last executing test programs: 3m53.09032942s ago: executing program 2 (id=2991): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 3m52.511616111s ago: executing program 2 (id=3000): gettid() r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 3m52.373778734s ago: executing program 2 (id=3002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) 3m51.947669262s ago: executing program 2 (id=3004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 3m51.812784645s ago: executing program 2 (id=3006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3m51.363716074s ago: executing program 2 (id=3012): memfd_create(&(0x7f0000000080)='security.selinux\x00\xabl\x8d+\x8d\x17\xd3\x17t-\xd1]\xa1\xe4i$\xa0t\x1e.\x90+\x04\xfa\xfc\x80L+\x18\xe2\xcc\x81l\xe7\x91\x12A\x14FU \x89\xbb\x97\x05\x92z\x90;\xd3\xc5\x93.\xa4`d\x86\xbfd5\x8d;T\xea\xe79\xee\xe8\x10\xf89$N;+}\xe2C\xd3\"\xdc\n\xe2^F0O\fD\xe5d+=\x9b#L}r\x85B\xa5J\xa5\xb0\xf4\xae\xadd\xff3`\x13V\xb9\x99C\xe0\xb3\xde\x83H.]\xa3\xe2\x05\xa8,qW;\x93\\\xc4\v\x0exA\x00Iw}\x9c\xdax,\xa3\x1d\xb6\x85\x83\xca\x1c3\xb0\xcb\x95\xac\x84-W\xc2\xf4\xc2d\"\xea\x9f\xfcr\\!\xcd@\xa0$\xef\xbd\x85\x00@E\xe2\xfa1\x86\x81\xd0b\xc9\x9d\xf4\xb5\xed\xa9\xc6\x06\x9eV\xa0u\xd8\n=\xee\xea\x95\xdd\x86)\xe8iKZ\x16\xf7F)\x87\xa7\xbf\\\\>\xdcL\xebN\xedE\xf1J\xea\xb0Y\xb8SD\xc4\x17\xe2aI\xda\xaa\x98&\x8fyvR\xcd\xc1\xe8\xa3I\x9e&*\n\r\x8f.\xd9O=\a\xfa[\xf2\xf1\xd0\f\x95n\x1d\x91\"\xa7\x92e\x88\x19\xe3;\xff\xb8\x19*^\x8bM\x87\xf1\x8a\xa7`o\x81\xa1\xb2Q&\x04\xfeC\x9a\xeb', 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x392, &(0x7f0000000400)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "423ae8", 0x35c, 0x2f, 0x1, @remote, @remote, {[@srh={0x1, 0x4, 0x4, 0x2, 0x3, 0x48, 0xb998, [@private2, @mcast2]}, @fragment={0x2c, 0x0, 0x2, 0x1, 0x0, 0xb, 0x64}, @dstopts={0x3c, 0x5, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x1}]}, @srh={0x2c, 0x8, 0x4, 0x4, 0xfd, 0x0, 0x1, [@ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xfd, 0x2, [], "a96b52f212ee9c1cf74008e9b70a4fcc864999cbd04b3294e90d7732dafa56c2ddc98e5357d4372d389cea920eb6e27429bf2d48ffac42d25b7b10df0ee422b15c0111586ed1be4b5b8fd36ed62554172674946202e2ca93eda4b67f4cb6435d5d4e1d707ee16305d1498aff607d64ff4ad172635e4398769b2a7a172d4bac1b4056fd6b5112ded77b90aad2dabb2e4b670c4a60f99080672cedeca3dcee22ffc7d96e95759b7d41b09303d2004af5aab6f330c68f02066edb755efc4d7fd8cce838f78376e421376080e6f278f54492641da0a08c2e57943f08863cdd048c5ef071cb4fe8dddc84ec3c8e2a400a78ea816263195e4fa22ae203148ced"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x401, 0x6], "00ab1b0e4cb6218b7261388311ee53a02031fd6700533de23f748cff586563b8d51db7740ded7c45774d79fcb8aa63154a9f90153d530511c891b70b5f5221e31758c7323333c2edf6da083e4a9021cc44b84fc20e12cc75963b9dca2a0924f659541bdd491560db54f32755d3e43fae58dfc2c703a18d4af2820f53cdb2172eaf669f587fb85de6741b6a954f84498f0f2e2bd4d7b306a40b65d2221a39f244c09ef87a41d686990e9210d0071fe73b3cfa2c781cab4da98a316027e58dc738dcf9a91ae07238873c4722639abca6e51491f75822f9211d48fb1881d060fa1a8efccaabd53b"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "39a86a2e52a0785bddced9544479"}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x5, 0x1, 0x0, 0x2, 0x1, 0x6}, 0x2, {0x1, 0x1, 0x2, 0x8, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "c755deb1fe9b8ffef851671322fdd2e153236a4a0168b3ef93991a564991e88379a154ea985963823365637fb1d724a6904af7fac4ca875d93369fa50f578954edba2d67d2a3536cc4934d274d407fe4fbffe7431c0fd5861746fb775c3e8fce7ed5851f65f4c858e5fe207ab24183ebb4545d"}}}}}}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) 3m51.349903214s ago: executing program 32 (id=3012): memfd_create(&(0x7f0000000080)='security.selinux\x00\xabl\x8d+\x8d\x17\xd3\x17t-\xd1]\xa1\xe4i$\xa0t\x1e.\x90+\x04\xfa\xfc\x80L+\x18\xe2\xcc\x81l\xe7\x91\x12A\x14FU \x89\xbb\x97\x05\x92z\x90;\xd3\xc5\x93.\xa4`d\x86\xbfd5\x8d;T\xea\xe79\xee\xe8\x10\xf89$N;+}\xe2C\xd3\"\xdc\n\xe2^F0O\fD\xe5d+=\x9b#L}r\x85B\xa5J\xa5\xb0\xf4\xae\xadd\xff3`\x13V\xb9\x99C\xe0\xb3\xde\x83H.]\xa3\xe2\x05\xa8,qW;\x93\\\xc4\v\x0exA\x00Iw}\x9c\xdax,\xa3\x1d\xb6\x85\x83\xca\x1c3\xb0\xcb\x95\xac\x84-W\xc2\xf4\xc2d\"\xea\x9f\xfcr\\!\xcd@\xa0$\xef\xbd\x85\x00@E\xe2\xfa1\x86\x81\xd0b\xc9\x9d\xf4\xb5\xed\xa9\xc6\x06\x9eV\xa0u\xd8\n=\xee\xea\x95\xdd\x86)\xe8iKZ\x16\xf7F)\x87\xa7\xbf\\\\>\xdcL\xebN\xedE\xf1J\xea\xb0Y\xb8SD\xc4\x17\xe2aI\xda\xaa\x98&\x8fyvR\xcd\xc1\xe8\xa3I\x9e&*\n\r\x8f.\xd9O=\a\xfa[\xf2\xf1\xd0\f\x95n\x1d\x91\"\xa7\x92e\x88\x19\xe3;\xff\xb8\x19*^\x8bM\x87\xf1\x8a\xa7`o\x81\xa1\xb2Q&\x04\xfeC\x9a\xeb', 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x392, &(0x7f0000000400)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "423ae8", 0x35c, 0x2f, 0x1, @remote, @remote, {[@srh={0x1, 0x4, 0x4, 0x2, 0x3, 0x48, 0xb998, [@private2, @mcast2]}, @fragment={0x2c, 0x0, 0x2, 0x1, 0x0, 0xb, 0x64}, @dstopts={0x3c, 0x5, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x6}, @pad1, @enc_lim={0x4, 0x1, 0x1}]}, @srh={0x2c, 0x8, 0x4, 0x4, 0xfd, 0x0, 0x1, [@ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xfd, 0x2, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x401, 0x6], "00ab1b0e4cb6218b7261388311ee53a02031fd6700533de23f748cff586563b8d51db7740ded7c45774d79fcb8aa63154a9f90153d530511c891b70b5f5221e31758c7323333c2edf6da083e4a9021cc44b84fc20e12cc75963b9dca2a0924f659541bdd491560db54f32755d3e43fae58dfc2c703a18d4af2820f53cdb2172eaf669f587fb85de6741b6a954f84498f0f2e2bd4d7b306a40b65d2221a39f244c09ef87a41d686990e9210d0071fe73b3cfa2c781cab4da98a316027e58dc738dcf9a91ae07238873c4722639abca6e51491f75822f9211d48fb1881d060fa1a8efccaabd53b"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "39a86a2e52a0785bddced9544479"}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x5, 0x1, 0x0, 0x2, 0x1, 0x6}, 0x2, {0x1, 0x1, 0x2, 0x8, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "c755deb1fe9b8ffef851671322fdd2e153236a4a0168b3ef93991a564991e88379a154ea985963823365637fb1d724a6904af7fac4ca875d93369fa50f578954edba2d67d2a3536cc4934d274d407fe4fbffe7431c0fd5861746fb775c3e8fce7ed5851f65f4c858e5fe207ab24183ebb4545d"}}}}}}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) 48.759044817s ago: executing program 0 (id=6302): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0041, &(0x7f0000000000)={[{@errors_continue}, {@data_err_ignore}, {@acl}, {@noinit_itable}, {@norecovery}, {@nodiscard}]}, 0xfe, 0x47d, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgctl$IPC_RMID(0x0, 0x0) 47.941289572s ago: executing program 0 (id=6305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='ext4_get_implied_cluster_alloc_exit\x00', r0, 0x0, 0x3}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) 47.843709624s ago: executing program 0 (id=6307): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x2) 47.661717438s ago: executing program 0 (id=6313): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 46.884210723s ago: executing program 0 (id=6317): unshare(0x28000600) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x2800) 46.024829729s ago: executing program 0 (id=6321): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x100, 0x3, 0x9d25, 0x1, 0x6, 0x100}) 46.024707069s ago: executing program 33 (id=6321): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x100, 0x3, 0x9d25, 0x1, 0x6, 0x100}) 37.012515164s ago: executing program 5 (id=6437): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'team0\x00', {0x2}, 0x68a2}) 36.972214475s ago: executing program 5 (id=6439): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$eJzs3T9PA2UcB/DfldIWHdrByZB4iQxOBFhdSgwkRiZNB3VQI5AY2phAQuKfWJlcXRx9BSYmbr4JF9+BiauJmwwkZ653Rwu0hRoKGj+fAR6ee77P/e7yFErIPXy4Pjg5TOP44svfotVKotaNtbhMohO1qHwdN3S/DQDgv+wyy+LPrLBILomI1vLKAgCWaObP/5UZgZ+epCwAYIneefe9t3YPDvbeTtNW7A++Oe/lv9nnn4vju8fxSfTjKLaiHVcRWaX6+0CWZcN6mqZp1o4YDM97eXLwwS/l/Lt/RIzy29GOTpUo3m3kH/ffPNjbTguxcZ0f5nW8UJ6/m+d3oh0vTZx/Ir8zJR+9Rrz26kT9m9GOXz+OT6Mfh6MixvmvttP0jey7v754Py8vzyfD815zNG4sm/WOCAAAAAAAAAAAAAAAAAAAAAAAFrZZ7p3TjLQTG4O8q9x/Z+Uq/2I10krn5v48Rb5ZTXRrf6BhFt9X++tspWmaJcWwcb4eL9ej/jxXDQAAAAAAAAAAAAAAAAAAAP8uZ599fvJRv390+iiN8iH/68f6/+k83YmeV2L+4Ob4XLWyOWfmWKnGJBF5TzLrJuQX8Ui35b7G2qyaf/hx0Qlb949ZnXd/HqdRra789k4d04yqp1Utkp8nxzTigedqzDq0XpbwsHkaUw+1F772xoujxnDOmEjmvS5e/70ou+xJbr+IGqO7OjW+Wjbieo3fXhsLree73ysSu3UAAAAAAAAAAAAAAAAAAMBSjR/6vXOoHhdzo7WsucTCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJjf///+xGPSJu9AzL8NxU0WjE6dkzXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38HAAD//zY6VNc=") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/154, 0x9a) 36.883021036s ago: executing program 5 (id=6443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) 35.894856876s ago: executing program 5 (id=6466): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0) 35.667703s ago: executing program 5 (id=6470): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 34.568222011s ago: executing program 5 (id=6480): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0) 34.495019023s ago: executing program 34 (id=6480): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0) 1.134725728s ago: executing program 3 (id=7421): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) unshare(0x2040400) ioctl$TCFLSH(r3, 0x540b, 0x2) 1.07265484s ago: executing program 3 (id=7422): mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$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") statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, 0x0) 1.03285754s ago: executing program 3 (id=7424): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0, r0}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f0000000080)) 999.187001ms ago: executing program 3 (id=7425): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='ext4_da_reserve_space\x00', r0, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 915.648493ms ago: executing program 3 (id=7428): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r2) writev(r0, &(0x7f0000000040), 0x0) 667.371497ms ago: executing program 4 (id=7436): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0, r0}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000), 0x0) 571.752039ms ago: executing program 3 (id=7438): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 517.4475ms ago: executing program 4 (id=7440): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 514.97409ms ago: executing program 1 (id=7442): syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000840)={{r1, r2+60000000}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)={[{@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@fat=@showexec}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0xfd, 0x2af, &(0x7f0000000900)="$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") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 510.31183ms ago: executing program 4 (id=7444): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 493.83522ms ago: executing program 6 (id=7445): keyctl$read(0xb, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 447.608772ms ago: executing program 1 (id=7446): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={r1, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 447.095872ms ago: executing program 6 (id=7447): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 434.859882ms ago: executing program 1 (id=7448): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r2) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 434.241982ms ago: executing program 7 (id=7449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) close_range(r0, r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) 411.846042ms ago: executing program 4 (id=7450): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newqdisc={0x24, 0x14, 0xf0b, 0x42, 0x2, {0x2, 0x0, 0x0, 0x0, {0x9, 0x9d501e9857c07b96}, {0x0, 0xfff3}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x4080) 390.404853ms ago: executing program 6 (id=7451): syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, '0#'}]}}}}}}}}, 0x0) 340.093214ms ago: executing program 6 (id=7452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 326.648354ms ago: executing program 4 (id=7453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_pgetevents(0x0, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf25020751ff", @ANYRES32=r2, @ANYBLOB="080002007f000001080027ae96d900021400030076657468305f743a54"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 307.462594ms ago: executing program 7 (id=7454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bond\x00', 0x8130}) 278.973085ms ago: executing program 6 (id=7455): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'rootmode'}, 0x0, 0xfffffffffffffee5) 278.611804ms ago: executing program 6 (id=7456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 160.681587ms ago: executing program 4 (id=7457): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8800, &(0x7f00000000c0)={[{@errors_remount}, {@mb_optimize_scan}, {@commit}]}, 0x1, 0x51d, &(0x7f00000001c0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWIUKWKHkHahsQbRbHjKHZKE/aQnrkisRIn9sgfwHlPHLhxQXDjshyQ+BGBNkgcXM14kvVm7Y21Sewo/nyk0byZN+vv98Xxe5nntV8AI+t6ROxHxEREfBIRs9n5XLbFB+0tue7xwb2Vw4N7K7lotT7+Vy6tT85Fx79JXMsesxgRP3oQ8dPcs3Ebu3sby9VqZTs7nm/WtuYbu3u31mvLa5W1yma5vLS4tPDe7XfL59bWN2oTWenrj/64/52fJ2nNZGc623Ge2k0vHMdJjEfEDy8i2BCMZe2ZGHYivJB8RLwaEW+mr//ZGEufTQDgKmu1ZqM123kMAFx1+XQOLJcvZXMBM5HPl0rtObzXYjpfrTeaN+/WdzZX23Nlc1HI312vVhayucK5KOSS48W0/OS4fOL4dkS8EhG/nJxKj0sr9erqMP/wAYARdu3E+P/fyfb4DwBcccVhJwAADFyP8X9/0HkAAIPj/h8ARo/xHwBGT3v8nxp2GgDAALn/B4DRY/wHgJHy0YcfJlvrMPv+69VPd3c26p/eWq00Nkq1nZXSSn17q7RWr6+l39lTO+3xqvX61uI7sfPZ3He3Gs35xu7enVp9Z7N5J/1e7zuVQnqVTxYAwDC98sbDv+SSEfn9qXSLjrUcCkPNDLho+WEnAAzN2LATAIbGal8wus5wj296AK6ILkv0PqXY7QNCrVardXEpARfsxlfM/8Oo6pj/97+AYcSY/4fRZf4fRlerlet3zf/o90IA4HIzxw/0eP//1Wz/2+zNgZ+snrzi/kVmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfb0fq/pWwt8JnI50uliJciYi4Kubvr1cpCRLwcEX+eLEwmx4tDzhkAOKv833PZ+l83Zt+eearq9WvHxYmI+NmvP/7VZ8vN5vafIiZy/548Ot+8n50vDz57AOB0R+N0uu+4kX98cG/laBtkPv/4fkQU2/EPDybi8Dj+eIyn+2IUImL6P7nsuC3XMXdxFvufR8SXu7U/FzPpHEh75dOT8ZPYLw00fv6p+Pm0rr1PfhZfOodcYNQ8TPqfD7q9/vJxPd13f/0X0x7q7LL+L3molcO0D3wS/6j/G+vR/13vN8Y7v/9BuzT1bN3nEV8djziKfdjR/xzFz/WI/3af8f/6tdff7FXX+k3EjegevzPWfLO2Nd/Y3bu1Xlteq6xVNsvlpcWlhfduv1ueT+eo53uPBv98/+bLveqS9k/3iF88pf3f7LP9D/7/yY+/8Zz4336rW/x8vPac+MmY+K0+4y9P/67Yqy6Jv9qj/ac9/zf7jP/ob3vPLBsOAAxPY3dvY7larWxfSGE8LuqRz6cQ/V38h+yHdSlyPkMh+fP/EqRxhkLyLFyCNLoWvjeoWBPRveoXb7V/TScjOn+xW60XitWtt/jonGbdgMvg+EUfEf8bdjIAAAAAAAAAAAAAAEBXg/jE0rDbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNX1RQAAAP//J2vIyg==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x0, &(0x7f00000000c0)}) epoll_pwait(r1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000000}) epoll_pwait2(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') rmdir(&(0x7f0000000040)='./bus\x00') 111.632738ms ago: executing program 1 (id=7458): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000", 0x17}], 0x1}, 0x20000800) 80.860189ms ago: executing program 7 (id=7459): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={r1, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) 72.233019ms ago: executing program 1 (id=7460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 25.225719ms ago: executing program 7 (id=7461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)="25d7fe", 0x3, 0x800, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 24.668989ms ago: executing program 1 (id=7462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100097"], 0x1c}}, 0x0) 19.11559ms ago: executing program 7 (id=7463): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, '0#'}]}}}}}}}}, 0x0) 0s ago: executing program 7 (id=7464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b920, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff7}, {0x6, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 363.583913][T19641] team0: Unable to change to the same mode the team is in [ 363.593035][T19641] tipc: Enabling of bearer rejected, already enabled [ 363.660131][ T3434] tipc: Node number set to 11578026 [ 363.867789][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5937'. [ 363.941162][T19665] tipc: Enabled bearer , priority 0 [ 363.957756][T19665] syzkaller0: entered promiscuous mode [ 363.963430][T19665] syzkaller0: entered allmulticast mode [ 363.979627][T19670] loop4: detected capacity change from 0 to 512 [ 363.994227][T19665] tipc: Resetting bearer [ 364.001314][T19662] tipc: Resetting bearer [ 364.008811][T19662] tipc: Disabling bearer [ 364.019392][T19670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.130766][T19679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5948'. [ 364.147822][T19679] team0: No ports can be present during mode change [ 364.166364][T19679] tipc: Enabling of bearer rejected, already enabled [ 364.522705][ T3413] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 364.544708][ T3413] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.650418][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5952'. [ 364.689130][T19697] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 365.127746][T19704] tipc: Enabled bearer , priority 0 [ 365.142241][T19704] syzkaller0: entered promiscuous mode [ 365.147767][T19704] syzkaller0: entered allmulticast mode [ 365.167188][T19704] tipc: Resetting bearer [ 365.195305][T19703] tipc: Resetting bearer [ 365.217337][T19703] tipc: Disabling bearer [ 365.226861][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5962'. [ 365.239659][T19719] team0: Unable to change to the same mode the team is in [ 365.247507][T19719] tipc: Enabling of bearer rejected, already enabled [ 365.268336][T19707] lo speed is unknown, defaulting to 1000 [ 365.304282][T19707] lo speed is unknown, defaulting to 1000 [ 365.418980][T19707] chnl_net:caif_netlink_parms(): no params data found [ 365.574702][T19707] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.581920][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.662643][T19707] bridge_slave_0: entered allmulticast mode [ 365.693234][T19743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5969'. [ 365.712860][T19707] bridge_slave_0: entered promiscuous mode [ 365.736674][T19707] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.743912][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.818346][T19707] bridge_slave_1: entered allmulticast mode [ 365.847938][T19707] bridge_slave_1: entered promiscuous mode [ 365.850936][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 365.867821][ T36] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.889342][T19707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.908982][T19707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.945986][T19707] team0: Port device team_slave_0 added [ 365.953439][T19707] team0: Port device team_slave_1 added [ 365.972886][T19707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.979882][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.005903][T19707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.017486][T19707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.024612][T19707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.050579][T19707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.092894][T19707] hsr_slave_0: entered promiscuous mode [ 366.099015][T19707] hsr_slave_1: entered promiscuous mode [ 366.105385][T19707] debugfs: 'hsr0' already exists in 'hsr' [ 366.111172][T19707] Cannot create hsr debugfs directory [ 366.144209][T19754] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5973'. [ 366.196845][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5974'. [ 366.212797][T19754] team0: No ports can be present during mode change [ 366.223249][T19754] tipc: Enabling of bearer rejected, already enabled [ 366.276031][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5979'. [ 366.301075][T19707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.337644][ T3413] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 366.355953][ T3413] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.378693][T19707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.409715][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 366.409807][ T29] audit: type=1400 audit(1757470576.046:1890): avc: denied { map } for pid=19782 comm="syz.0.5986" path="socket:[63816]" dev="sockfs" ino=63816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 366.440085][ T29] audit: type=1400 audit(1757470576.046:1891): avc: denied { accept } for pid=19782 comm="syz.0.5986" path="socket:[63816]" dev="sockfs" ino=63816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 366.583263][T19707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.862543][T19707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.886110][T19788] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 366.932704][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.969658][T19793] team0: Unable to change to the same mode the team is in [ 366.977491][T19793] tipc: Enabling of bearer rejected, already enabled [ 366.978783][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.014318][T19707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.032522][T19707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.049885][T19707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.064396][T19707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.188113][T19707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.219168][T19707] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.253003][T19707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.263486][T19707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.282103][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.289228][ T7537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.299142][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.306267][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.326383][T19824] team0: No ports can be present during mode change [ 367.333599][T19824] tipc: Enabling of bearer rejected, already enabled [ 367.391789][T19707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.519022][T19707] veth0_vlan: entered promiscuous mode [ 367.550534][T19707] veth1_vlan: entered promiscuous mode [ 367.565145][T19855] loop5: detected capacity change from 0 to 2048 [ 367.579207][T19707] veth0_macvtap: entered promiscuous mode [ 367.586636][T19707] veth1_macvtap: entered promiscuous mode [ 367.597937][T19707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.610125][T19707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.651770][T18979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.652021][ T29] audit: type=1400 audit(1757470577.296:1892): avc: denied { map } for pid=19854 comm="syz.5.6009" path="/34/file2/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 367.689544][T18979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.708444][T18977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.732558][T18977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.166720][T19902] program syz.5.6016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.176253][T19902] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 368.473273][ T29] audit: type=1326 audit(1757470578.116:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19909 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0163aeba9 code=0x7ffc0000 [ 368.511607][ T29] audit: type=1326 audit(1757470578.136:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19909 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0163aeba9 code=0x7ffc0000 [ 368.545746][ T29] audit: type=1326 audit(1757470578.156:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19909 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fe0163aeba9 code=0x7ffc0000 [ 368.569444][ T29] audit: type=1326 audit(1757470578.156:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19909 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0163aeba9 code=0x7ffc0000 [ 368.593078][ T29] audit: type=1326 audit(1757470578.156:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19909 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0163ad510 code=0x7ffc0000 [ 368.616589][ T29] audit: type=1326 audit(1757470578.156:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19909 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0163aeba9 code=0x7ffc0000 [ 368.640106][ T29] audit: type=1326 audit(1757470578.156:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19909 comm="syz.0.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0163ad80a code=0x7ffc0000 [ 368.766673][T19959] loop3: detected capacity change from 0 to 512 [ 368.870397][T19959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.899843][T19959] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.966877][T19959] 9pnet_fd: Insufficient options for proto=fd [ 369.294320][T20017] random: crng reseeded on system resumption [ 369.561286][T20031] netlink: 'syz.5.6034': attribute type 2 has an invalid length. [ 369.582542][T20033] __nla_validate_parse: 8 callbacks suppressed [ 369.582556][T20033] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6035'. [ 369.597902][T20033] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 369.655273][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6036'. [ 369.818543][T20053] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6043'. [ 370.242810][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6048'. [ 370.272136][T20075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6048'. [ 370.515005][T20084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6052'. [ 371.047126][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6063'. [ 371.977464][T20130] tipc: Enabled bearer , priority 0 [ 371.985008][T20130] syzkaller0: entered promiscuous mode [ 371.990665][T20130] syzkaller0: entered allmulticast mode [ 372.009421][T20130] tipc: Resetting bearer [ 372.018103][T20129] tipc: Resetting bearer [ 372.033399][T20129] tipc: Disabling bearer [ 372.171033][T20139] loop0: detected capacity change from 0 to 1024 [ 372.179484][T20139] EXT4-fs: Ignoring removed nobh option [ 372.185364][T20139] EXT4-fs: Ignoring removed bh option [ 372.566519][T20169] loop3: detected capacity change from 0 to 1024 [ 372.573546][T20169] EXT4-fs: Ignoring removed nobh option [ 372.579116][T20169] EXT4-fs: Ignoring removed bh option [ 373.244498][T20201] loop5: detected capacity change from 0 to 512 [ 373.314231][T20205] loop5: detected capacity change from 0 to 1024 [ 373.321102][T20205] EXT4-fs: Ignoring removed nobh option [ 373.326697][T20205] EXT4-fs: Ignoring removed bh option [ 373.442939][T20209] loop0: detected capacity change from 0 to 512 [ 373.466265][T20209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 373.520849][T20209] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.546238][T20209] 9pnet_fd: Insufficient options for proto=fd [ 373.574091][T20220] loop3: detected capacity change from 0 to 512 [ 373.580636][T20220] EXT4-fs: Ignoring removed nobh option [ 373.607010][T20220] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6101: iget: bad i_size value: 38620345925642 [ 373.625487][T20220] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6101: couldn't read orphan inode 15 (err -117) [ 373.731883][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 373.782153][T20220] EXT4-fs (loop3): shut down requested (0) [ 373.806185][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 373.806201][ T29] audit: type=1400 audit(1757470583.436:1923): avc: denied { search } for pid=2976 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.923691][ T29] audit: type=1400 audit(1757470583.556:1924): avc: denied { override_creds } for pid=20221 comm="syz.4.6102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 374.664867][T20249] loop0: detected capacity change from 0 to 1024 [ 374.684444][T20249] EXT4-fs: Ignoring removed nobh option [ 374.690097][T20249] EXT4-fs: Ignoring removed bh option [ 374.939079][T20272] loop0: detected capacity change from 0 to 256 [ 374.972324][T20272] FAT-fs (loop0): codepage cp936 not found [ 375.008066][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6117'. [ 375.062151][T20284] loop4: detected capacity change from 0 to 512 [ 375.072996][T20284] EXT4-fs: dax option not supported [ 375.079518][T20286] loop0: detected capacity change from 0 to 128 [ 375.113465][T20286] EXT4-fs mount: 19 callbacks suppressed [ 375.113512][T20286] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.171606][T20290] loop1: detected capacity change from 0 to 164 [ 375.227991][T20286] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 375.326193][T20295] loop3: detected capacity change from 0 to 1024 [ 375.334351][T20295] EXT4-fs: Ignoring removed nobh option [ 375.340070][T20295] EXT4-fs: Ignoring removed bh option [ 375.354941][T20295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.373619][T20298] netlink: 'syz.0.6121': attribute type 2 has an invalid length. [ 375.381554][T20298] netlink: 'syz.0.6121': attribute type 1 has an invalid length. [ 375.389283][T20298] netlink: 'syz.0.6121': attribute type 2 has an invalid length. [ 375.509143][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.758602][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6130'. [ 376.214251][T11797] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.309600][T20342] loop3: detected capacity change from 0 to 1024 [ 376.323890][T20342] EXT4-fs: Ignoring removed nobh option [ 376.329557][T20342] EXT4-fs: Ignoring removed bh option [ 376.343114][T20342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.385987][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.464822][T20363] vhci_hcd: invalid port number 241 [ 376.470144][T20363] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 376.480342][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6143'. [ 376.674489][T20384] netlink: 'syz.4.6156': attribute type 3 has an invalid length. [ 376.763084][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6158'. [ 376.875965][T20410] loop3: detected capacity change from 0 to 512 [ 377.321813][T20410] EXT4-fs (loop3): orphan cleanup on readonly fs [ 377.358080][T20410] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6165: iget: bad extended attribute block 1 [ 377.455775][T20410] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6165: couldn't read orphan inode 15 (err -117) [ 377.511628][T20410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.578741][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.753607][T20417] lo speed is unknown, defaulting to 1000 [ 377.889767][T20441] loop4: detected capacity change from 0 to 256 [ 377.896992][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6171'. [ 377.968505][T20441] FAT-fs (loop4): codepage cp862 not found [ 378.130234][T20447] loop4: detected capacity change from 0 to 512 [ 378.163461][T20447] EXT4-fs: Ignoring removed mblk_io_submit option [ 378.177418][T20447] EXT4-fs: test_dummy_encryption option not supported [ 378.216912][T20417] lo speed is unknown, defaulting to 1000 [ 378.359052][T20417] chnl_net:caif_netlink_parms(): no params data found [ 378.587814][T20462] loop5: detected capacity change from 0 to 1024 [ 378.631901][T20462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.649701][T20417] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.656827][T20417] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.663865][T20462] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.674858][T20417] bridge_slave_0: entered allmulticast mode [ 378.682167][T20417] bridge_slave_0: entered promiscuous mode [ 378.689917][T20417] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.697010][T20417] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.704400][T20417] bridge_slave_1: entered allmulticast mode [ 378.711527][T20417] bridge_slave_1: entered promiscuous mode [ 378.741450][T20417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.753211][T20417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.783855][T20417] team0: Port device team_slave_0 added [ 378.790862][T20417] team0: Port device team_slave_1 added [ 378.815204][T20417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.822214][T20417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.848189][T20417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.860722][T20417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.867753][T20417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.893771][T20417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.944240][T20417] hsr_slave_0: entered promiscuous mode [ 378.957972][T20417] hsr_slave_1: entered promiscuous mode [ 378.964339][T20417] debugfs: 'hsr0' already exists in 'hsr' [ 378.970141][T20417] Cannot create hsr debugfs directory [ 378.981669][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.226959][T20417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.397772][T20486] loop5: detected capacity change from 0 to 164 [ 379.717480][T20417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.762831][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'. [ 379.784373][T20417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.873620][T20417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.971907][T20417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.024677][T20417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.038508][T20417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.057299][T20417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.225804][T20417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.403248][T20417] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.425812][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.432920][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.442883][T20516] serio: Serial port ptm1 [ 380.470924][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.478043][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.517766][T20519] blkio.reset_stats is deprecated [ 380.669234][T20417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.767738][T20543] rdma_rxe: rxe_newlink: failed to add lo [ 381.149261][T20417] veth0_vlan: entered promiscuous mode [ 381.160061][T20417] veth1_vlan: entered promiscuous mode [ 381.175803][T20552] loop4: detected capacity change from 0 to 512 [ 381.187175][T20417] veth0_macvtap: entered promiscuous mode [ 381.199489][T20417] veth1_macvtap: entered promiscuous mode [ 381.199572][T20552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 381.210736][T20417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.222106][T20417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.230417][T20552] System zones: 1-12 [ 381.234558][T20552] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.6202: Directory hole found for htree index block 0 [ 381.245937][T18977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.270177][T18977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.271631][T20552] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 381.283109][T18977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.287861][T20552] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.6202: Directory hole found for htree index block 0 [ 381.296470][T18977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.312129][T20552] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 381.339393][T20552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.393835][T11592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.704812][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6211'. [ 381.758678][T20576] team0: No ports can be present during mode change [ 381.798060][T20576] vlan0: entered promiscuous mode [ 381.826316][T20576] team0: Port device vlan0 added [ 381.834376][T20584] loop3: detected capacity change from 0 to 512 [ 381.865123][T20589] tipc: Started in network mode [ 381.870128][T20589] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 381.877620][T20589] tipc: Enabled bearer , priority 0 [ 381.888921][T20588] loop5: detected capacity change from 0 to 512 [ 381.903997][T20588] EXT4-fs: Ignoring removed nobh option [ 382.112921][T20588] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.6217: iget: bad i_size value: 38620345925642 [ 382.128513][T20584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 382.152031][T20584] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6215: iget: bad extended attribute block 1 [ 382.173041][T20588] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6217: couldn't read orphan inode 15 (err -117) [ 382.196697][T20605] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6219'. [ 382.216690][T20584] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6215: couldn't read orphan inode 15 (err -117) [ 382.234014][T20604] loop0: detected capacity change from 0 to 1024 [ 382.259608][T20588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.277077][T20584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 382.298552][T20604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.320878][T20588] EXT4-fs (loop5): shut down requested (0) [ 382.334858][T20604] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.366220][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.387080][T20609] tipc: Enabled bearer , priority 0 [ 382.387236][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.394349][T20609] syzkaller0: entered promiscuous mode [ 382.408187][T20609] syzkaller0: entered allmulticast mode [ 382.502282][T20609] tipc: Resetting bearer [ 382.552609][T20608] tipc: Resetting bearer [ 382.570669][T20608] tipc: Disabling bearer [ 382.990046][ T3384] tipc: Node number set to 11578026 [ 382.996159][T20633] loop4: detected capacity change from 0 to 512 [ 383.024026][T20633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.080811][T20628] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6227'. [ 383.114206][T20633] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.190948][T20417] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.357322][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6232'. [ 383.367590][T11592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.425126][T20647] loop5: detected capacity change from 0 to 512 [ 383.438545][T20651] loop3: detected capacity change from 0 to 512 [ 383.443960][T20647] EXT4-fs: Ignoring removed nobh option [ 383.472463][T20647] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.6235: iget: bad i_size value: 38620345925642 [ 383.485978][T20651] EXT4-fs (loop3): orphan cleanup on readonly fs [ 383.496289][T20647] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6235: couldn't read orphan inode 15 (err -117) [ 383.502508][T20651] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6236: iget: bad extended attribute block 1 [ 383.519180][T20647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.527748][T20651] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6236: couldn't read orphan inode 15 (err -117) [ 383.560713][T20651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 383.585847][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.586308][T20647] EXT4-fs (loop5): shut down requested (0) [ 383.625857][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.640169][ T29] audit: type=1400 audit(1757470593.276:1925): avc: denied { associate } for pid=20664 comm="syz.1.6240" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 383.660338][T20652] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6233'. [ 383.948762][T20680] tipc: Enabled bearer , priority 0 [ 384.115848][T20682] syzkaller0: entered promiscuous mode [ 384.121426][T20682] syzkaller0: entered allmulticast mode [ 384.228112][ T29] audit: type=1400 audit(1757470593.816:1926): avc: denied { setopt } for pid=20683 comm="syz.5.6247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 384.285578][T20666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6241'. [ 384.446262][T20672] tipc: Resetting bearer [ 384.517129][T20671] tipc: Resetting bearer [ 384.553374][T20671] tipc: Disabling bearer [ 384.698924][T20699] loop4: detected capacity change from 0 to 512 [ 384.760426][T20701] rdma_rxe: rxe_newlink: failed to add lo [ 384.782270][T20699] EXT4-fs (loop4): orphan cleanup on readonly fs [ 384.788912][T20699] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6252: iget: bad extended attribute block 1 [ 384.854407][T20699] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6252: couldn't read orphan inode 15 (err -117) [ 384.901224][T20703] loop3: detected capacity change from 0 to 512 [ 384.936779][T20699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 384.954640][T20705] loop5: detected capacity change from 0 to 512 [ 384.965771][T20703] EXT4-fs: Ignoring removed nobh option [ 385.015238][T11592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.027571][T20705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 385.049906][T20705] System zones: 1-12 [ 385.075158][T20705] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.6254: Directory hole found for htree index block 0 [ 385.126242][T20705] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 385.139294][T20703] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6253: iget: bad i_size value: 38620345925642 [ 385.159152][T20705] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.6254: Directory hole found for htree index block 0 [ 385.178006][T20710] loop4: detected capacity change from 0 to 512 [ 385.185020][T20703] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6253: couldn't read orphan inode 15 (err -117) [ 385.199534][T20705] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 385.219107][T20703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.236341][T20710] EXT4-fs (loop4): orphan cleanup on readonly fs [ 385.247967][T20705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.270153][T20710] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6255: iget: bad extended attribute block 1 [ 385.285581][T20703] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.6253: iget: bad i_size value: 38620345925642 [ 385.298402][T20710] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6255: couldn't read orphan inode 15 (err -117) [ 385.318637][T20710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 385.337139][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.355614][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.368876][T11592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.649639][T20758] program syz.4.6275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.677710][T20761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.686525][T20761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.237324][T20766] loop4: detected capacity change from 0 to 1024 [ 386.248458][T20766] EXT4-fs: Ignoring removed nobh option [ 386.254146][T20766] EXT4-fs: Ignoring removed bh option [ 386.264828][T20768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.280211][T20768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.289555][T20766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.350928][T11592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.486523][ T29] audit: type=1326 audit(1757470596.126:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ed3deba9 code=0x7ffc0000 [ 386.510099][ T29] audit: type=1326 audit(1757470596.126:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ed3deba9 code=0x7ffc0000 [ 386.549730][ T29] audit: type=1326 audit(1757470596.176:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f94ed3deba9 code=0x7ffc0000 [ 386.573431][ T29] audit: type=1326 audit(1757470596.176:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20794 comm="syz.1.6291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ed3deba9 code=0x7ffc0000 [ 386.640579][T20793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6290'. [ 387.283474][T20804] lo speed is unknown, defaulting to 1000 [ 387.320799][T20804] lo speed is unknown, defaulting to 1000 [ 387.683606][T20837] loop0: detected capacity change from 0 to 512 [ 387.966553][T20837] EXT4-fs (loop0): orphan cleanup on readonly fs [ 387.974133][T20837] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6302: iget: bad extended attribute block 1 [ 388.195932][T20837] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6302: couldn't read orphan inode 15 (err -117) [ 388.248997][T20837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 388.396808][T20417] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.464452][T20844] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6304'. [ 388.485874][T20804] chnl_net:caif_netlink_parms(): no params data found [ 388.498397][T20852] loop0: detected capacity change from 0 to 512 [ 388.505824][T20852] EXT4-fs: Ignoring removed nobh option [ 388.518530][T20852] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.6307: iget: bad i_size value: 38620345925642 [ 388.551768][T20852] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6307: couldn't read orphan inode 15 (err -117) [ 388.581053][T20852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.611499][T20852] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.6307: iget: bad i_size value: 38620345925642 [ 388.690652][T20804] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.697857][T20804] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.708555][T20417] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.752794][T20804] bridge_slave_0: entered allmulticast mode [ 388.765347][T20804] bridge_slave_0: entered promiscuous mode [ 388.798060][T20804] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.805388][T20804] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.828348][T20877] loop0: detected capacity change from 0 to 512 [ 388.837419][T20804] bridge_slave_1: entered allmulticast mode [ 388.843546][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6315'. [ 388.853216][T20804] bridge_slave_1: entered promiscuous mode [ 388.860168][T20877] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 388.879132][T20877] EXT4-fs (loop0): invalid journal inode [ 388.887328][T20877] EXT4-fs (loop0): can't get journal size [ 388.897648][T20804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.908585][T20877] EXT4-fs (loop0): 1 truncate cleaned up [ 388.927860][T20877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.931899][T20804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.005527][ T29] audit: type=1400 audit(1757471111.638:1931): avc: denied { mounton } for pid=20876 comm="syz.0.6313" path="/22/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 389.030795][T20877] loop0: detected capacity change from 512 to 0 [ 389.054028][ C0] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 2 [ 389.063710][ C0] I/O error, dev loop0, sector 26 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.073359][ C0] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 389.083203][T20877] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #32: block 12: comm syz.0.6313: unable to read itable block [ 389.104225][T20804] team0: Port device team_slave_0 added [ 389.131031][T20804] team0: Port device team_slave_1 added [ 389.140444][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 389.149990][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 389.159486][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 389.169995][T20877] EXT4-fs (loop0): I/O error while writing superblock [ 389.211221][T20804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.218224][T20804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.244296][T20804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.274298][ C1] I/O error, dev loop0, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 389.283873][T20877] EXT4-fs error (device loop0): __ext4_find_entry:1615: inode #2: comm syz.0.6313: reading directory lblock 0 [ 389.386334][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 389.395907][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 389.405387][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 389.413675][T20877] EXT4-fs (loop0): I/O error while writing superblock [ 389.453057][ C0] I/O error, dev loop0, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 389.465492][T20804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.472525][T20804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.482554][T20417] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 389.498517][T20804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.514401][ C0] I/O error, dev loop0, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 389.569141][T20417] EXT4-fs error (device loop0): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 389.698168][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 389.703205][T20804] hsr_slave_0: entered promiscuous mode [ 389.706735][T20417] EXT4-fs (loop0): I/O error while writing superblock [ 389.716898][T20804] hsr_slave_1: entered promiscuous mode [ 389.718959][T20417] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: IO failure [ 389.725049][T20804] debugfs: 'hsr0' already exists in 'hsr' [ 389.739084][T20804] Cannot create hsr debugfs directory [ 389.780418][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 389.788755][T20417] EXT4-fs (loop0): I/O error while writing superblock [ 389.795622][T20417] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 389.871600][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 389.879918][T20417] EXT4-fs (loop0): I/O error while writing superblock [ 389.914048][ T126] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 389.940328][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 389.950495][ T126] EXT4-fs (loop0): I/O error while writing superblock [ 389.966978][T20417] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.990071][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 389.998546][T20417] EXT4-fs (loop0): I/O error while writing superblock [ 390.030953][T20804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.151510][T20804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.229665][T20804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.266354][ T126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.321383][T20804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.355968][ T126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.426780][T20804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.464232][ T126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.489083][T20804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.507924][T20804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.535538][ T126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.556960][T20804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.568558][T20910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6325'. [ 390.598462][T20897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6320'. [ 390.644157][ T126] bridge_slave_1: left allmulticast mode [ 390.649862][ T126] bridge_slave_1: left promiscuous mode [ 390.655617][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.690643][ T126] bridge_slave_0: left allmulticast mode [ 390.696356][ T126] bridge_slave_0: left promiscuous mode [ 390.702283][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.711938][T20933] loop3: detected capacity change from 0 to 512 [ 390.764923][T20933] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 390.803829][T20933] EXT4-fs (loop3): invalid journal inode [ 390.809619][T20933] EXT4-fs (loop3): can't get journal size [ 390.879712][T20933] EXT4-fs (loop3): 1 truncate cleaned up [ 390.887137][T20933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.903976][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.914097][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.927914][ T126] bond0 (unregistering): Released all slaves [ 391.026438][T20901] lo speed is unknown, defaulting to 1000 [ 391.211714][T20901] lo speed is unknown, defaulting to 1000 [ 391.338058][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.364306][ T126] tipc: Disabling bearer [ 391.373019][ T126] tipc: Left network mode [ 391.433969][T20804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.455435][ T126] hsr_slave_0: left promiscuous mode [ 391.461491][ T126] hsr_slave_1: left promiscuous mode [ 391.467230][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.474654][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.482361][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.489819][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.493602][ T126] veth1_macvtap: left promiscuous mode [ 391.493639][ T126] veth0_macvtap: left promiscuous mode [ 391.493676][ T126] veth1_vlan: left promiscuous mode [ 391.548452][ T126] team0 (unregistering): Port device vlan0 removed [ 391.569102][ T126] team0 (unregistering): Port device team_slave_1 removed [ 391.572536][ T126] team0 (unregistering): Port device team_slave_0 removed [ 391.615317][T20804] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.681034][T20901] chnl_net:caif_netlink_parms(): no params data found [ 391.708327][ T1569] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.708394][ T1569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.709872][ T1569] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.709996][ T1569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.771386][T20901] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.771419][T20901] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.771537][T20901] bridge_slave_0: entered allmulticast mode [ 391.772289][T20901] bridge_slave_0: entered promiscuous mode [ 391.775259][T20901] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.775343][T20901] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.775602][T20901] bridge_slave_1: entered allmulticast mode [ 391.776155][T20901] bridge_slave_1: entered promiscuous mode [ 391.816414][T20901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.817806][T20901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.857678][T20901] team0: Port device team_slave_0 added [ 391.864594][T20901] team0: Port device team_slave_1 added [ 391.895685][T20901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.895702][T20901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.895729][T20901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.896450][T20901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.896462][T20901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.896488][T20901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.905876][T20962] tipc: Started in network mode [ 391.905988][T20962] tipc: Node identity 925d45f9faf, cluster identity 4711 [ 391.906116][T20962] tipc: Enabled bearer , priority 0 [ 391.906462][T20962] syzkaller0: entered promiscuous mode [ 391.906480][T20962] syzkaller0: entered allmulticast mode [ 391.910286][T20962] tipc: Resetting bearer [ 391.951496][T20961] tipc: Resetting bearer [ 391.965895][T20961] tipc: Disabling bearer [ 391.983813][T20804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.983834][T20804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.074085][T20901] hsr_slave_0: entered promiscuous mode [ 392.075370][T20901] hsr_slave_1: entered promiscuous mode [ 392.075595][T20901] debugfs: 'hsr0' already exists in 'hsr' [ 392.075609][T20901] Cannot create hsr debugfs directory [ 392.106337][T20804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.261390][T20901] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.281183][T20901] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.283583][T20901] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.292005][T20901] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.395870][T20901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.405602][T20901] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.928937][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.967910][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.976678][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.983796][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.073684][T20998] loop5: detected capacity change from 0 to 1024 [ 393.100531][T20998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.113611][T20901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.128039][T20998] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.182779][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.240286][T20804] veth0_vlan: entered promiscuous mode [ 393.254869][T20804] veth1_vlan: entered promiscuous mode [ 393.283349][T20901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.303164][T20804] veth0_macvtap: entered promiscuous mode [ 393.332801][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6350'. [ 393.351632][T20804] veth1_macvtap: entered promiscuous mode [ 393.381985][T20804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.397491][T20804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.414657][T18981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.431397][T18981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.459790][T18981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.470599][T18981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.489008][T21036] loop3: detected capacity change from 0 to 164 [ 393.521729][T21043] loop4: detected capacity change from 0 to 512 [ 393.535967][T20901] veth0_vlan: entered promiscuous mode [ 393.548686][T20901] veth1_vlan: entered promiscuous mode [ 393.558912][T21043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.585630][T20901] veth0_macvtap: entered promiscuous mode [ 393.595447][T20901] veth1_macvtap: entered promiscuous mode [ 393.601635][T21043] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.620878][T20901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.632505][T20901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.657611][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.677294][ T4443] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.691701][ T4443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.713702][ T29] audit: type=1400 audit(1757471116.358:1932): avc: denied { unmount } for pid=20804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 393.737105][ T4443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.746133][ T4443] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.292588][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6359'. [ 394.314459][T21077] netlink: 'syz.3.6360': attribute type 21 has an invalid length. [ 394.375581][T21077] netlink: 'syz.3.6360': attribute type 1 has an invalid length. [ 394.457083][T21085] loop3: detected capacity change from 0 to 256 [ 394.473657][T21087] program syz.5.6364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.624661][T21100] loop5: detected capacity change from 0 to 1024 [ 394.634149][T21100] EXT4-fs: Ignoring removed nobh option [ 394.639768][T21100] EXT4-fs: Ignoring removed bh option [ 394.653984][T21100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.684233][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.767386][T21109] tipc: Started in network mode [ 394.772340][T21109] tipc: Node identity c21ba7b8a81c, cluster identity 4711 [ 394.779558][T21109] tipc: Enabled bearer , priority 0 [ 394.782251][T21115] loop5: detected capacity change from 0 to 256 [ 394.842372][T21109] syzkaller0: entered promiscuous mode [ 394.847888][T21109] syzkaller0: entered allmulticast mode [ 394.860164][T21109] tipc: Resetting bearer [ 394.866704][T21108] tipc: Resetting bearer [ 394.874317][T21108] tipc: Disabling bearer [ 394.926202][T21130] loop4: detected capacity change from 0 to 1024 [ 394.933196][T21130] EXT4-fs: Ignoring removed nobh option [ 394.938788][T21130] EXT4-fs: Ignoring removed bh option [ 394.951594][T21130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.991692][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.551119][ T3364] IPVS: starting estimator thread 0... [ 395.640046][T21145] IPVS: using max 2064 ests per chain, 103200 per kthread [ 395.668400][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6395'. [ 395.878390][T21187] loop5: detected capacity change from 0 to 128 [ 395.900648][T21187] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.927262][T21190] loop3: detected capacity change from 0 to 512 [ 395.955219][T21190] EXT4-fs: Ignoring removed nobh option [ 395.967040][T21187] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.019751][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6408'. [ 396.028785][T21190] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6406: iget: bad i_size value: 38620345925642 [ 396.062881][T21190] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6406: couldn't read orphan inode 15 (err -117) [ 396.095952][T21190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.168124][ T29] audit: type=1400 audit(1757471118.808:1933): avc: denied { execute } for pid=21185 comm="syz.5.6405" path="/118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 396.366158][T19208] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.934239][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.946976][T21209] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in; [ 396.946976][T21209] program syz.6.6412 not setting count and/or reply_len properly [ 396.971362][T21210] loop5: detected capacity change from 0 to 128 [ 397.515306][T21217] program syz.3.6416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.520338][T21235] No control pipe specified [ 398.636533][ T29] audit: type=1400 audit(1757471121.278:1934): avc: denied { read write } for pid=21226 comm="syz.5.6422" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 398.660634][ T29] audit: type=1400 audit(1757471121.278:1935): avc: denied { open } for pid=21226 comm="syz.5.6422" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 398.684429][ T29] audit: type=1400 audit(1757471121.278:1936): avc: denied { ioctl } for pid=21226 comm="syz.5.6422" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 398.788629][T21233] tipc: Enabled bearer , priority 0 [ 398.795939][T21233] syzkaller0: entered promiscuous mode [ 398.801495][T21233] syzkaller0: entered allmulticast mode [ 398.860787][T21246] loop5: detected capacity change from 0 to 256 [ 398.889583][T21233] tipc: Resetting bearer [ 398.930224][T21231] tipc: Resetting bearer [ 398.963367][T21231] tipc: Disabling bearer [ 398.988504][T21253] loop5: detected capacity change from 0 to 512 [ 399.034410][T21253] EXT4-fs: Ignoring removed oldalloc option [ 399.060776][T21253] EXT4-fs: Ignoring removed bh option [ 399.071900][T21253] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.6429: corrupted in-inode xattr: e_value size too large [ 399.111904][T21253] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6429: couldn't read orphan inode 15 (err -117) [ 399.176561][T21260] loop6: detected capacity change from 0 to 512 [ 399.197284][T21260] EXT4-fs: Ignoring removed nobh option [ 399.220356][T21253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.246812][T21260] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6432: iget: bad i_size value: 38620345925642 [ 399.276620][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.286436][T21260] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6432: couldn't read orphan inode 15 (err -117) [ 399.310622][T21260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.381439][T21260] EXT4-fs (loop6): shut down requested (0) [ 399.389271][T21281] loop5: detected capacity change from 0 to 256 [ 399.400204][T21279] loop3: detected capacity change from 0 to 1024 [ 399.406943][T21279] EXT4-fs: Ignoring removed nobh option [ 399.412623][T21279] EXT4-fs: Ignoring removed bh option [ 399.439224][T21285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6442'. [ 399.453416][T21279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.473057][T20901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.510921][T21285] tipc: Enabling of bearer rejected, already enabled [ 399.549388][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.635090][T21300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6449'. [ 399.663090][T21300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6449'. [ 399.934274][T21312] loop3: detected capacity change from 0 to 256 [ 400.052094][T21318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6456'. [ 400.065035][T21318] tipc: Enabling of bearer rejected, already enabled [ 400.222484][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6465'. [ 400.458030][T21330] loop6: detected capacity change from 0 to 164 [ 400.469132][T21342] loop5: detected capacity change from 0 to 512 [ 400.534144][T21342] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 400.547731][T21342] EXT4-fs (loop5): invalid journal inode [ 400.571327][T21342] EXT4-fs (loop5): can't get journal size [ 400.617142][T21342] EXT4-fs (loop5): 1 truncate cleaned up [ 400.624875][T21342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.668347][ T29] audit: type=1400 audit(1757471123.308:1937): avc: denied { unmount } for pid=19208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 400.693752][T19208] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 400.709315][ T29] audit: type=1400 audit(1757471123.338:1938): avc: denied { unlink } for pid=19208 comm="syz-executor" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 400.744473][T19208] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 400.759283][T21352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6471'. [ 400.770133][T21352] tipc: Enabling of bearer rejected, already enabled [ 400.819597][ T29] audit: type=1400 audit(1757471123.458:1939): avc: denied { create } for pid=21348 comm="syz.4.6469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 401.116654][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.223176][T21367] bridge0: port 3(batadv1) entered blocking state [ 401.229733][T21367] bridge0: port 3(batadv1) entered disabled state [ 401.236322][T21367] batadv1: entered allmulticast mode [ 401.242502][T21367] batadv1: entered promiscuous mode [ 401.303702][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.437621][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.573925][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.665442][ T56] bridge_slave_1: left allmulticast mode [ 401.671178][ T56] bridge_slave_1: left promiscuous mode [ 401.676861][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.701395][ T56] bridge_slave_0: left allmulticast mode [ 401.707076][ T56] bridge_slave_0: left promiscuous mode [ 401.712942][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.724209][T18977] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 401.733488][T18977] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 401.739670][T19208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.872501][T21372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.880985][T21372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.892963][T21378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6483'. [ 401.912518][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.931993][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.945695][ T56] bond0 (unregistering): Released all slaves [ 401.957733][T21378] vlan0: entered promiscuous mode [ 401.967977][T21378] team0: Port device vlan0 added [ 401.977320][T21378] tipc: Enabled bearer , priority 0 [ 401.993199][ T56] tipc: Disabling bearer [ 402.004135][ T56] tipc: Left network mode [ 402.038753][ T56] hsr_slave_0: left promiscuous mode [ 402.045622][ T56] hsr_slave_1: left promiscuous mode [ 402.051604][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.059088][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.066947][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.074385][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.084820][ T56] veth1_macvtap: left promiscuous mode [ 402.090384][ T56] veth0_macvtap: left promiscuous mode [ 402.095918][ T56] veth1_vlan: left promiscuous mode [ 402.143361][ T56] team0 (unregistering): Port device vlan0 removed [ 402.165174][ T56] team0 (unregistering): Port device team_slave_1 removed [ 402.175532][ T56] team0 (unregistering): Port device team_slave_0 removed [ 402.213477][T21380] lo speed is unknown, defaulting to 1000 [ 402.246441][T21380] lo speed is unknown, defaulting to 1000 [ 402.306613][T21380] chnl_net:caif_netlink_parms(): no params data found [ 402.343613][T21380] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.350753][T21380] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.357889][T21380] bridge_slave_0: entered allmulticast mode [ 402.364498][T21380] bridge_slave_0: entered promiscuous mode [ 402.371389][T21380] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.378539][T21380] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.385791][T21380] bridge_slave_1: entered allmulticast mode [ 402.392495][T21380] bridge_slave_1: entered promiscuous mode [ 402.404996][T21403] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 402.432126][T21380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.450310][T21380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.472041][T21380] team0: Port device team_slave_0 added [ 402.482876][T21380] team0: Port device team_slave_1 added [ 402.529841][T21380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.536934][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.562944][T21380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.582790][T21380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.589786][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.594307][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6494'. [ 402.615767][T21380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.635404][T21417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6494'. [ 402.685328][T21380] hsr_slave_0: entered promiscuous mode [ 402.699475][T21380] hsr_slave_1: entered promiscuous mode [ 402.711731][T21380] debugfs: 'hsr0' already exists in 'hsr' [ 402.717544][T21380] Cannot create hsr debugfs directory [ 402.814221][T21380] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 402.823326][T21380] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.835433][T21380] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.842336][ T29] audit: type=1400 audit(1757471125.478:1940): avc: denied { bind } for pid=21441 comm="syz.1.6506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.859312][T21444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.868988][T21444] IPv6: NLM_F_CREATE should be set when creating new route [ 402.885181][T21380] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.965797][T21460] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.997046][T21463] loop4: detected capacity change from 0 to 1024 [ 403.004748][T21463] EXT4-fs: Ignoring removed nobh option [ 403.010410][T21463] EXT4-fs: Ignoring removed bh option [ 403.024328][T21463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.077344][T21380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.090497][ T3384] tipc: Node number set to 1756186105 [ 403.109055][T21380] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.161086][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.179561][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.186783][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.311076][T21380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.321514][T21380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.393664][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.400978][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.472771][T21380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.609844][T21380] veth0_vlan: entered promiscuous mode [ 403.619347][T21380] veth1_vlan: entered promiscuous mode [ 403.638260][T21380] veth0_macvtap: entered promiscuous mode [ 403.649743][T21380] veth1_macvtap: entered promiscuous mode [ 403.665976][T21380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.678307][T21380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.692048][ T4443] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.701405][ T4443] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.711967][ T4443] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.777191][ T4443] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.046514][T21516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.752406][T21531] loop6: detected capacity change from 0 to 128 [ 405.105917][T21536] syzkaller0: entered promiscuous mode [ 405.111631][T21536] syzkaller0: entered allmulticast mode [ 405.506884][ T29] audit: type=1326 audit(1757471128.148:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.7.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74b2eba9 code=0x7ffc0000 [ 405.534276][ T29] audit: type=1326 audit(1757471128.168:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.7.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0c74b2eba9 code=0x7ffc0000 [ 405.557923][ T29] audit: type=1326 audit(1757471128.168:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.7.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74b2eba9 code=0x7ffc0000 [ 405.581460][ T29] audit: type=1326 audit(1757471128.168:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.7.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c74b2eba9 code=0x7ffc0000 [ 405.625998][T21567] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 406.042692][T21641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.044417][T21639] loop3: detected capacity change from 0 to 1024 [ 406.058046][T21639] EXT4-fs: Ignoring removed nobh option [ 406.063745][T21639] EXT4-fs: Ignoring removed bh option [ 406.069539][T21641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.110458][T21639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.144565][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.301243][T21666] lo speed is unknown, defaulting to 1000 [ 406.354180][T21666] lo speed is unknown, defaulting to 1000 [ 406.511163][T21668] tipc: Enabled bearer , priority 0 [ 406.565666][T21673] syzkaller0: entered promiscuous mode [ 406.571417][T21673] syzkaller0: entered allmulticast mode [ 406.630931][T21665] tipc: Resetting bearer [ 406.648791][T21665] tipc: Disabling bearer [ 406.654862][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6592'. [ 407.028987][T21713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6606'. [ 407.146222][T21734] loop7: detected capacity change from 0 to 512 [ 407.165016][T21734] EXT4-fs: Ignoring removed nobh option [ 407.183117][T21734] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.6617: iget: bad i_size value: 38620345925642 [ 407.198620][T21734] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6617: couldn't read orphan inode 15 (err -117) [ 407.213135][T21734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.227865][T21734] EXT4-fs (loop7): shut down requested (0) [ 407.235474][T21737] loop3: detected capacity change from 0 to 164 [ 407.255239][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.276076][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6622'. [ 407.509242][T21754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.517857][T21754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.307273][T21782] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 408.333152][T21786] netlink: 'syz.3.6640': attribute type 3 has an invalid length. [ 408.733649][T21810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.756060][T21810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.934820][ T29] audit: type=1400 audit(1757471131.558:1945): avc: denied { execute_no_trans } for pid=21831 comm="syz.3.6663" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=71275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 408.984409][T21839] netlink: 'syz.3.6665': attribute type 3 has an invalid length. [ 409.465968][T21859] loop3: detected capacity change from 0 to 512 [ 409.472706][T21859] EXT4-fs: Ignoring removed nobh option [ 409.485720][T21859] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.6674: iget: bad i_size value: 38620345925642 [ 409.487013][T21864] netlink: 'syz.7.6676': attribute type 3 has an invalid length. [ 409.506503][T21859] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6674: couldn't read orphan inode 15 (err -117) [ 409.529324][T21859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.565343][T21859] EXT4-fs (loop3): shut down requested (0) [ 409.603831][T21871] loop7: detected capacity change from 0 to 1024 [ 409.615682][T21871] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 409.624857][T21871] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 409.634312][T21871] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6679: Failed to acquire dquot type 0 [ 409.648167][T21871] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 409.653473][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.666064][T21871] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6679: corrupted inode contents [ 409.689114][ T29] audit: type=1400 audit(1757471132.328:1946): avc: denied { map } for pid=21866 comm="syz.6.6677" path="socket:[71308]" dev="sockfs" ino=71308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 409.752375][T21875] loop6: detected capacity change from 0 to 512 [ 409.759410][T21871] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.6679: mark_inode_dirty error [ 409.778916][T21875] EXT4-fs (loop6): orphan cleanup on readonly fs [ 409.785736][T21871] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6679: corrupted inode contents [ 409.798108][T21875] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6681: iget: bad extended attribute block 1 [ 409.811439][T21871] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.6679: mark_inode_dirty error [ 409.823321][T21871] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6679: corrupted inode contents [ 409.836491][T21875] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6681: couldn't read orphan inode 15 (err -117) [ 409.848553][T21871] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 409.853215][T21875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 409.857636][T21871] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6679: corrupted inode contents [ 409.893225][T21871] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.6679: mark_inode_dirty error [ 409.909012][T21871] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 409.919414][ T29] audit: type=1400 audit(1757471132.558:1947): avc: denied { bind } for pid=21886 comm="syz.1.6685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.943355][T21875] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 409.957004][T21871] EXT4-fs (loop7): 1 truncate cleaned up [ 409.993585][T21871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.007199][T21894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6689'. [ 410.016789][T20901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.033454][T21896] loop4: detected capacity change from 0 to 512 [ 410.041314][T21871] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 410.054977][T21896] EXT4-fs: Ignoring removed nobh option [ 410.072650][T21896] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6690: iget: bad i_size value: 38620345925642 [ 410.072959][T21902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6694'. [ 410.095526][T21896] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6690: couldn't read orphan inode 15 (err -117) [ 410.110351][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.129999][T21896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.151714][T21902] team0: No ports can be present during mode change [ 410.164121][T21896] EXT4-fs (loop4): shut down requested (0) [ 410.170533][T21902] tipc: Enabling of bearer rejected, already enabled [ 410.197410][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.395966][T21926] netlink: 'syz.6.6700': attribute type 3 has an invalid length. [ 410.505117][T21930] loop4: detected capacity change from 0 to 512 [ 410.568165][T21930] EXT4-fs (loop4): orphan cleanup on readonly fs [ 410.736978][T21930] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6702: iget: bad extended attribute block 1 [ 410.756412][T21930] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6702: couldn't read orphan inode 15 (err -117) [ 410.768976][T21930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 410.868776][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.174630][T21950] loop4: detected capacity change from 0 to 512 [ 411.175122][T21952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6712'. [ 411.181699][T21950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.202818][T21950] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.6705: corrupted in-inode xattr: e_value size too large [ 411.228797][T21950] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6705: couldn't read orphan inode 15 (err -117) [ 411.271003][T21950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.297256][T21969] loop7: detected capacity change from 0 to 512 [ 411.306660][T21969] EXT4-fs: Ignoring removed nobh option [ 411.316623][T21969] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.6719: iget: bad i_size value: 38620345925642 [ 411.345369][T21974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.353907][T21974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.406092][T21969] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6719: couldn't read orphan inode 15 (err -117) [ 411.428786][T21969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.449112][T21969] EXT4-fs (loop7): shut down requested (0) [ 411.571201][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.685941][T21990] program syz.6.6729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.049362][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.089223][T22022] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6742'. [ 412.100885][T22024] loop4: detected capacity change from 0 to 512 [ 412.109849][T22022] team0: No ports can be present during mode change [ 412.116938][T22024] EXT4-fs (loop4): orphan cleanup on readonly fs [ 412.124926][T22024] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6740: iget: bad extended attribute block 1 [ 412.125314][T22022] tipc: Started in network mode [ 412.141660][T22024] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6740: couldn't read orphan inode 15 (err -117) [ 412.142479][T22022] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 412.158097][T22024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 412.161405][T22022] tipc: Enabled bearer , priority 0 [ 412.192399][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.236996][T22035] netlink: 'syz.4.6748': attribute type 10 has an invalid length. [ 412.248378][T22035] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.256939][T22035] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.265732][T22037] syz_tun: entered allmulticast mode [ 412.275550][T22037] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 412.284109][T22037] mroute: pending queue full, dropping entries [ 412.291400][T22036] syz_tun: left allmulticast mode [ 412.333835][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6752'. [ 412.583251][T22064] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6758'. [ 412.656222][T22075] loop4: detected capacity change from 0 to 128 [ 412.665831][T22075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.691391][T22075] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.794727][T20804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.862372][T22086] loop4: detected capacity change from 0 to 512 [ 412.869003][T22086] EXT4-fs: Ignoring removed nobh option [ 412.883801][T22092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.892329][T22092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.904492][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6765'. [ 412.928255][T22086] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6764: iget: bad i_size value: 38620345925642 [ 412.963401][T22086] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6764: couldn't read orphan inode 15 (err -117) [ 412.976197][T22086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.995093][T22086] EXT4-fs (loop4): shut down requested (0) [ 413.014916][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.056983][T22098] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6770'. [ 413.124592][T22108] loop4: detected capacity change from 0 to 128 [ 413.149724][T22108] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 413.157667][T22108] FAT-fs (loop4): Filesystem has been set read-only [ 413.164676][T22108] syz.4.6774: attempt to access beyond end of device [ 413.164676][T22108] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 413.280027][ T3364] tipc: Node number set to 11578026 [ 413.457747][T22127] loop6: detected capacity change from 0 to 512 [ 413.474705][T22127] EXT4-fs: Ignoring removed orlov option [ 413.490307][T22127] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 413.524675][T22127] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.6783: corrupted in-inode xattr: e_value size too large [ 413.560113][T22127] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6783: couldn't read orphan inode 15 (err -117) [ 413.711424][T22127] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.913144][ T29] audit: type=1400 audit(1757471136.558:1948): avc: denied { write } for pid=22126 comm="syz.6.6783" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 413.936042][ T29] audit: type=1400 audit(1757471136.558:1949): avc: denied { open } for pid=22126 comm="syz.6.6783" path="/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 414.031322][T20901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.040669][ T29] audit: type=1400 audit(1757471136.628:1950): avc: denied { read } for pid=22126 comm="syz.6.6783" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 414.063337][ T29] audit: type=1400 audit(1757471136.638:1951): avc: denied { setattr } for pid=22126 comm="syz.6.6783" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 414.508495][T22164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.527057][T22164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.528695][T22167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.545909][T22167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.590442][T22169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6800'. [ 414.600062][T22168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6800'. [ 414.755359][T22176] syz_tun: entered allmulticast mode [ 414.761406][T22176] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 414.769985][T22176] mroute: pending queue full, dropping entries [ 414.880910][T22175] syz_tun: left allmulticast mode [ 415.164996][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6807'. [ 415.425244][T22220] loop6: detected capacity change from 0 to 1024 [ 415.432445][T22220] EXT4-fs: Ignoring removed nobh option [ 415.438049][T22220] EXT4-fs: Ignoring removed bh option [ 415.453882][T22220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.496927][T20901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.658119][T22252] loop7: detected capacity change from 0 to 512 [ 415.695045][T22252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.822267][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.902685][T22261] loop6: detected capacity change from 0 to 1024 [ 415.927799][T22263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6837'. [ 415.945250][T22261] EXT4-fs: Ignoring removed nobh option [ 415.950974][T22261] EXT4-fs: Ignoring removed bh option [ 415.967890][T22263] team0: No ports can be present during mode change [ 416.104091][T22263] tipc: Enabling of bearer rejected, already enabled [ 416.149610][T22261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.185290][ T29] audit: type=1400 audit(1757471138.828:1952): avc: denied { setopt } for pid=22275 comm="syz.3.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 416.207418][T22277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6840'. [ 416.218949][T20901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.661101][T22297] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.692295][T22299] team0: No ports can be present during mode change [ 416.711984][T22299] tipc: Enabling of bearer rejected, already enabled [ 416.758146][T22308] loop3: detected capacity change from 0 to 1024 [ 416.765180][T22308] EXT4-fs: Ignoring removed nobh option [ 416.770792][T22308] EXT4-fs: Ignoring removed bh option [ 416.787864][T22308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.824127][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.825163][T22314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.841863][T22314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.881471][T22322] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.090533][T22350] __nla_validate_parse: 2 callbacks suppressed [ 417.090550][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6874'. [ 417.113256][T22350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.126431][T22350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.134261][T22350] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 417.146239][T22350] bond1: (slave gre1): Error -95 calling set_mac_address [ 417.872680][T22369] syz_tun: entered allmulticast mode [ 417.905240][T22368] syz_tun: left allmulticast mode [ 418.037318][T22390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6892'. [ 418.061156][T22390] team0: No ports can be present during mode change [ 418.073192][T22390] tipc: Enabling of bearer rejected, already enabled [ 418.314618][T22409] netlink: 'syz.7.6900': attribute type 10 has an invalid length. [ 418.415742][ T56] bond0 (unregistering): Released all slaves [ 418.425946][T22409] tipc: Resetting bearer [ 418.434372][T22409] tipc: Resetting bearer [ 418.440496][T22409] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.448891][T22409] bond0: (slave team0): Enslaving as an active interface with an up link [ 418.462631][ T56] tipc: Disabling bearer [ 418.468210][ T56] tipc: Left network mode [ 418.494965][ T56] hsr_slave_0: left promiscuous mode [ 418.501311][ T56] hsr_slave_1: left promiscuous mode [ 418.509688][ T56] veth1_macvtap: left promiscuous mode [ 418.515975][ T56] veth0_macvtap: left promiscuous mode [ 418.521864][ T56] veth1_vlan: left promiscuous mode [ 418.566753][ T56] team0 (unregistering): Port device vlan0 removed [ 418.617118][ T1569] smc: removing ib device sz1 [ 418.622442][ T3397] lo speed is unknown, defaulting to 1000 [ 418.628207][ T3397] sz1: Port: 1 Link DOWN [ 418.848358][T22421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6904'. [ 418.862151][T22421] team0: No ports can be present during mode change [ 418.869582][T22421] tipc: Started in network mode [ 418.874620][T22421] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 418.881829][T22421] tipc: Enabled bearer , priority 0 [ 419.105271][T22426] loop4: detected capacity change from 0 to 512 [ 419.183660][T22426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.222483][T22426] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.356259][T22436] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.4.6906: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 419.387339][T22436] EXT4-fs (loop4): Remounting filesystem read-only [ 419.397039][ T29] audit: type=1400 audit(1757471142.038:1953): avc: denied { read } for pid=2979 comm="acpid" name="mouse6" dev="devtmpfs" ino=625 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 419.418899][ T29] audit: type=1400 audit(1757471142.038:1954): avc: denied { open } for pid=2979 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=625 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 419.441686][ T29] audit: type=1400 audit(1757471142.038:1955): avc: denied { ioctl } for pid=2979 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=625 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 419.514730][ T29] audit: type=1400 audit(1757471142.088:1956): avc: denied { rmdir } for pid=22425 comm="syz.4.6906" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 419.536736][ T29] audit: type=1400 audit(1757471142.158:1957): avc: denied { module_request } for pid=22442 comm="syz.7.6913" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 419.910267][T11023] tipc: Node number set to 12429994 [ 419.984656][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.036614][T22461] program syz.4.6918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.153371][T22471] bridge_slave_1: left allmulticast mode [ 420.159094][T22471] bridge_slave_1: left promiscuous mode [ 420.164869][T22471] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.174675][ T29] audit: type=1400 audit(1757471142.708:1958): avc: denied { execute_no_trans } for pid=22462 comm="syz.4.6919" path="/124/file2" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 420.198510][ T29] audit: type=1400 audit(1757471142.708:1959): avc: denied { rename } for pid=22462 comm="syz.4.6919" name="file0" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 420.221083][ T29] audit: type=1400 audit(1757471142.708:1960): avc: denied { rename } for pid=22462 comm="syz.4.6919" name="file5" dev="tmpfs" ino=669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 420.252870][T22471] bridge_slave_0: left allmulticast mode [ 420.258638][T22471] bridge_slave_0: left promiscuous mode [ 420.264480][T22471] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.763631][T22485] loop6: detected capacity change from 0 to 256 [ 420.801950][T22484] loop4: detected capacity change from 0 to 1024 [ 420.886822][T22484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 420.905022][T22484] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.915633][T22485] FAT-fs (loop6): codepage cp852 not found [ 420.975116][T22480] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.6927: Freeing blocks not in datazone - block = 0, count = 16 [ 420.992027][T22480] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 421.039339][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 421.059303][T22499] loop6: detected capacity change from 0 to 512 [ 421.066126][T22499] EXT4-fs: Ignoring removed nobh option [ 421.073991][T22502] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 421.080567][T22502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.088149][T22502] vhci_hcd vhci_hcd.0: Device attached [ 421.230422][T22508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6929'. [ 421.345999][T22499] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6933: iget: bad i_size value: 38620345925642 [ 421.373313][T22502] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 421.379900][T22502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.387478][T22502] vhci_hcd vhci_hcd.0: Device attached [ 421.406557][T22499] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6933: couldn't read orphan inode 15 (err -117) [ 421.454694][T22516] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 421.461350][T22516] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 421.461615][T22499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.469189][T22516] vhci_hcd vhci_hcd.0: Device attached [ 421.509779][T22499] EXT4-fs (loop6): shut down requested (0) [ 421.579066][T20901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.591634][T22502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.630130][ T3397] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 421.651156][T22502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.668143][T22512] vhci_hcd: connection closed [ 421.668333][T22517] vhci_hcd: connection closed [ 421.673725][T22503] vhci_hcd: connection reset by peer [ 421.689375][T18981] vhci_hcd: stop threads [ 421.693773][T18981] vhci_hcd: release socket [ 421.698257][T18981] vhci_hcd: disconnect device [ 421.706500][T18981] vhci_hcd: stop threads [ 421.710922][T18981] vhci_hcd: release socket [ 421.715518][T18981] vhci_hcd: disconnect device [ 421.724194][T18981] vhci_hcd: stop threads [ 421.728727][T18981] vhci_hcd: release socket [ 421.733203][T18981] vhci_hcd: disconnect device [ 421.802678][T22529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.812542][T22529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.167388][T22540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6945'. [ 422.185497][T22540] team0: No ports can be present during mode change [ 422.474094][T22560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6950'. [ 422.988363][T22574] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6959'. [ 423.318772][T22588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6965'. [ 423.449278][T22588] team0: No ports can be present during mode change [ 423.712465][T22607] netlink: 'syz.3.6973': attribute type 10 has an invalid length. [ 423.722953][T22607] tipc: Resetting bearer [ 423.730784][T22607] tipc: Resetting bearer [ 423.736963][T22607] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.747245][T22607] bond0: (slave team0): Enslaving as an active interface with an up link [ 423.774196][T22613] loop6: detected capacity change from 0 to 256 [ 423.822118][T22623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6980'. [ 423.956090][T22643] loop3: detected capacity change from 0 to 1024 [ 424.005874][T22653] syz_tun: entered allmulticast mode [ 424.009875][T22651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6994'. [ 424.042738][T22643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.063182][T22662] team0: Device ipvlan2 failed to register rx_handler [ 424.146398][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.196512][T22682] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.365392][T22707] tipc: Enabling of bearer rejected, already enabled [ 424.414459][T22711] netlink: 'syz.7.7017': attribute type 10 has an invalid length. [ 424.443468][T22711] tipc: Resetting bearer [ 424.602157][ T29] audit: type=1400 audit(1757471147.248:1961): avc: denied { wake_alarm } for pid=22725 comm="syz.3.7026" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 424.679561][T22735] loop6: detected capacity change from 0 to 512 [ 424.684791][T22738] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7032'. [ 424.686217][T22735] EXT4-fs: Ignoring removed nobh option [ 424.704863][T22735] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.7030: iget: bad i_size value: 38620345925642 [ 424.719490][T22735] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7030: couldn't read orphan inode 15 (err -117) [ 424.734562][T22735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.751567][T22735] EXT4-fs (loop6): shut down requested (0) [ 424.768999][T20901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.153187][T22753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7039'. [ 425.315268][T22756] team0: No ports can be present during mode change [ 425.382937][T22756] vlan0: entered promiscuous mode [ 425.402237][T22756] team0: Port device vlan0 added [ 425.507138][T22770] loop3: detected capacity change from 0 to 512 [ 425.515711][T22770] EXT4-fs: Ignoring removed nobh option [ 425.528118][T22770] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7046: iget: bad i_size value: 38620345925642 [ 425.544427][T22774] loop4: detected capacity change from 0 to 512 [ 425.544444][T22770] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7046: couldn't read orphan inode 15 (err -117) [ 425.566735][T22770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.589001][T22770] EXT4-fs (loop3): shut down requested (0) [ 425.591886][T22774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.627230][T22774] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.665921][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.679062][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.713871][T22791] loop3: detected capacity change from 0 to 512 [ 425.726719][T22791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.743154][T22791] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.789820][T22805] netlink: 'syz.4.7061': attribute type 3 has an invalid length. [ 425.797804][T22805] netlink: 'syz.4.7061': attribute type 3 has an invalid length. [ 425.824238][T22812] loop4: detected capacity change from 0 to 512 [ 425.824706][T22811] EXT4-fs error (device loop3): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.3.7054: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 425.854881][T22812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.868979][T22811] EXT4-fs (loop3): Remounting filesystem read-only [ 425.878725][T22812] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.903036][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.925081][T22816] loop4: detected capacity change from 0 to 512 [ 425.932063][T22816] EXT4-fs: Ignoring removed nobh option [ 425.939228][T22816] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7065: iget: bad i_size value: 38620345925642 [ 425.958276][T22816] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7065: couldn't read orphan inode 15 (err -117) [ 425.971996][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.973741][T22816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.980715][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.997859][T22816] EXT4-fs (loop4): shut down requested (0) [ 426.017768][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.071077][T22824] loop4: detected capacity change from 0 to 128 [ 426.352277][T22853] netlink: 'syz.4.7081': attribute type 1 has an invalid length. [ 426.360075][T22853] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7081'. [ 426.562712][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.582869][T22875] bridge_slave_1: left allmulticast mode [ 426.588624][T22875] bridge_slave_1: left promiscuous mode [ 426.594586][T22875] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.596623][T22877] loop7: detected capacity change from 0 to 128 [ 426.609261][T22875] bridge_slave_0: left allmulticast mode [ 426.615093][T22875] bridge_slave_0: left promiscuous mode [ 426.620862][T22875] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.664239][ T3397] usb 9-1: enqueue for inactive port 0 [ 426.669875][ T3397] usb 9-1: enqueue for inactive port 0 [ 426.697749][T22883] random: crng reseeded on system resumption [ 426.750103][ T3397] vhci_hcd: vhci_device speed not set [ 426.784989][T22898] loop7: detected capacity change from 0 to 1024 [ 426.813322][T22898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.836230][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.016307][T22905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.025025][T22905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.400639][T22932] netlink: 'syz.4.7114': attribute type 10 has an invalid length. [ 427.415913][T22932] macvlan1: entered allmulticast mode [ 427.437298][T22932] veth1_vlan: entered allmulticast mode [ 427.472251][T22932] team0: Port device macvlan1 added [ 427.494251][T22935] loop4: detected capacity change from 0 to 128 [ 427.516197][T22935] msdos: Unknown parameter '01777777777777777777777ÿÿÿÿ' [ 427.573864][T22942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.602251][T22942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.670003][T22948] loop3: detected capacity change from 0 to 256 [ 427.694661][T22950] loop3: detected capacity change from 0 to 512 [ 427.703683][T22950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.716536][T22950] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.739424][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.864822][T22958] loop3: detected capacity change from 0 to 512 [ 427.871772][T22958] EXT4-fs: Ignoring removed nobh option [ 427.892569][T22958] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7122: iget: bad i_size value: 38620345925642 [ 427.918346][T22958] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7122: couldn't read orphan inode 15 (err -117) [ 427.934005][T22958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.935216][T22963] bridge_slave_1: left allmulticast mode [ 427.952439][T22963] bridge_slave_1: left promiscuous mode [ 427.958277][T22963] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.969756][T22958] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.7122: iget: bad i_size value: 38620345925642 [ 427.995286][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.004549][T22963] bridge_slave_0: left allmulticast mode [ 428.010271][T22963] bridge_slave_0: left promiscuous mode [ 428.016050][T22963] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.188008][T22977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.199127][T22977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.398363][T22988] loop4: detected capacity change from 0 to 512 [ 428.408125][T22988] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 428.419687][T22988] EXT4-fs (loop4): 1 truncate cleaned up [ 428.425874][T22988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.458563][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.459627][T22997] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 428.476159][T22997] mroute: pending queue full, dropping entries [ 428.690689][T23014] loop4: detected capacity change from 0 to 128 [ 429.100535][T23036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7154'. [ 429.214516][T23045] qrtr: Invalid version 24 [ 429.441356][T23077] loop3: detected capacity change from 0 to 1024 [ 429.452999][T23079] loop4: detected capacity change from 0 to 512 [ 429.459826][T23079] EXT4-fs: Ignoring removed orlov option [ 429.469113][T23079] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 429.478990][T23079] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7168: corrupted in-inode xattr: e_value size too large [ 429.496394][T23079] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7168: couldn't read orphan inode 15 (err -117) [ 429.563128][T23079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.601169][T23077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.622176][T23077] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 429.794942][T23114] netlink: 'syz.3.7184': attribute type 10 has an invalid length. [ 429.805754][T23114] tipc: Resetting bearer [ 429.891562][T23132] loop7: detected capacity change from 0 to 128 [ 430.180774][T23176] bridge_slave_1: left allmulticast mode [ 430.186648][T23176] bridge_slave_1: left promiscuous mode [ 430.192358][T23176] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.200903][T23176] bridge_slave_0: left allmulticast mode [ 430.206581][T23176] bridge_slave_0: left promiscuous mode [ 430.212393][T23176] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.219211][T23180] loop6: detected capacity change from 0 to 512 [ 430.226609][T23180] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 430.243297][T23180] EXT4-fs (loop6): 1 truncate cleaned up [ 430.338913][T23195] loop4: detected capacity change from 0 to 1024 [ 430.351626][T23195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 430.385689][T23195] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 430.397244][T23195] System zones: 0-1, 3-36 [ 430.412307][ T3397] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 430.429446][ T3397] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 430.467922][T23214] loop4: detected capacity change from 0 to 512 [ 430.474726][T23214] EXT4-fs: Ignoring removed orlov option [ 430.484257][T23214] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 430.497521][T23214] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7230: corrupted in-inode xattr: e_value size too large [ 430.515003][T23214] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7230: couldn't read orphan inode 15 (err -117) [ 430.656857][T23237] loop7: detected capacity change from 0 to 128 [ 430.829431][T23256] ipip0: entered promiscuous mode [ 430.871935][T23261] loop3: detected capacity change from 0 to 1024 [ 430.908149][T23269] loop7: detected capacity change from 0 to 512 [ 430.914882][T23269] EXT4-fs: Ignoring removed nobh option [ 430.923367][T23271] loop3: detected capacity change from 0 to 128 [ 430.924318][T23269] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.7253: iget: bad i_size value: 38620345925642 [ 430.942676][T23269] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.7253: couldn't read orphan inode 15 (err -117) [ 430.958782][T23269] EXT4-fs (loop7): shut down requested (0) [ 431.033246][T23280] loop3: detected capacity change from 0 to 512 [ 431.042606][T23280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 431.053579][T23280] EXT4-fs (loop3): 1 truncate cleaned up [ 431.114146][T23294] ipip0: entered promiscuous mode [ 431.251049][T23312] loop3: detected capacity change from 0 to 1024 [ 431.296575][T23312] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 431.342013][T23300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.366017][T23300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.422838][T23337] loop7: detected capacity change from 0 to 256 [ 431.459155][T23337] FAT-fs (loop7): codepage cp932 not found [ 431.614174][T23365] loop3: detected capacity change from 0 to 256 [ 431.625513][T23365] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 431.634433][T23365] FAT-fs (loop3): Filesystem has been set read-only [ 431.641236][T23365] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 431.649414][T23365] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 431.746739][T23382] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 431.810472][T23391] tipc: Enabled bearer , priority 0 [ 431.817554][T23391] syzkaller0: entered promiscuous mode [ 431.823128][T23391] syzkaller0: entered allmulticast mode [ 431.835617][T23391] tipc: Resetting bearer [ 431.842273][T23390] tipc: Resetting bearer [ 431.853421][T23390] tipc: Disabling bearer [ 431.893074][T23401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.904433][T23401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.005852][T23410] loop7: detected capacity change from 0 to 128 [ 432.120988][T23421] loop3: detected capacity change from 0 to 512 [ 432.128080][T23421] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.134745][T23421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.141997][T23421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.150515][T23421] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.157896][T23410] syz.7.7317: attempt to access beyond end of device [ 432.157896][T23410] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 432.173193][T23410] syz.7.7317: attempt to access beyond end of device [ 432.173193][T23410] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 432.186559][T23421] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.7322: Allocating blocks 41-42 which overlap fs metadata [ 432.186860][T23410] syz.7.7317: attempt to access beyond end of device [ 432.186860][T23410] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 432.205272][T23421] Quota error (device loop3): write_blk: dquota write failed [ 432.221231][T23421] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 432.221415][T23410] syz.7.7317: attempt to access beyond end of device [ 432.221415][T23410] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 432.234669][T23421] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.7322: Allocating blocks 41-42 which overlap fs metadata [ 432.257476][T23410] syz.7.7317: attempt to access beyond end of device [ 432.257476][T23410] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 432.260983][T23421] Quota error (device loop3): write_blk: dquota write failed [ 432.278606][T23421] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 432.288868][T23421] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.7322: Failed to acquire dquot type 1 [ 432.301233][T23421] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 432.316421][T23421] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.7322: corrupted inode contents [ 432.329076][T23421] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.7322: mark_inode_dirty error [ 432.341276][T23421] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.7322: corrupted inode contents [ 432.353439][T23421] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.7322: mark_inode_dirty error [ 432.364983][T23421] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.7322: corrupted inode contents [ 432.377110][T23421] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 432.385801][T23421] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.7322: corrupted inode contents [ 432.406344][T23421] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.7322: mark_inode_dirty error [ 432.418274][T23421] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 432.427701][T23421] EXT4-fs (loop3): 1 truncate cleaned up [ 432.463612][T23430] loop4: detected capacity change from 0 to 512 [ 432.487162][T23430] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.491502][T23428] loop7: detected capacity change from 0 to 136 [ 432.845717][T23474] loop3: detected capacity change from 0 to 256 [ 432.849138][T23477] loop7: detected capacity change from 0 to 512 [ 432.858999][T23477] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 433.253482][T23477] EXT4-fs (loop7): 1 truncate cleaned up [ 433.283873][T23505] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7354'. [ 433.314571][T23502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.323560][T23502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.359503][T23515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.369363][T23515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.540574][T23521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.549219][T23521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.605868][T23525] 9pnet_fd: Insufficient options for proto=fd [ 433.656577][T23531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7366'. [ 433.866786][T23557] loop3: detected capacity change from 0 to 512 [ 433.872452][T23559] ipip0: entered promiscuous mode [ 433.875053][T23557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 433.896226][T23557] EXT4-fs (loop3): 1 truncate cleaned up [ 433.981552][T23578] loop4: detected capacity change from 0 to 128 [ 433.997448][T23576] loop3: detected capacity change from 0 to 2048 [ 434.005798][T23576] EXT4-fs: Ignoring removed orlov option [ 434.011578][T23576] EXT4-fs: Ignoring removed bh option [ 434.078962][T23591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7395'. [ 434.486887][T23641] tipc: Enabling of bearer rejected, failed to enable media [ 434.761539][T23660] loop7: detected capacity change from 0 to 512 [ 434.990007][T23660] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 435.051265][T23660] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.7419: invalid indirect mapped block 4294967295 (level 0) [ 435.154594][T23660] EXT4-fs (loop7): Remounting filesystem read-only [ 435.183425][T23660] EXT4-fs (loop7): 1 orphan inode deleted [ 435.189227][T23660] EXT4-fs (loop7): 1 truncate cleaned up [ 435.224040][T23669] loop3: detected capacity change from 0 to 512 [ 435.232472][T23669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 435.254338][T23669] EXT4-fs (loop3): 1 truncate cleaned up [ 435.420681][T23682] loop7: detected capacity change from 0 to 1024 [ 435.442283][ T36] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 435.464136][ T36] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 435.530855][ T29] audit: type=1400 audit(1757471158.178:1962): avc: denied { execute } for pid=23681 comm="syz.7.7427" path="/178/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.567433][T23682] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.7427: Allocating blocks 385-513 which overlap fs metadata [ 435.635047][T23682] EXT4-fs (loop7): pa ffff8881071cf850: logic 16, phys. 129, len 24 [ 435.643148][T23682] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 435.656327][T23700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7435'. [ 435.674161][T23682] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 435.686499][T23682] EXT4-fs (loop7): This should not happen!! Data will be lost [ 435.686499][T23682] [ 435.696234][T23682] EXT4-fs (loop7): Total free blocks count 0 [ 435.702341][T23682] EXT4-fs (loop7): Free/Dirty block details [ 435.708247][T23682] EXT4-fs (loop7): free_blocks=128 [ 435.713437][T23682] EXT4-fs (loop7): dirty_blocks=0 [ 435.718487][T23682] EXT4-fs (loop7): Block reservation details [ 435.724571][T23682] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 435.769493][T23707] loop3: detected capacity change from 0 to 512 [ 435.787313][ T29] audit: type=1400 audit(1757471158.428:1963): avc: denied { create } for pid=23711 comm="syz.4.7440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.803923][T23682] syz.7.7427 (23682) used greatest stack depth: 9136 bytes left [ 435.830268][T23717] netlink: 'syz.4.7444': attribute type 10 has an invalid length. [ 435.841507][ T29] audit: type=1400 audit(1757471158.448:1964): avc: denied { ioctl } for pid=23711 comm="syz.4.7440" path="socket:[77195]" dev="sockfs" ino=77195 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.876844][T23717] team0: Port device netdevsim1 added [ 435.905313][T23707] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7438: casefold flag without casefold feature [ 435.942646][T23707] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7438: couldn't read orphan inode 15 (err -117) [ 436.131212][T23749] loop4: detected capacity change from 0 to 512 [ 436.182970][T23749] EXT4-fs mount: 33 callbacks suppressed [ 436.182990][T23749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.219469][T23749] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.309582][ T56] ================================================================== [ 436.317740][ T56] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 436.327266][ T56] [ 436.329606][ T56] write to 0xffff88814782c47b of 1 bytes by task 23707 on cpu 0: [ 436.337335][ T56] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 436.343283][ T56] generic_perform_write+0x2c2/0x490 [ 436.343660][T23765] tipc: Enabled bearer , priority 0 [ 436.348600][ T56] ext4_buffered_write_iter+0x1ee/0x3c0 [ 436.348640][ T56] ext4_file_write_iter+0x383/0xf00 [ 436.356682][T23765] syzkaller0: entered promiscuous mode [ 436.360779][ T56] iter_file_splice_write+0x666/0xa60 [ 436.360807][ T56] direct_splice_actor+0x156/0x2a0 [ 436.360829][ T56] splice_direct_to_actor+0x312/0x680 [ 436.360851][ T56] do_splice_direct+0xda/0x150 [ 436.360873][ T56] do_sendfile+0x380/0x650 [ 436.360904][ T56] __x64_sys_sendfile64+0x105/0x150 [ 436.360934][ T56] x64_sys_call+0x2bb0/0x2ff0 [ 436.360959][ T56] do_syscall_64+0xd2/0x200 [ 436.360992][ T56] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.361015][ T56] [ 436.361022][ T56] read to 0xffff88814782c400 of 1024 bytes by task 56 on cpu 1: [ 436.361039][ T56] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 436.366278][T23765] syzkaller0: entered allmulticast mode [ 436.371705][ T56] generic_perform_write+0x2c2/0x490 [ 436.383941][T23765] tipc: Resetting bearer [ 436.387607][ T56] shmem_file_write_iter+0xc5/0xf0 [ 436.387643][ T56] lo_rw_aio+0x6a0/0x760 [ 436.458779][ T56] loop_process_work+0x52d/0xa60 [ 436.463728][ T56] loop_workfn+0x31/0x40 [ 436.467978][ T56] process_scheduled_works+0x4cb/0x9d0 [ 436.473454][ T56] worker_thread+0x582/0x770 [ 436.478065][ T56] kthread+0x489/0x510 [ 436.482138][ T56] ret_from_fork+0xda/0x150 [ 436.486649][ T56] ret_from_fork_asm+0x1a/0x30 [ 436.491419][ T56] [ 436.493745][ T56] Reported by Kernel Concurrency Sanitizer on: [ 436.499909][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 436.509640][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.519704][ T56] Workqueue: loop3 loop_workfn [ 436.524477][ T56] ================================================================== [ 436.540135][T23764] tipc: Resetting bearer [ 436.550805][T23764] tipc: Disabling bearer [ 436.675506][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.969734][T20804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.