gre0: entered allmulticast mode [ 240.091616][T12483] System zones: 1-12 [ 240.095799][T12485] gretap0: entered allmulticast mode [ 240.095928][T12483] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.2928: Directory hole found for htree index block 0 [ 240.114257][T12485] erspan0: entered allmulticast mode [ 240.114363][T12483] EXT4-fs (loop4): Remounting filesystem read-only [ 240.123302][T12485] ip_vti0: entered allmulticast mode [ 240.126271][T12483] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 240.140329][T12483] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 240.142860][T12485] ip6_vti0: entered allmulticast mode [ 240.149313][T12483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.158922][T12485] sit0: entered allmulticast mode [ 240.176406][T12485] ip6tnl0: entered allmulticast mode [ 240.184107][T12485] ip6gre0: entered allmulticast mode [ 240.192693][T12485] syz_tun: entered allmulticast mode [ 240.199156][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.208560][T12485] ip6gretap0: entered allmulticast mode [ 240.216647][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.224153][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.232061][T12485] bridge0: entered allmulticast mode [ 240.238095][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2930'. [ 240.239615][T12485] vcan0: entered allmulticast mode [ 240.253155][T12485] bond0: entered allmulticast mode [ 240.258502][T12485] bond_slave_0: entered allmulticast mode [ 240.264729][T12485] bond_slave_1: entered allmulticast mode [ 240.273442][T12485] team0: entered allmulticast mode [ 240.278619][T12485] team_slave_0: entered allmulticast mode [ 240.284474][T12485] team_slave_1: entered allmulticast mode [ 240.292357][T12485] dummy0: entered allmulticast mode [ 240.299676][T12485] nlmon0: entered allmulticast mode [ 240.305815][T12485] caif0: entered allmulticast mode [ 240.311916][T12485] batadv0: entered allmulticast mode [ 240.318813][T12485] vxcan0: entered allmulticast mode [ 240.324917][T12485] vxcan1: entered allmulticast mode [ 240.331835][T12485] veth0: entered allmulticast mode [ 240.338996][T12485] veth1: entered allmulticast mode [ 240.345636][T12485] wg0: entered allmulticast mode [ 240.352222][T12485] wg1: entered allmulticast mode [ 240.358256][T12485] wg2: entered allmulticast mode [ 240.364320][T12485] veth0_to_bridge: entered allmulticast mode [ 240.372733][T12485] veth1_to_bridge: entered allmulticast mode [ 240.381928][T12485] veth0_to_bond: entered allmulticast mode [ 240.389830][T12485] veth1_to_bond: entered allmulticast mode [ 240.398494][T12485] veth0_to_team: entered allmulticast mode [ 240.407382][T12485] veth1_to_team: entered allmulticast mode [ 240.415875][T12485] veth0_to_batadv: entered allmulticast mode [ 240.423070][T12485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.430547][T12485] batadv_slave_0: entered allmulticast mode [ 240.437724][T12485] veth1_to_batadv: entered allmulticast mode [ 240.446469][T12485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.453907][T12485] batadv_slave_1: entered allmulticast mode [ 240.461168][T12485] xfrm0: entered allmulticast mode [ 240.467239][T12485] veth0_to_hsr: entered allmulticast mode [ 240.474262][T12485] hsr_slave_0: entered allmulticast mode [ 240.480923][T12485] veth1_to_hsr: entered allmulticast mode [ 240.487896][T12485] hsr_slave_1: entered allmulticast mode [ 240.494906][T12485] hsr0: entered allmulticast mode [ 240.504157][T12485] veth1_virt_wifi: entered allmulticast mode [ 240.512743][T12485] veth0_virt_wifi: entered allmulticast mode [ 240.519889][T12485] veth1_vlan: entered allmulticast mode [ 240.526725][T12485] veth0_vlan: entered allmulticast mode [ 240.535879][T12485] vlan0: entered allmulticast mode [ 240.541265][T12485] vlan1: entered allmulticast mode [ 240.546791][T12485] macvlan0: entered allmulticast mode [ 240.557503][T12485] macvlan1: entered allmulticast mode [ 240.564961][T12485] ipvlan0: entered allmulticast mode [ 240.570429][T12485] ipvlan1: entered allmulticast mode [ 240.578630][T12485] veth1_macvtap: entered allmulticast mode [ 240.586256][T12485] veth0_macvtap: entered allmulticast mode [ 240.593386][T12485] macvtap0: entered allmulticast mode [ 240.600379][T12485] macsec0: entered allmulticast mode [ 240.604368][T12506] loop8: detected capacity change from 0 to 512 [ 240.613539][T12485] geneve0: entered allmulticast mode [ 240.620006][T12485] geneve1: entered allmulticast mode [ 240.626562][T12485] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 240.637868][T12506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.651745][T12485] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 240.659439][T12506] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.671145][T12485] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 240.679884][T12485] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 240.694393][ T4403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.699824][T12494] tipc: Enabled bearer , priority 0 [ 240.711257][T12495] syzkaller0: entered promiscuous mode [ 240.716871][T12495] syzkaller0: entered allmulticast mode [ 240.730790][ T3554] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.741169][T12507] tipc: Resetting bearer [ 240.748876][ T3554] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.758662][ T29] audit: type=1400 audit(1754398285.752:478): avc: denied { remount } for pid=12514 comm="syz.2.2935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.779464][T12490] tipc: Resetting bearer [ 240.788266][T12490] tipc: Disabling bearer [ 240.806178][ T3554] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.815422][ T3554] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.898611][T12524] loop4: detected capacity change from 0 to 128 [ 240.913761][T12524] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.936917][T12524] ext4 filesystem being mounted at /502/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.957611][T12532] loop8: detected capacity change from 0 to 512 [ 240.964912][T12532] EXT4-fs: Ignoring removed nobh option [ 240.974776][T12524] No control pipe specified [ 240.974867][ T29] audit: type=1400 audit(1754398285.962:479): avc: denied { mounton } for pid=12521 comm="syz.4.2939" path="/502/mnt/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 241.025486][T12532] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.2943: corrupted inode contents [ 241.060573][T12536] syz.2.2937: attempt to access beyond end of device [ 241.060573][T12536] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 241.074081][T12532] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.2943: mark_inode_dirty error [ 241.098979][T12537] usb usb8: usbfs: process 12537 (syz.7.2940) did not claim interface 0 before use [ 241.169301][T12540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.176711][T12540] IPv6: NLM_F_CREATE should be set when creating new route [ 241.185135][T12532] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.2943: corrupted inode contents [ 241.197330][T12540] lo: entered allmulticast mode [ 241.197965][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.216041][T12540] tunl0: entered allmulticast mode [ 241.223016][T12540] gre0: entered allmulticast mode [ 241.232772][T12540] gretap0: entered allmulticast mode [ 241.242060][T12532] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.2943: mark_inode_dirty error [ 241.255608][T12532] Quota error (device loop8): write_blk: dquota write failed [ 241.263921][T12532] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 241.275107][T12540] erspan0: entered allmulticast mode [ 241.283675][T12540] ip_vti0: entered allmulticast mode [ 241.289212][T12532] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2943: Failed to acquire dquot type 0 [ 241.302881][T12540] ip6_vti0: entered allmulticast mode [ 241.315093][T12540] sit0: entered allmulticast mode [ 241.323180][T12532] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2943: corrupted inode contents [ 241.324706][T12540] ip6tnl0: entered allmulticast mode [ 241.343083][T12540] ip6gre0: entered allmulticast mode [ 241.348525][T12545] loop4: detected capacity change from 0 to 512 [ 241.358666][T12532] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.2943: mark_inode_dirty error [ 241.370644][T12540] syz_tun: entered allmulticast mode [ 241.372342][T12532] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2943: corrupted inode contents [ 241.388357][T12540] ip6gretap0: entered allmulticast mode [ 241.389715][T12545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.408966][T12532] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.2943: mark_inode_dirty error [ 241.421915][T12545] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.446430][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.453762][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.461287][T12540] bridge0: entered allmulticast mode [ 241.468556][T12540] vcan0: entered allmulticast mode [ 241.474599][T12540] bond0: entered allmulticast mode [ 241.479803][T12540] bond_slave_0: entered allmulticast mode [ 241.485637][T12540] bond_slave_1: entered allmulticast mode [ 241.492749][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.493821][T12540] team0: entered allmulticast mode [ 241.507153][T12540] team_slave_0: entered allmulticast mode [ 241.512967][T12540] team_slave_1: entered allmulticast mode [ 241.520865][T12532] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2943: corrupted inode contents [ 241.541655][T12540] dummy0: entered allmulticast mode [ 241.548732][T12532] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 241.561444][T12540] nlmon0: entered allmulticast mode [ 241.562891][T12549] loop4: detected capacity change from 0 to 512 [ 241.567722][T12532] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.2943: corrupted inode contents [ 241.587048][T12540] caif0: entered allmulticast mode [ 241.592767][T12540] batadv0: entered allmulticast mode [ 241.593814][T12549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.600076][T12540] vxcan0: entered allmulticast mode [ 241.615104][T12532] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.2943: mark_inode_dirty error [ 241.617098][T12540] vxcan1: entered allmulticast mode [ 241.636365][T12540] veth0: entered allmulticast mode [ 241.643229][T12540] veth1: entered allmulticast mode [ 241.651106][T12549] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.662535][T12540] wg0: entered allmulticast mode [ 241.667647][T12532] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 241.676871][T12540] wg1: entered allmulticast mode [ 241.684206][T12540] wg2: entered allmulticast mode [ 241.690854][T12549] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 241.691799][T12540] veth0_to_bridge: entered allmulticast mode [ 241.705967][T12532] EXT4-fs (loop8): 1 truncate cleaned up [ 241.712379][T12532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.724887][T12540] veth1_to_bridge: entered allmulticast mode [ 241.733296][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.742825][T12532] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.765377][T12540] veth0_to_bond: entered allmulticast mode [ 241.774794][T12540] veth1_to_bond: entered allmulticast mode [ 241.783418][T12540] veth0_to_team: entered allmulticast mode [ 241.793714][T12540] veth1_to_team: entered allmulticast mode [ 241.799893][T12532] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.2943: iget: bad i_size value: 360287970189639690 [ 241.801981][T12540] veth0_to_batadv: entered allmulticast mode [ 241.821916][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.830071][T12540] batadv_slave_0: entered allmulticast mode [ 241.838314][T12540] veth1_to_batadv: entered allmulticast mode [ 241.845637][ T4403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.847377][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.865621][T12540] batadv_slave_1: entered allmulticast mode [ 241.874158][T12540] xfrm0: entered allmulticast mode [ 241.881027][T12540] veth0_to_hsr: entered allmulticast mode [ 241.899712][T12540] hsr_slave_0: entered allmulticast mode [ 241.908900][T12540] veth1_to_hsr: entered allmulticast mode [ 241.918672][T12540] hsr_slave_1: entered allmulticast mode [ 241.926638][T12540] hsr0: entered allmulticast mode [ 241.934994][T12540] veth1_virt_wifi: entered allmulticast mode [ 241.942633][T12540] veth0_virt_wifi: entered allmulticast mode [ 241.951585][T12540] veth1_vlan: entered allmulticast mode [ 241.958633][T12540] veth0_vlan: entered allmulticast mode [ 241.968683][T12540] vlan0: entered allmulticast mode [ 241.974197][T12540] vlan1: entered allmulticast mode [ 241.981954][T12540] macvlan0: entered allmulticast mode [ 241.998750][T12540] macvlan1: entered allmulticast mode [ 242.006901][T12540] ipvlan0: entered allmulticast mode [ 242.012392][T12540] ipvlan1: entered allmulticast mode [ 242.018810][T12540] veth1_macvtap: entered allmulticast mode [ 242.026172][T12540] veth0_macvtap: entered allmulticast mode [ 242.034118][T12540] macvtap0: entered allmulticast mode [ 242.040980][T12540] macsec0: entered allmulticast mode [ 242.047704][T12540] geneve0: entered allmulticast mode [ 242.055464][T12540] geneve1: entered allmulticast mode [ 242.062471][T12540] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 242.072069][T12540] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 242.080912][T12540] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 242.091631][T12540] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 242.114039][T12561] tipc: Enabled bearer , priority 0 [ 242.120852][ T3571] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.135161][ T3571] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.156409][ T3571] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.175601][ T3571] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.202922][T12564] syzkaller0: entered promiscuous mode [ 242.208551][T12564] syzkaller0: entered allmulticast mode [ 242.218891][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'. [ 242.229486][T12558] tipc: Resetting bearer [ 242.236454][T12557] tipc: Resetting bearer [ 242.243829][T12557] tipc: Disabling bearer [ 242.489696][T12581] loop8: detected capacity change from 0 to 512 [ 242.502737][T12581] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.570069][T12586] loop8: detected capacity change from 0 to 512 [ 242.585869][T12587] usb usb8: usbfs: process 12587 (syz.0.2956) did not claim interface 0 before use [ 242.611318][T12586] ext4 filesystem being mounted at /599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.710229][T12600] netlink: 'syz.0.2962': attribute type 12 has an invalid length. [ 242.718139][T12598] loop4: detected capacity change from 0 to 512 [ 242.718308][T12600] netlink: 'syz.0.2962': attribute type 29 has an invalid length. [ 242.732534][T12600] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2962'. [ 242.742064][T12600] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2962'. [ 242.857573][T12620] loop4: detected capacity change from 0 to 128 [ 242.866456][T12620] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.921112][T12626] loop4: detected capacity change from 0 to 512 [ 242.978864][T12603] chnl_net:caif_netlink_parms(): no params data found [ 243.051201][T12603] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.058444][T12603] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.081326][T12603] bridge_slave_0: entered allmulticast mode [ 243.096986][T12603] bridge_slave_0: entered promiscuous mode [ 243.115853][T12603] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.123510][T12603] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.183883][T12603] bridge_slave_1: entered allmulticast mode [ 243.208244][T12603] bridge_slave_1: entered promiscuous mode [ 243.258891][T12603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.276228][T12603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.299770][T12603] team0: Port device team_slave_0 added [ 243.307253][T12603] team0: Port device team_slave_1 added [ 243.327160][T12603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.334245][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.360603][T12603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.530670][T12603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.537679][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.563719][T12603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.659010][T12647] tipc: Enabled bearer , priority 0 [ 243.669351][T12603] hsr_slave_0: entered promiscuous mode [ 243.681818][T12603] hsr_slave_1: entered promiscuous mode [ 243.696436][T12603] debugfs: 'hsr0' already exists in 'hsr' [ 243.702328][T12603] Cannot create hsr debugfs directory [ 243.708170][T12647] syzkaller0: entered promiscuous mode [ 243.713673][T12647] syzkaller0: entered allmulticast mode [ 243.723353][T12647] tipc: Resetting bearer [ 243.741876][T12646] tipc: Resetting bearer [ 243.754557][T12646] tipc: Disabling bearer [ 243.893722][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2977'. [ 244.157147][T12603] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 244.168845][T12603] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 244.189741][T12603] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 244.220127][T12603] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 244.282705][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.306603][T12603] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.326941][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.334514][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.360998][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.368270][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.389439][T12603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.400013][T12603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.497648][T12603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.684917][T12713] tipc: Enabled bearer , priority 0 [ 244.714148][T12603] veth0_vlan: entered promiscuous mode [ 244.720239][T12713] syzkaller0: entered promiscuous mode [ 244.725778][T12713] syzkaller0: entered allmulticast mode [ 244.735431][T12603] veth1_vlan: entered promiscuous mode [ 244.750637][T12603] veth0_macvtap: entered promiscuous mode [ 244.762070][T12713] tipc: Resetting bearer [ 244.768971][T12712] tipc: Resetting bearer [ 244.775933][T12712] tipc: Disabling bearer [ 244.785033][T12603] veth1_macvtap: entered promiscuous mode [ 244.797522][T12603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.809450][T12603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.821126][ T3551] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.852112][ T3551] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.869091][ T3551] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.880678][ T3551] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.015391][T12721] sctp: [Deprecated]: syz.8.2961 (pid 12721) Use of int in max_burst socket option deprecated. [ 245.015391][T12721] Use struct sctp_assoc_value instead [ 245.152762][T12729] loop7: detected capacity change from 0 to 8192 [ 245.259175][T12729] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.682695][T12748] netlink: 'syz.7.3006': attribute type 1 has an invalid length. [ 246.739260][T12790] loop8: detected capacity change from 0 to 256 [ 246.747277][T12790] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.819473][T12793] loop7: detected capacity change from 0 to 2048 [ 246.867163][ T29] audit: type=1400 audit(1754398291.868:480): avc: denied { create } for pid=12792 comm="syz.7.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 247.883263][T12824] loop4: detected capacity change from 0 to 4096 [ 247.945804][T12831] loop8: detected capacity change from 0 to 512 [ 247.953141][T12831] EXT4-fs (loop8): SIPHASH is not a valid default hash value [ 248.265144][T12865] loop4: detected capacity change from 0 to 128 [ 248.278097][T12865] ext4 filesystem being mounted at /517/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.282711][ T29] audit: type=1400 audit(1754398293.279:481): avc: denied { watch } for pid=12871 comm="syz.7.3055" path="/proc/1317" dev="proc" ino=37740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 248.345982][T12865] No control pipe specified [ 248.519033][T12879] loop7: detected capacity change from 0 to 128 [ 248.561056][T12879] ext4 filesystem being mounted at /547/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.101829][T12909] loop8: detected capacity change from 0 to 512 [ 249.137971][T12914] netlink: 21028 bytes leftover after parsing attributes in process `syz.7.3072'. [ 249.148132][T12909] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 249.183118][T12909] EXT4-fs (loop8): 1 truncate cleaned up [ 249.189208][T12909] EXT4-fs mount: 12 callbacks suppressed [ 249.189227][T12909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.225159][T12909] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 249.245141][T12920] blktrace: Concurrent blktraces are not allowed on loop5 [ 249.262138][T12909] EXT4-fs (loop8): Remounting filesystem read-only [ 249.348286][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.436877][T12935] syz.0.3069: attempt to access beyond end of device [ 249.436877][T12935] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 250.687747][T12984] syz.8.3096: attempt to access beyond end of device [ 250.687747][T12984] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 251.298941][T12998] loop7: detected capacity change from 0 to 2048 [ 251.302648][T13002] mmap: syz.2.3105 (13002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.332702][T12998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.357816][T12998] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.452409][T13012] loop4: detected capacity change from 0 to 764 [ 251.464610][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.476569][T13012] Symlink component flag not implemented [ 251.483346][T13012] Symlink component flag not implemented (101) [ 251.648279][T13031] loop4: detected capacity change from 0 to 512 [ 251.655406][T13031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.671440][T13031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 251.679473][T13031] System zones: 0-2, 18-18, 34-34 [ 251.685864][T13031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.698574][T13031] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.727691][ T29] audit: type=1400 audit(1754398296.722:482): avc: denied { unlink } for pid=13030 comm="syz.4.3117" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 251.752221][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.928351][T13041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3120'. [ 252.394601][T13060] ip6_vti0: left allmulticast mode [ 252.400089][T13060] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3129'. [ 252.594494][T13092] netlink: 'syz.2.3144': attribute type 12 has an invalid length. [ 252.602760][T13092] netlink: 'syz.2.3144': attribute type 29 has an invalid length. [ 252.611293][T13092] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3144'. [ 252.621018][T13092] netlink: 'syz.2.3144': attribute type 2 has an invalid length. [ 252.629312][T13092] netlink: 'syz.2.3144': attribute type 3 has an invalid length. [ 252.645430][T13092] netlink: 'syz.2.3144': attribute type 12 has an invalid length. [ 252.653886][T13092] netlink: 'syz.2.3144': attribute type 29 has an invalid length. [ 252.662365][T13092] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3144'. [ 252.672151][T13092] netlink: 'syz.2.3144': attribute type 2 has an invalid length. [ 252.680467][T13092] netlink: 'syz.2.3144': attribute type 3 has an invalid length. [ 252.743687][T13105] loop4: detected capacity change from 0 to 512 [ 252.805665][ T29] audit: type=1400 audit(1754398297.803:483): avc: denied { read } for pid=13106 comm="syz.2.3151" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.835580][T13113] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3153'. [ 253.273938][T13141] loop8: detected capacity change from 0 to 512 [ 253.285596][T13141] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 253.300783][T13141] EXT4-fs (loop8): Remounting filesystem read-only [ 253.307536][T13141] EXT4-fs (loop8): 1 truncate cleaned up [ 253.313967][T13141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.331878][T13141] EXT4-fs (loop8): shut down requested (2) [ 253.417580][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.562215][T13146] erspan0: left allmulticast mode [ 253.567450][T13146] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3166'. [ 253.768688][T13152] loop8: detected capacity change from 0 to 2048 [ 253.776883][ T29] audit: type=1400 audit(1754398298.774:484): avc: denied { setattr } for pid=13154 comm="syz.4.3170" name="/" dev="configfs" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.808680][ T29] audit: type=1400 audit(1754398298.804:485): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 253.815962][T13160] tipc: Enabled bearer , priority 0 [ 253.834425][T13152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.848793][T13152] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.871400][T13160] syzkaller0: entered promiscuous mode [ 253.876997][T13160] syzkaller0: entered allmulticast mode [ 253.885441][T13152] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3165: bg 0: block 345: padding at end of block bitmap is not set [ 253.902421][T13160] tipc: Resetting bearer [ 253.909141][T13159] tipc: Resetting bearer [ 253.916334][T13152] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 253.919243][T13159] tipc: Disabling bearer [ 253.929205][T13152] EXT4-fs (loop8): This should not happen!! Data will be lost [ 253.929205][T13152] [ 253.964721][ T3533] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 48 with error 28 [ 253.977629][ T3533] EXT4-fs (loop8): This should not happen!! Data will be lost [ 253.977629][ T3533] [ 253.987404][ T3533] EXT4-fs (loop8): Total free blocks count 0 [ 253.993609][ T3533] EXT4-fs (loop8): Free/Dirty block details [ 253.999648][ T3533] EXT4-fs (loop8): free_blocks=0 [ 254.005053][ T3533] EXT4-fs (loop8): dirty_blocks=48 [ 254.010466][ T3533] EXT4-fs (loop8): Block reservation details [ 254.052259][T13168] loop8: detected capacity change from 0 to 4096 [ 254.064859][T13168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.147988][T13173] syz.2.3169: attempt to access beyond end of device [ 254.147988][T13173] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 254.206614][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.250913][T13178] loop4: detected capacity change from 0 to 512 [ 254.263119][T13178] EXT4-fs: Ignoring removed bh option [ 254.272563][T13178] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.281849][T13178] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 254.670999][T13187] netlink: 'syz.0.3181': attribute type 12 has an invalid length. [ 254.679019][T13187] netlink: 'syz.0.3181': attribute type 29 has an invalid length. [ 254.686939][T13187] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3181'. [ 254.696045][T13187] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3181'. [ 254.713682][T13186] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3181'. [ 254.722915][T13186] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3181'. [ 254.748146][T13178] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 254.756219][T13191] loop8: detected capacity change from 0 to 512 [ 254.767773][T13178] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 254.780937][T13178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.799537][T13178] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 254.809448][T13191] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 254.822201][T13178] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.3178: path /545/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 254.865015][T13191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 254.888053][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.925887][T13191] System zones: 0-2, 18-18, 34-34 [ 254.953960][T13201] blktrace: Concurrent blktraces are not allowed on loop5 [ 254.954338][T13191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.994559][T13191] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.051168][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.161129][T13216] loop8: detected capacity change from 0 to 128 [ 255.308624][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.308624][ T3533] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 255.334590][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.334590][ T3533] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 255.354749][T13228] blktrace: Concurrent blktraces are not allowed on loop5 [ 255.366885][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.366885][ T3533] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 255.394493][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.394493][ T3533] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 255.426275][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.426275][ T3533] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 255.450165][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.450165][ T3533] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 255.476811][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.476811][ T3533] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 255.506736][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.506736][ T3533] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 255.532147][T13242] syz.0.3194: attempt to access beyond end of device [ 255.532147][T13242] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 255.536959][ T3533] kworker/u8:8: attempt to access beyond end of device [ 255.536959][ T3533] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 255.589348][T13246] erspan0: left allmulticast mode [ 255.594705][T13246] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3206'. [ 255.611708][T13248] tipc: Started in network mode [ 255.616684][T13248] tipc: Node identity fe49ac52c6e7, cluster identity 4711 [ 255.623946][T13248] tipc: Enabled bearer , priority 0 [ 255.632405][T13248] syzkaller0: entered promiscuous mode [ 255.638090][T13248] syzkaller0: entered allmulticast mode [ 255.654326][T13250] loop4: detected capacity change from 0 to 128 [ 255.668165][T13248] tipc: Resetting bearer [ 255.679805][T13247] tipc: Resetting bearer [ 255.692944][T13247] tipc: Disabling bearer [ 255.776352][T13255] loop7: detected capacity change from 0 to 512 [ 255.800286][T13255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.815614][T13255] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.922406][T13263] loop8: detected capacity change from 0 to 256 [ 256.019789][T13263] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.032537][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.055431][T13269] loop7: detected capacity change from 0 to 1024 [ 256.077795][T13269] EXT4-fs: Ignoring removed orlov option [ 256.096158][T13269] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 256.118533][T13269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.142825][T13269] EXT4-fs (loop7): Online defrag not supported with bigalloc [ 256.162783][ T4198] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.323487][T13294] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3225'. [ 256.332844][T13294] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3225'. [ 256.364150][T13294] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3225'. [ 256.373731][T13294] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3225'. [ 256.639565][T13307] loop8: detected capacity change from 0 to 256 [ 256.652845][T13307] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.681098][T13311] sctp: [Deprecated]: syz.0.3232 (pid 13311) Use of int in max_burst socket option deprecated. [ 256.681098][T13311] Use struct sctp_assoc_value instead [ 257.154527][T13322] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3237'. [ 257.290366][T13337] sctp: [Deprecated]: syz.0.3243 (pid 13337) Use of int in max_burst socket option deprecated. [ 257.290366][T13337] Use struct sctp_assoc_value instead [ 257.350951][T13342] loop4: detected capacity change from 0 to 512 [ 257.361009][T13342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.395764][T13350] loop8: detected capacity change from 0 to 512 [ 257.403681][T13350] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 257.433797][T13350] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3249: casefold flag without casefold feature [ 257.448940][T13342] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 257.459990][T13350] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3249: couldn't read orphan inode 15 (err -117) [ 257.472859][T13350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.475227][T13342] System zones: 0-2, 18-18, 34-34 [ 257.488463][T13350] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 4: comm syz.8.3249: lblock 0 mapped to illegal pblock 4 (length 1) [ 257.519728][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.529616][T13342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.542241][T13342] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.618745][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.638594][T13370] loop8: detected capacity change from 0 to 512 [ 257.657384][T13370] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (24500!=4028) [ 257.708660][T13370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 257.854776][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.188950][T13396] loop7: detected capacity change from 0 to 128 [ 258.229077][T13396] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.254335][T13400] loop8: detected capacity change from 0 to 512 [ 258.277554][T13396] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.313836][T13400] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.334949][ T4198] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.353989][T13400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 258.371850][T13400] System zones: 0-2, 18-18, 34-34 [ 258.386255][T13400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.402978][T13400] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.430761][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.519854][T13428] loop7: detected capacity change from 0 to 128 [ 258.530390][T13428] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.558307][T13428] ext4 filesystem being mounted at /595/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.605970][ T4198] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.684776][T13438] validate_nla: 18 callbacks suppressed [ 258.684798][T13438] netlink: 'syz.7.3282': attribute type 12 has an invalid length. [ 258.698385][T13438] netlink: 'syz.7.3282': attribute type 29 has an invalid length. [ 258.728079][T13441] loop4: detected capacity change from 0 to 512 [ 258.739389][T13443] loop8: detected capacity change from 0 to 512 [ 258.746615][T13443] EXT4-fs: Ignoring removed nobh option [ 258.753079][T13441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.775575][T13441] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 258.785579][T13443] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3286: corrupted inode contents [ 258.797902][T13443] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.3286: mark_inode_dirty error [ 258.805341][T13441] System zones: 0-2, 18-18, 34-34 [ 258.811335][T13443] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3286: corrupted inode contents [ 258.822319][T13441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.843297][T13441] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.843651][T13443] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3286: mark_inode_dirty error [ 258.881651][T13443] Quota error (device loop8): write_blk: dquota write failed [ 258.889868][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.899306][T13443] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 258.909650][T13443] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3286: Failed to acquire dquot type 0 [ 258.924396][T13443] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3286: corrupted inode contents [ 258.938533][T13443] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.3286: mark_inode_dirty error [ 258.951182][T13443] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3286: corrupted inode contents [ 258.964593][T13443] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3286: mark_inode_dirty error [ 258.976581][T13443] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3286: corrupted inode contents [ 258.989848][T13443] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 258.999042][T13443] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3286: corrupted inode contents [ 259.012868][T13443] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.3286: mark_inode_dirty error [ 259.026016][T13443] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 259.036236][T13443] EXT4-fs (loop8): 1 truncate cleaned up [ 259.042479][T13443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.058600][T13443] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.082699][T13443] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.3286: iget: bad i_size value: 360287970189639690 [ 259.097469][T13443] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.3286: iget: bad i_size value: 360287970189639690 [ 259.117014][T13462] loop4: detected capacity change from 0 to 512 [ 259.124826][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.172886][T13466] syzkaller0: entered promiscuous mode [ 259.178891][T13466] syzkaller0: entered allmulticast mode [ 259.234571][T13470] ip6_vti0: entered allmulticast mode [ 259.375923][T13484] netlink: 'syz.4.3303': attribute type 12 has an invalid length. [ 259.383998][T13484] netlink: 'syz.4.3303': attribute type 29 has an invalid length. [ 259.391904][T13484] netlink: 'syz.4.3303': attribute type 2 has an invalid length. [ 259.399862][T13484] netlink: 'syz.4.3303': attribute type 3 has an invalid length. [ 259.417852][T13484] netlink: 'syz.4.3303': attribute type 12 has an invalid length. [ 259.425852][T13484] netlink: 'syz.4.3303': attribute type 29 has an invalid length. [ 259.433926][T13484] netlink: 'syz.4.3303': attribute type 2 has an invalid length. [ 259.442201][T13484] netlink: 'syz.4.3303': attribute type 3 has an invalid length. [ 259.481165][T13494] loop8: detected capacity change from 0 to 512 [ 259.489987][T13494] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 259.500563][T13494] EXT4-fs (loop8): orphan cleanup on readonly fs [ 259.507739][T13494] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.3307: Block bitmap for bg 0 marked uninitialized [ 259.524113][T13494] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 259.533530][T13494] EXT4-fs (loop8): 1 orphan inode deleted [ 259.540133][T13494] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 259.554470][T13494] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 259.564554][T13494] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 259.574182][T13494] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.3307: Block bitmap for bg 0 marked uninitialized [ 259.588247][T13494] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.3307: Block bitmap for bg 0 marked uninitialized [ 259.602077][T13494] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.3307: Block bitmap for bg 0 marked uninitialized [ 259.626897][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.731525][T13522] ip6_vti0: left allmulticast mode [ 259.736893][T13522] __nla_validate_parse: 13 callbacks suppressed [ 259.736910][T13522] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3319'. [ 259.871195][T13531] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3323'. [ 260.311354][T13536] gretap0: entered allmulticast mode [ 260.317299][T13536] vxcan2: entered allmulticast mode [ 260.322699][T13536] vxcan3: entered allmulticast mode [ 260.357115][T13540] loop4: detected capacity change from 0 to 512 [ 260.384767][T13542] loop4: detected capacity change from 0 to 1024 [ 260.391792][T13542] EXT4-fs: Ignoring removed orlov option [ 260.398036][T13542] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 260.415034][T13542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.438579][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.459139][T13546] loop4: detected capacity change from 0 to 512 [ 260.467632][T13546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.493861][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.505835][T13549] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3330'. [ 260.515226][T13549] netlink: 59 bytes leftover after parsing attributes in process `syz.7.3330'. [ 260.526837][T13549] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3330'. [ 260.536076][T13549] netlink: 59 bytes leftover after parsing attributes in process `syz.7.3330'. [ 260.748982][T13570] erspan0: left allmulticast mode [ 260.754588][T13570] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3337'. [ 260.792980][ T29] audit: type=1400 audit(1754398305.801:486): avc: denied { setopt } for pid=13573 comm="syz.8.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 260.834118][T13574] loop8: detected capacity change from 0 to 2048 [ 260.840989][T13574] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.904196][T13574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.019631][ T29] audit: type=1400 audit(1754398306.031:487): avc: denied { write } for pid=13587 comm="syz.0.3342" lport=45983 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.043982][ T29] audit: type=1400 audit(1754398306.031:488): avc: denied { setopt } for pid=13587 comm="syz.0.3342" lport=45983 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.083331][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.085236][T13557] chnl_net:caif_netlink_parms(): no params data found [ 261.157815][T13599] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3345'. [ 261.167028][T13599] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3345'. [ 261.176452][T13557] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.183795][T13557] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.191824][T13557] bridge_slave_0: entered allmulticast mode [ 261.199029][T13557] bridge_slave_0: entered promiscuous mode [ 261.206755][T13557] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.214125][T13557] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.221778][T13557] bridge_slave_1: entered allmulticast mode [ 261.229386][T13557] bridge_slave_1: entered promiscuous mode [ 261.262286][T13557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.273364][T13557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.307786][T13557] team0: Port device team_slave_0 added [ 261.319542][T13557] team0: Port device team_slave_1 added [ 261.355134][ T3551] bridge_slave_1: left promiscuous mode [ 261.361089][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.369435][ T3551] bridge_slave_0: left promiscuous mode [ 261.375377][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.514289][ T3551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.526936][ T3551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.536020][T13613] loop4: detected capacity change from 0 to 512 [ 261.541627][ T3551] bond0 (unregistering): Released all slaves [ 261.553783][T13557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.560789][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.587960][T13557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.599337][T13557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.606349][T13557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.632585][T13557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.644525][T13608] syzkaller0: entered promiscuous mode [ 261.650225][T13608] syzkaller0: entered allmulticast mode [ 261.664792][ T3551] tipc: Left network mode [ 261.688420][ T3551] hsr_slave_0: left promiscuous mode [ 261.694735][ T3551] hsr_slave_1: left promiscuous mode [ 261.700667][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.709118][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.779335][ T3551] team0 (unregistering): Port device team_slave_1 removed [ 261.806036][ T3551] team0 (unregistering): Port device team_slave_0 removed [ 261.868915][T13557] hsr_slave_0: entered promiscuous mode [ 261.877277][T13557] hsr_slave_1: entered promiscuous mode [ 261.889378][T13557] debugfs: 'hsr0' already exists in 'hsr' [ 261.895232][T13557] Cannot create hsr debugfs directory [ 261.904182][T13629] erspan0: entered allmulticast mode [ 262.105638][T13650] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.3364'. [ 262.217460][ T3551] ------------[ cut here ]------------ [ 262.223131][ T3551] WARNING: CPU: 0 PID: 3551 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x94/0x100 [ 262.233507][ T3551] Modules linked in: [ 262.237442][ T3551] CPU: 0 UID: 0 PID: 3551 Comm: kworker/u8:24 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 262.250091][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.260897][ T3551] Workqueue: netns cleanup_net [ 262.265787][ T3551] RIP: 0010:xfrm6_tunnel_net_exit+0x94/0x100 [ 262.272448][ T3551] Code: b2 ab ab fc 4b 83 3c 3e 00 75 19 e8 96 da 90 fc 49 81 ff f8 07 00 00 74 1d e8 88 da 90 fc 49 83 c7 08 eb d7 e8 7d da 90 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 262.292227][ T3551] RSP: 0018:ffffc900019dbc78 EFLAGS: 00010293 [ 262.298439][ T3551] RAX: ffffffff84c71f23 RBX: ffff88810b7497c0 RCX: ffff88811a3d5280 [ 262.306527][ T3551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888119bb4000 [ 262.314877][ T3551] RBP: ffffffff86c92460 R08: 0001ffff86847f7f R09: 0000000000000000 [ 262.323297][ T3551] R10: 0001c9000128f700 R11: 0001c9000128f707 R12: ffffffff86c92480 [ 262.331370][ T3551] R13: ffff88810b7497e8 R14: ffff888119bb4000 R15: 0000000000000000 [ 262.339362][ T3551] FS: 0000000000000000(0000) GS:ffff8882aee47000(0000) knlGS:0000000000000000 [ 262.348328][ T3551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.354972][ T3551] CR2: 000000110c2d9b6c CR3: 00000001343d2000 CR4: 00000000003506f0 [ 262.363108][ T3551] Call Trace: [ 262.366489][ T3551] [ 262.369427][ T3551] ops_undo_list+0x278/0x410 [ 262.374128][ T3551] cleanup_net+0x2de/0x4d0 [ 262.378594][ T3551] process_scheduled_works+0x4ce/0x9d0 [ 262.384374][ T3551] worker_thread+0x582/0x770 [ 262.389003][ T3551] kthread+0x486/0x510 [ 262.393162][ T3551] ? finish_task_switch+0xad/0x2b0 [ 262.398404][ T3551] ? __pfx_worker_thread+0x10/0x10 [ 262.403619][ T3551] ? __pfx_kthread+0x10/0x10 [ 262.408401][ T3551] ret_from_fork+0xdd/0x150 [ 262.412994][ T3551] ? __pfx_kthread+0x10/0x10 [ 262.417827][ T3551] ret_from_fork_asm+0x1a/0x30 [ 262.422872][ T3551] [ 262.426031][ T3551] ---[ end trace 0000000000000000 ]--- [ 262.432523][ T3551] ------------[ cut here ]------------ [ 262.438143][ T3551] WARNING: CPU: 0 PID: 3551 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd8/0x100 [ 262.448373][ T3551] Modules linked in: [ 262.452429][ T3551] CPU: 0 UID: 0 PID: 3551 Comm: kworker/u8:24 Tainted: G W 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 262.466637][ T3551] Tainted: [W]=WARN [ 262.470475][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.480665][ T3551] Workqueue: netns cleanup_net [ 262.485481][ T3551] RIP: 0010:xfrm6_tunnel_net_exit+0xd8/0x100 [ 262.491636][ T3551] Code: 6e ab ab fc 49 83 3c 1e 00 75 19 e8 52 da 90 fc 48 81 fb f8 07 00 00 74 1d e8 44 da 90 fc 48 83 c3 08 eb d7 e8 39 da 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 27 da 90 fc 5b 41 5e 41 5f [ 262.512118][ T3551] RSP: 0018:ffffc900019dbc78 EFLAGS: 00010293 [ 262.518233][ T3551] RAX: ffffffff84c71f67 RBX: 0000000000000008 RCX: ffff88811a3d5280 [ 262.526303][ T3551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888119bb4808 [ 262.534359][ T3551] RBP: ffffffff86c92460 R08: 0001ffff86847f7f R09: 0000000000000000 [ 262.542420][ T3551] R10: 0001c9000128f700 R11: 0001c9000128f707 R12: ffffffff86c92480 [ 262.551166][ T3551] R13: ffff88810b7497e8 R14: ffff888119bb4800 R15: 00000000000007f8 [ 262.559579][ T3551] FS: 0000000000000000(0000) GS:ffff8882aee47000(0000) knlGS:0000000000000000 [ 262.568765][ T3551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.575512][ T3551] CR2: 000000110c2d9b6c CR3: 00000001343d2000 CR4: 00000000003506f0 [ 262.583631][ T3551] Call Trace: [ 262.586933][ T3551] [ 262.589949][ T3551] ops_undo_list+0x278/0x410 [ 262.594640][ T3551] cleanup_net+0x2de/0x4d0 [ 262.599135][ T3551] process_scheduled_works+0x4ce/0x9d0 [ 262.604764][ T3551] worker_thread+0x582/0x770 [ 262.609601][ T3551] kthread+0x486/0x510 [ 262.613832][ T3551] ? finish_task_switch+0xad/0x2b0 [ 262.619146][ T3551] ? __pfx_worker_thread+0x10/0x10 [ 262.624364][ T3551] ? __pfx_kthread+0x10/0x10 [ 262.629066][ T3551] ret_from_fork+0xdd/0x150 [ 262.629094][ T3551] ? __pfx_kthread+0x10/0x10 [ 262.638282][ T3551] ret_from_fork_asm+0x1a/0x30 [ 262.643148][ T3551] [ 262.643160][ T3551] ---[ end trace 0000000000000000 ]--- [ 262.656438][ T3551] ------------[ cut here ]------------ [ 262.662000][ T3551] WARNING: CPU: 1 PID: 3551 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 262.671874][ T3551] Modules linked in: [ 262.676111][ T3551] CPU: 1 UID: 0 PID: 3551 Comm: kworker/u8:24 Tainted: G W 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 262.690377][ T3551] Tainted: [W]=WARN [ 262.694412][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.705024][ T3551] Workqueue: netns cleanup_net [ 262.710110][ T3551] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 262.715788][ T3551] Code: 48 8d bb 30 0e 00 00 e8 c2 56 bd fc 48 8b bb 30 0e 00 00 e8 76 d5 c9 fc 5b 41 5e 41 5f 5d e9 0b 8a b3 00 cc e8 45 99 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 37 99 a2 fc 90 0f 0b 90 4c 89 f7 e8 8b [ 262.735669][ T3551] RSP: 0018:ffffc900019dbc60 EFLAGS: 00010293 [ 262.741840][ T3551] RAX: ffffffff84b5605b RBX: ffff88810b7497c0 RCX: ffff88811a3d5280 [ 262.749857][ T3551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810b74a5c0 [ 262.757997][ T3551] RBP: ffffffff86c8a2e0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 262.766128][ T3551] R10: ffffc900019dbbe8 R11: 0001c900019dbbe8 R12: ffffffff86c8a300 [ 262.774745][ T3551] R13: ffff88810b7497e8 R14: ffff88810b74a5c0 R15: ffff88810b7497c0 [ 262.782948][ T3551] FS: 0000000000000000(0000) GS:ffff8882aef47000(0000) knlGS:0000000000000000 [ 262.792377][ T3551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.799165][ T3551] CR2: 0000200000000000 CR3: 0000000006834000 CR4: 00000000003506f0 [ 262.807371][ T3551] Call Trace: [ 262.810980][ T3551] [ 262.814036][ T3551] xfrm_net_exit+0x2d/0x60 [ 262.818741][ T3551] ops_undo_list+0x278/0x410 [ 262.823570][ T3551] cleanup_net+0x2de/0x4d0 [ 262.828099][ T3551] process_scheduled_works+0x4ce/0x9d0 [ 262.833678][ T3551] worker_thread+0x582/0x770 [ 262.838379][ T3551] kthread+0x486/0x510 [ 262.842620][ T3551] ? finish_task_switch+0xad/0x2b0 [ 262.847862][ T3551] ? __pfx_worker_thread+0x10/0x10 [ 262.853074][ T3551] ? __pfx_kthread+0x10/0x10 [ 262.857752][ T3551] ret_from_fork+0xdd/0x150 [ 262.862581][ T3551] ? __pfx_kthread+0x10/0x10 [ 262.867298][ T3551] ret_from_fork_asm+0x1a/0x30 [ 262.872119][ T3551] [ 262.875173][ T3551] ---[ end trace 0000000000000000 ]--- [ 262.932955][T13677] loop8: detected capacity change from 0 to 512 [ 262.943300][T13677] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.8.3373: corrupted xattr block 95: invalid header [ 262.958057][T13677] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3373: bg 0: block 7: invalid block bitmap [ 262.996534][T13677] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 263.004917][T13557] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.006269][T13677] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #11: comm syz.8.3373: corrupted xattr block 95: invalid header [ 263.028817][T13677] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 263.031798][T13557] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.054699][T13677] EXT4-fs (loop8): 1 orphan inode deleted [ 263.061383][T13677] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.063944][T13557] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.097426][T13557] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.108447][T13689] loop4: detected capacity change from 0 to 1024 [ 263.119885][T13689] EXT4-fs: Ignoring removed orlov option [ 263.132151][T13689] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 263.143278][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.161203][T13689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.182296][T13557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.194901][T13557] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.206836][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.214256][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.224348][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.248234][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.255397][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.338132][T13557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.500537][T13557] veth0_vlan: entered promiscuous mode [ 263.510091][T13557] veth1_vlan: entered promiscuous mode [ 263.525254][T13557] veth0_macvtap: entered promiscuous mode [ 263.986338][T13557] veth1_macvtap: entered promiscuous mode [ 263.997789][T13557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.009159][T13557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.020903][ T3585] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.035802][ T3585] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.047352][ T3585] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.059244][ T3585] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.100389][T13755] loop7: detected capacity change from 0 to 2048 [ 264.112090][T13755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.124729][T13755] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.157596][T13557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.307471][T13792] validate_nla: 26 callbacks suppressed [ 264.307539][T13792] netlink: 'syz.2.3411': attribute type 12 has an invalid length. [ 264.321269][T13792] netlink: 'syz.2.3411': attribute type 29 has an invalid length. [ 264.323469][T13794] loop7: detected capacity change from 0 to 512 [ 264.356024][T13792] netlink: 'syz.2.3411': attribute type 12 has an invalid length. [ 264.364182][T13792] netlink: 'syz.2.3411': attribute type 29 has an invalid length. [ 264.522754][T13813] netlink: 'syz.0.3420': attribute type 12 has an invalid length. [ 264.530899][T13813] netlink: 'syz.0.3420': attribute type 29 has an invalid length. [ 264.585449][T13817] loop7: detected capacity change from 0 to 2048 [ 264.602985][T13817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.618598][T13817] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.652334][T13557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.680195][T13822] loop7: detected capacity change from 0 to 512 [ 265.655745][T13853] netlink: 'syz.7.3436': attribute type 12 has an invalid length. [ 265.663803][T13853] netlink: 'syz.7.3436': attribute type 29 has an invalid length. [ 265.671679][T13853] __nla_validate_parse: 12 callbacks suppressed [ 265.671695][T13853] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3436'. [ 265.687225][T13853] netlink: 'syz.7.3436': attribute type 2 has an invalid length. [ 265.695086][T13853] netlink: 'syz.7.3436': attribute type 3 has an invalid length. [ 265.755643][T13860] bio_check_eod: 175 callbacks suppressed [ 265.755692][T13860] syz.0.3434: attempt to access beyond end of device [ 265.755692][T13860] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 265.778368][T13861] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3436'. [ 266.215618][T13874] loop7: detected capacity change from 0 to 1024 [ 266.240498][T13874] EXT4-fs: Ignoring removed orlov option [ 266.256181][T13878] syzkaller0: entered promiscuous mode [ 266.261861][T13878] syzkaller0: entered allmulticast mode [ 266.274120][T13874] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 266.298737][T13874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.324703][ T29] audit: type=1400 audit(1754398311.325:489): avc: denied { append } for pid=13872 comm="syz.7.3444" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.369138][T13557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.591506][T13873] chnl_net:caif_netlink_parms(): no params data found [ 266.610078][T13902] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3451'. [ 266.619710][T13902] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3451'. [ 266.738379][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.745732][T13873] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.754579][T13873] bridge_slave_0: entered allmulticast mode [ 266.762765][T13873] bridge_slave_0: entered promiscuous mode [ 266.772387][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.779693][T13873] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.787203][T13873] bridge_slave_1: entered allmulticast mode [ 266.793700][T13873] bridge_slave_1: entered promiscuous mode [ 266.813493][T13873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.826156][T13873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.857872][T13873] team0: Port device team_slave_0 added [ 266.864812][T13873] team0: Port device team_slave_1 added [ 266.931648][T13873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.938883][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.965047][T13873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.137497][T13873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.144865][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.171645][T13873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.324429][T13873] hsr_slave_0: entered promiscuous mode [ 267.331032][T13873] hsr_slave_1: entered promiscuous mode [ 267.340224][T13873] debugfs: 'hsr0' already exists in 'hsr' [ 267.346049][T13873] Cannot create hsr debugfs directory [ 267.613919][T13929] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3461'. [ 267.630718][T13929] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3461'. [ 267.680734][T13933] loop7: detected capacity change from 0 to 1764 [ 267.772478][T13873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.775298][T13945] loop7: detected capacity change from 0 to 1024 [ 267.796547][T13873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.807926][T13873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.818601][T13873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.826246][T13945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.854895][ T29] audit: type=1400 audit(1754398312.867:490): avc: denied { rename } for pid=13944 comm="syz.7.3468" name="file1" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.855278][T13945] EXT4-fs error (device loop7): ext4_get_first_dir_block:3556: inode #11: comm syz.7.3468: directory missing '..' [ 267.894150][T13945] EXT4-fs (loop7): Remounting filesystem read-only [ 267.900968][ T29] audit: type=1400 audit(1754398312.867:491): avc: denied { reparent } for pid=13944 comm="syz.7.3468" name="file1" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.923542][ T29] audit: type=1400 audit(1754398312.867:492): avc: denied { add_name } for pid=13944 comm="syz.7.3468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 267.984972][T13557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.030741][T13873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.054635][T13873] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.064859][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.072023][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.117978][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.125308][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.194680][T13997] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3486'. [ 268.216649][T13997] lo: entered allmulticast mode [ 268.225088][T13997] tunl0: entered allmulticast mode [ 268.232526][T13997] gre0: entered allmulticast mode [ 268.243777][T13997] gretap0: entered allmulticast mode [ 268.252072][T13997] erspan0: entered allmulticast mode [ 268.259651][T13997] ip_vti0: entered allmulticast mode [ 268.266539][T13997] ip6_vti0: entered allmulticast mode [ 268.273744][T13997] sit0: entered allmulticast mode [ 268.281998][T13997] ip6tnl0: entered allmulticast mode [ 268.289186][T13997] ip6gre0: entered allmulticast mode [ 268.296535][T13997] syz_tun: entered allmulticast mode [ 268.303921][T13997] ip6gretap0: entered allmulticast mode [ 268.311352][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.318806][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.327543][T13997] bridge0: entered allmulticast mode [ 268.334295][T13997] vcan0: entered allmulticast mode [ 268.341061][T13997] bond0: entered allmulticast mode [ 268.346412][T13997] bond_slave_0: entered allmulticast mode [ 268.352139][T13997] bond_slave_1: entered allmulticast mode [ 268.359783][T13997] team0: entered allmulticast mode [ 268.364926][T13997] team_slave_0: entered allmulticast mode [ 268.370854][T13997] team_slave_1: entered allmulticast mode [ 268.378527][T13997] dummy0: entered allmulticast mode [ 268.387688][T13997] nlmon0: entered allmulticast mode [ 268.394553][T13997] caif0: entered allmulticast mode [ 268.399982][T13997] batadv0: entered allmulticast mode [ 268.407178][T13997] vxcan0: entered allmulticast mode [ 268.413186][T13997] vxcan1: entered allmulticast mode [ 268.419339][T13997] veth0: entered allmulticast mode [ 268.426105][T13997] veth1: entered allmulticast mode [ 268.432840][T13997] wg0: entered allmulticast mode [ 268.439729][T13997] wg1: entered allmulticast mode [ 268.447463][T13997] wg2: entered allmulticast mode [ 268.453768][T13997] veth0_to_bridge: entered allmulticast mode [ 268.463086][T13997] veth1_to_bridge: entered allmulticast mode [ 268.471863][T13997] veth0_to_bond: entered allmulticast mode [ 268.479669][T13997] veth1_to_bond: entered allmulticast mode [ 268.487249][T13997] veth0_to_team: entered allmulticast mode [ 268.495577][T13997] veth1_to_team: entered allmulticast mode [ 268.503477][T13997] veth0_to_batadv: entered allmulticast mode [ 268.510894][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.518347][T13997] batadv_slave_0: entered allmulticast mode [ 268.526252][T13997] veth1_to_batadv: entered allmulticast mode [ 268.533355][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.541013][T13997] batadv_slave_1: entered allmulticast mode [ 268.548468][T13997] xfrm0: entered allmulticast mode [ 268.554941][T13997] veth0_to_hsr: entered allmulticast mode [ 268.562012][T13997] hsr_slave_0: entered allmulticast mode [ 268.568807][T13997] veth1_to_hsr: entered allmulticast mode [ 268.575629][T13997] hsr_slave_1: entered allmulticast mode [ 268.582235][T13997] hsr0: entered allmulticast mode [ 268.588867][T13997] veth1_virt_wifi: entered allmulticast mode [ 268.596513][T13997] veth0_virt_wifi: entered allmulticast mode [ 268.603560][T13997] veth1_vlan: entered allmulticast mode [ 268.610610][T13997] veth0_vlan: entered allmulticast mode [ 268.619323][T13997] vlan0: entered allmulticast mode [ 268.624599][T13997] vlan1: entered allmulticast mode [ 268.633933][T13997] macvlan0: entered allmulticast mode [ 268.641173][T13997] macvlan1: entered allmulticast mode [ 268.647782][T13997] ipvlan0: entered allmulticast mode [ 268.653241][T13997] ipvlan1: entered allmulticast mode [ 268.659543][T13997] veth1_macvtap: entered allmulticast mode [ 268.667099][T13997] veth0_macvtap: entered allmulticast mode [ 268.674158][T13997] macvtap0: entered allmulticast mode [ 268.681402][T13997] macsec0: entered allmulticast mode [ 268.689838][T13997] geneve0: entered allmulticast mode [ 268.697555][T13997] geneve1: entered allmulticast mode [ 268.705145][T13997] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 268.714641][T13997] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 268.724453][T13997] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 268.734357][T13997] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 268.747555][T14004] erspan0: left allmulticast mode [ 268.753076][T14004] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3489'. [ 268.767990][ T3576] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.791764][T13873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.810920][ T3576] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.823328][ T3571] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.835199][ T3571] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.950497][T14028] loop7: detected capacity change from 0 to 1024 [ 268.957606][T14031] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3497'. [ 268.966782][T14031] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3497'. [ 268.979924][T14028] EXT4-fs: inline encryption not supported [ 268.986059][T14028] EXT4-fs: Ignoring removed i_version option [ 269.009837][T14028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.099213][T13557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.260209][T14051] ip6_vti0: left allmulticast mode [ 269.273691][ T29] audit: type=1400 audit(1754398314.288:493): avc: denied { append } for pid=14055 comm="syz.0.3504" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.317815][ T29] audit: type=1400 audit(1754398314.298:494): avc: denied { map } for pid=14055 comm="syz.0.3504" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.338847][T13873] veth0_vlan: entered promiscuous mode [ 269.342166][ T29] audit: type=1400 audit(1754398314.298:495): avc: denied { execute } for pid=14055 comm="syz.0.3504" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.350277][T14064] validate_nla: 25 callbacks suppressed [ 269.350291][T14064] netlink: 'syz.7.3508': attribute type 12 has an invalid length. [ 269.386382][T14064] netlink: 'syz.7.3508': attribute type 29 has an invalid length. [ 269.406530][T13873] veth1_vlan: entered promiscuous mode [ 269.425645][T13873] veth0_macvtap: entered promiscuous mode [ 269.432948][T13873] veth1_macvtap: entered promiscuous mode [ 269.443863][T13873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.453467][T13873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.490860][ T3571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.531883][ T3571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.541106][T14064] netlink: 'syz.7.3508': attribute type 12 has an invalid length. [ 269.549035][T14064] netlink: 'syz.7.3508': attribute type 29 has an invalid length. [ 269.564686][T14071] loop4: detected capacity change from 0 to 512 [ 269.571956][T14071] EXT4-fs: Ignoring removed nobh option [ 269.635693][ T3571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.682092][ T3571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.760834][T14071] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3441: iget: bad i_size value: 38620345925642 [ 269.813004][T14071] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3441: couldn't read orphan inode 15 (err -117) [ 269.876340][T14071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.947589][T14071] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.3441: iget: bad i_size value: 38620345925642 [ 270.041358][T13873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.241536][T14089] loop8: detected capacity change from 0 to 1024 [ 270.249792][T14089] EXT4-fs: Ignoring removed orlov option [ 270.257003][T14089] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 270.278288][T14089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.382423][T12603] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.511286][ T29] audit: type=1400 audit(1754398315.529:496): avc: denied { watch } for pid=14102 comm="syz.7.3521" path="/" dev="configfs" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 270.681588][T14116] loop8: detected capacity change from 0 to 1764 [ 270.818731][T14124] netlink: 'syz.7.3531': attribute type 12 has an invalid length. [ 270.826807][T14124] netlink: 'syz.7.3531': attribute type 29 has an invalid length. [ 270.834700][T14124] __nla_validate_parse: 8 callbacks suppressed [ 270.834717][T14124] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3531'. [ 270.850113][T14124] netlink: 'syz.7.3531': attribute type 2 has an invalid length. [ 270.857900][T14124] netlink: 'syz.7.3531': attribute type 3 has an invalid length. [ 270.918491][T14130] netlink: 'syz.7.3531': attribute type 12 has an invalid length. [ 270.926464][T14130] netlink: 'syz.7.3531': attribute type 29 has an invalid length. [ 270.934424][T14130] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3531'. [ 271.804689][T14155] loop8: detected capacity change from 0 to 128 [ 271.858528][T14158] loop8: detected capacity change from 0 to 512 [ 271.942278][T14158] msdos: Invalid gid '0x00000000ffffffff' [ 272.103781][ T29] audit: type=1400 audit(1754398317.131:497): avc: denied { unmount } for pid=13873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 272.220731][T14183] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3556'. [ 272.257488][T14187] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3558'. [ 272.623416][T14202] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3564'. [ 273.140909][T14216] syz.0.3569: attempt to access beyond end of device [ 273.140909][T14216] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 273.502033][T14222] loop4: detected capacity change from 0 to 128 [ 273.650111][T14226] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3575'. [ 274.492480][T14271] loop8: detected capacity change from 0 to 128 [ 274.510879][T14271] EXT4-fs: test_dummy_encryption option not supported [ 275.025050][T14199] ================================================================== [ 275.033270][T14199] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 275.040422][T14199] [ 275.042770][T14199] read-write to 0xffff888118e0796c of 4 bytes by task 14200 on cpu 0: [ 275.051115][T14199] fifo_open+0x86/0x5d0 [ 275.055318][T14199] do_dentry_open+0x649/0xa20 [ 275.060071][T14199] vfs_open+0x37/0x1e0 [ 275.064177][T14199] path_openat+0x1c5e/0x2170 [ 275.068978][T14199] do_filp_open+0x109/0x230 [ 275.073504][T14199] do_sys_openat2+0xa6/0x110 [ 275.078127][T14199] __se_sys_openat2+0x194/0x1f0 [ 275.083015][T14199] __x64_sys_openat2+0x55/0x70 [ 275.087855][T14199] x64_sys_call+0x1121/0x2ff0 [ 275.092692][T14199] do_syscall_64+0xd2/0x200 [ 275.097422][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.103444][T14199] [ 275.105785][T14199] read to 0xffff888118e0796c of 4 bytes by task 14199 on cpu 1: [ 275.113434][T14199] wait_for_partner+0xf7/0x1c0 [ 275.118431][T14199] fifo_open+0x4b1/0x5d0 [ 275.122824][T14199] do_dentry_open+0x649/0xa20 [ 275.127535][T14199] vfs_open+0x37/0x1e0 [ 275.131619][T14199] path_openat+0x1c5e/0x2170 [ 275.136244][T14199] do_filp_open+0x109/0x230 [ 275.140765][T14199] do_sys_openat2+0xa6/0x110 [ 275.145367][T14199] __x64_sys_openat+0xf2/0x120 [ 275.150143][T14199] x64_sys_call+0x2e9c/0x2ff0 [ 275.155415][T14199] do_syscall_64+0xd2/0x200 [ 275.159924][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.166012][T14199] [ 275.168423][T14199] value changed: 0x00000001 -> 0x00000002 [ 275.174224][T14199] [ 275.176579][T14199] Reported by Kernel Concurrency Sanitizer on: [ 275.182766][T14199] CPU: 1 UID: 0 PID: 14199 Comm: syz.2.3563 Tainted: G W 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(voluntary) [ 275.196963][T14199] Tainted: [W]=WARN [ 275.200830][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.210908][T14199] ================================================================== SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 275.223333][ T29] audit: type=1400 audit(1754398320.243:498): avc: denied { write } for pid=3289 comm="syz-executor" path="pipe:[2518]" dev="pipefs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 275.632082][ T3576] bridge_slave_1: left promiscuous mode [ 275.637797][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.645804][ T3576] bridge_slave_0: left promiscuous mode [ 275.651581][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.721281][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.730925][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.740104][ T3576] bond0 (unregistering): Released all slaves [ 275.781146][ T3576] tipc: Left network mode [ 275.787784][ T3576] hsr_slave_0: left promiscuous mode [ 275.794318][ T3576] hsr_slave_1: left promiscuous mode [ 275.800165][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.807784][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.836948][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 275.846838][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 276.182005][ T3576] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.240645][ T3576] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.290487][ T3576] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.331200][ T3576] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.383252][ T3576] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.430538][ T3576] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.480400][ T3576] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.539883][ T3576] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.780502][ T3576] bridge_slave_1: left allmulticast mode [ 276.786174][ T3576] bridge_slave_1: left promiscuous mode [ 276.792119][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.799920][ T3576] bridge_slave_0: left allmulticast mode [ 276.805586][ T3576] bridge_slave_0: left promiscuous mode [ 276.811285][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.819539][ T3576] bridge_slave_1: left allmulticast mode [ 276.825178][ T3576] bridge_slave_1: left promiscuous mode [ 276.830958][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.839216][ T3576] bridge_slave_0: left allmulticast mode [ 276.844849][ T3576] bridge_slave_0: left promiscuous mode [ 276.850589][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.859089][ T3576] bridge_slave_1: left promiscuous mode [ 276.864928][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.872665][ T3576] bridge_slave_0: left promiscuous mode [ 276.878493][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.979493][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.990242][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.000090][ T3576] bond0 (unregistering): Released all slaves [ 277.050266][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.060053][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.069925][ T3576] bond0 (unregistering): Released all slaves [ 277.129815][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.139253][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.148287][ T3576] bond0 (unregistering): Released all slaves [ 277.191060][ T3576] tipc: Left network mode [ 277.198868][ T3576] hsr_slave_0: left promiscuous mode [ 277.204546][ T3576] hsr_slave_1: left promiscuous mode [ 277.210206][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.217802][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.225646][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.233439][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.242893][ T3576] hsr_slave_0: left promiscuous mode [ 277.248746][ T3576] hsr_slave_1: left promiscuous mode [ 277.254480][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.261917][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.269471][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.276981][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.286593][ T3576] hsr_slave_0: left promiscuous mode [ 277.292461][ T3576] hsr_slave_1: left promiscuous mode [ 277.298280][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.305780][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.319301][ T3576] veth1_macvtap: left promiscuous mode [ 277.324796][ T3576] veth0_macvtap: left promiscuous mode [ 277.330506][ T3576] veth1_vlan: left promiscuous mode [ 277.335851][ T3576] veth0_vlan: left promiscuous mode [ 277.342155][ T3576] veth1_macvtap: left promiscuous mode [ 277.347654][ T3576] veth0_macvtap: left promiscuous mode [ 277.353231][ T3576] veth1_vlan: left promiscuous mode [ 277.358751][ T3576] veth0_vlan: left promiscuous mode [ 277.446641][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 277.457376][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 277.505194][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 277.515844][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 277.563920][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 277.574223][ T3576] team0 (unregistering): Port device team_slave_0 removed