last executing test programs: 3m5.082268879s ago: executing program 32 (id=519): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) pwritev(r0, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 2m46.590388427s ago: executing program 33 (id=1243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b80080009"], 0x184}}, 0x0) 1m58.709208279s ago: executing program 5 (id=4135): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m58.66257805s ago: executing program 5 (id=4137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xcefec000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1m58.63957713s ago: executing program 5 (id=4139): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18c0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000), 0x20}}], 0x1, 0x0) 1m58.61796955s ago: executing program 5 (id=4140): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000140), 0x1) 1m58.577864711s ago: executing program 5 (id=4142): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 1m58.522780402s ago: executing program 5 (id=4144): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m54.993296424s ago: executing program 0 (id=4265): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES64], 0x8, 0x2f3, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1m54.952136755s ago: executing program 0 (id=4267): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 1m54.876111257s ago: executing program 0 (id=4269): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, r0, 0x1, 0x1070bd29, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x30) 1m54.842634998s ago: executing program 0 (id=4271): r0 = shmget$private(0x0, 0x400000, 0x4, &(0x7f0000bfd000/0x400000)=nil) shmat(r0, &(0x7f0000c1c000/0x2000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000002940)=0xb7, 0x4, 0x3) 1m54.791829318s ago: executing program 0 (id=4275): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 1m54.725054909s ago: executing program 0 (id=4278): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x0, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "3a322bb29c735580"}}, 0x48}, 0x2}, 0x0) 1m43.505948039s ago: executing program 34 (id=4144): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m39.696647867s ago: executing program 35 (id=4278): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x0, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "3a322bb29c735580"}}, 0x48}, 0x2}, 0x0) 1m34.392989371s ago: executing program 2 (id=4885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1400) 1m34.364111112s ago: executing program 2 (id=4888): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1m34.304615273s ago: executing program 2 (id=4891): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940), 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x8, 0x2, 0x5}) 1m34.174734495s ago: executing program 2 (id=4898): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 1m34.094966196s ago: executing program 2 (id=4905): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 1m34.063685607s ago: executing program 2 (id=4909): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) set_robust_list(&(0x7f0000000540)={0x0, 0x3}, 0x18) 1m18.998406965s ago: executing program 36 (id=4909): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) set_robust_list(&(0x7f0000000540)={0x0, 0x3}, 0x18) 1m6.127034134s ago: executing program 8 (id=6426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1m6.090380854s ago: executing program 8 (id=6429): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 1m5.991459846s ago: executing program 8 (id=6437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfaa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m5.859391639s ago: executing program 8 (id=6448): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 1m5.81105751s ago: executing program 8 (id=6451): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 1m5.76153927s ago: executing program 8 (id=6456): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x4, 0x0) 50.727560338s ago: executing program 37 (id=6456): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x4, 0x0) 20.26960944s ago: executing program 9 (id=8738): unshare(0x22020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) 20.22477737s ago: executing program 9 (id=8740): timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS+hTa2qUtpvTH57OEe8+59+TyfQL/a/HwU7PZjIUQmom/f/r7s/xEsXdqbHomhFiYDyHkv/n610os6vjt1otoXYrWxUSmdnA7/nrWcdf3UE0dxaP6ZTyEH0IIS0/HyX/7Nr5857nr5MbmSmFrLbf4WFh/Hl4YyPds55d3Rw6z5dnu7Fz0YV3GWzM/VRs9uW+WXvbaB9uqtUbmJupLxz5nPv+tP+e/31WpVxqT/aerQ+nO+lV5J8r9Tf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnO89dJzc2Vwpba7nFx8L68/DCQL5nO7+8O3KYLc92Z+fi732X8dbMT9VGT+6bpZe99sG2aq2RuYn60rEPR7/78XP+Ei30bfhj/vtdlXqlMdl/ujqU7qxflXei3N8+5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JfyE8XeqbHpmRBiYT6EMB7vOP5lv5l4r8eivovotxTtFxOZ2sHt+OtZx13fQzV1NJUIIfG7e5eejpNftfIh/CM/BwAA//8514ZQ") 20.22196677s ago: executing program 9 (id=8743): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.191592561s ago: executing program 9 (id=8745): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfff, 0x0, 0x0, 0x0}) 20.155929021s ago: executing program 9 (id=8746): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 20.145748622s ago: executing program 9 (id=8747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.115498459s ago: executing program 38 (id=8747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.084356683s ago: executing program 1 (id=9437): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) set_robust_list(0x0, 0x0) 2.083947823s ago: executing program 1 (id=9438): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0xde8, 0x4) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x5f9}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 1.204294399s ago: executing program 1 (id=9487): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1.15802416s ago: executing program 6 (id=9490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000300)) 1.12480159s ago: executing program 6 (id=9492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 1.064887121s ago: executing program 6 (id=9493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000003c63008500000087000000b7080000000000007b8af8ff00000000b7080000e29200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.061807391s ago: executing program 3 (id=9494): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x11) 1.012355292s ago: executing program 3 (id=9495): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 804.689026ms ago: executing program 7 (id=9497): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @random="9881da07fc0b", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "e42fbb", 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x6, 0x6, "3a0100", 0xfffb, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], "8029335287b7a081"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0) 786.912726ms ago: executing program 7 (id=9498): r0 = epoll_create1(0x80000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000005}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1, 0x0, 0x0) 738.250517ms ago: executing program 7 (id=9499): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000002c0)={[{@noswap}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x0) symlinkat(&(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000080)='./bus\x00') 737.788907ms ago: executing program 7 (id=9500): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) sendmmsg(r0, &(0x7f0000009980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 737.477227ms ago: executing program 7 (id=9501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006440000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800a0001"], 0xc8}, 0x1, 0x0, 0x0, 0x40084}, 0x408b2) 675.898638ms ago: executing program 7 (id=9502): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) 346.309074ms ago: executing program 1 (id=9505): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 304.238525ms ago: executing program 4 (id=9507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 291.861925ms ago: executing program 1 (id=9508): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 259.206595ms ago: executing program 4 (id=9509): r0 = socket$inet(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 203.833036ms ago: executing program 4 (id=9510): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 184.418707ms ago: executing program 4 (id=9511): r0 = io_uring_setup(0x21b4, &(0x7f0000000000)={0x0, 0x72b6, 0x2, 0x0, 0x1f9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/66, 0x42}], &(0x7f00000003c0)=[0x7]}, 0x20) 180.076567ms ago: executing program 6 (id=9512): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 151.034517ms ago: executing program 4 (id=9513): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000010180)='ext4\x00', &(0x7f0000010140)='./file0\x00', 0x2008000, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1002}}, {@nodiscard}, {@discard}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) 123.161288ms ago: executing program 3 (id=9514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a320000000008000140000000000900010073797a30000000000900020073797a320000000014000000180a020800000000000000000200000014"], 0xa8}}, 0x0) 93.398188ms ago: executing program 3 (id=9515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 41.185969ms ago: executing program 6 (id=9516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) set_robust_list(&(0x7f0000000180)={0x0, 0x5}, 0x18) 38.255259ms ago: executing program 3 (id=9517): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x800, 0x9, 0x800}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 34.720839ms ago: executing program 1 (id=9518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100006cc70000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 22.62919ms ago: executing program 6 (id=9519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 20.68548ms ago: executing program 4 (id=9520): r0 = open(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 0s ago: executing program 3 (id=9521): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): tem_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.978303][ T29] audit: type=1400 audit(2000000007.450:2033): avc: denied { append } for pid=19818 comm="syz.7.7121" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.059734][T19586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.080622][T19586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.102853][T19830] loop7: detected capacity change from 0 to 512 [ 202.108781][T19586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.129847][T19586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.152180][T19830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.187913][T19830] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.241118][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.267513][T19586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.311948][T19586] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.328243][T19854] tipc: Enabling of bearer rejected, failed to enable media [ 202.340192][ T5070] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.347384][ T5070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.532721][T19874] loop7: detected capacity change from 0 to 8192 [ 202.565911][T19883] loop6: detected capacity change from 0 to 512 [ 202.576357][T19874] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.599378][T19883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.613536][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.620648][ T5034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.657150][T19883] ext4 filesystem being mounted at /1142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.684842][ T29] audit: type=1400 audit(2000000008.160:2034): avc: denied { setattr } for pid=19881 comm="syz.6.7139" path="/1142/file0/file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.747681][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.814965][T19586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.876827][T19910] bond1: entered promiscuous mode [ 202.882163][T19910] bond1: entered allmulticast mode [ 202.916227][T19910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.945283][T19910] bond1 (unregistering): Released all slaves [ 202.962027][T19915] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7146'. [ 203.073833][T19586] veth0_vlan: entered promiscuous mode [ 203.106270][T19586] veth1_vlan: entered promiscuous mode [ 203.126722][T19586] veth0_macvtap: entered promiscuous mode [ 203.159320][T19586] veth1_macvtap: entered promiscuous mode [ 203.189471][T19586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.204753][T19586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.224135][T19586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.233230][T19586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.242268][T19586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.251075][T19586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.711114][T20051] loop9: detected capacity change from 0 to 512 [ 203.734603][T20051] EXT4-fs: Ignoring removed nobh option [ 203.758653][T20051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.799808][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7192'. [ 203.839223][T20051] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.909475][T20051] No source specified [ 203.961991][T16529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.223095][T20123] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7210'. [ 204.315627][T20139] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7214'. [ 204.462622][T20157] loop6: detected capacity change from 0 to 512 [ 204.525094][T20157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.564765][T20157] ext4 filesystem being mounted at /1165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.592600][T20181] loop3: detected capacity change from 0 to 512 [ 204.621700][T20157] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.7218: corrupted inode contents [ 204.647263][T20157] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.7218: mark_inode_dirty error [ 204.661542][T20181] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 204.670516][T20181] FAT-fs (loop3): Filesystem has been set read-only [ 204.680684][T20157] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.7218: corrupted inode contents [ 204.742908][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7229'. [ 204.791424][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.915264][T20226] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7240'. [ 205.011765][T20250] loop7: detected capacity change from 0 to 512 [ 205.020250][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7246'. [ 205.260246][T20297] vhci_hcd: invalid port number 254 [ 205.265580][T20297] vhci_hcd: invalid port number 254 [ 205.687952][T20389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7296'. [ 205.705869][T20395] loop7: detected capacity change from 0 to 1024 [ 205.750795][T20395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.784857][T20395] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.809704][T20420] netlink: 'syz.9.7307': attribute type 7 has an invalid length. [ 205.878803][T20433] loop6: detected capacity change from 0 to 512 [ 205.880389][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.895978][T20432] loop3: detected capacity change from 0 to 512 [ 205.912482][T20438] tipc: Enabled bearer , priority 10 [ 205.929398][T20433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.944143][T20433] ext4 filesystem being mounted at /1185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.959498][T20432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.980304][T20432] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.997852][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.105491][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.166361][T20482] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 206.166361][T20482] program syz.3.7325 not setting count and/or reply_len properly [ 206.282125][T20504] loop3: detected capacity change from 0 to 1764 [ 206.484763][T20550] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7348'. [ 206.651386][T20585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.676726][T20585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.684719][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 206.684735][ T29] audit: type=1400 audit(2000000012.170:2079): avc: denied { append } for pid=20591 comm="syz.6.7363" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 206.755163][T20601] loop6: detected capacity change from 0 to 512 [ 206.774441][T20601] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 206.792343][T20601] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 206.809744][T20601] EXT4-fs (loop6): mount failed [ 206.818111][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7368'. [ 206.875514][T20623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7369'. [ 206.975946][ T29] audit: type=1400 audit(2000000012.460:2080): avc: denied { ioctl } for pid=20633 comm="syz.6.7372" path="socket:[60303]" dev="sockfs" ino=60303 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.103972][ T29] audit: type=1400 audit(2000000012.590:2081): avc: denied { create } for pid=20654 comm="syz.3.7377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_kobject_uevent_socket permissive=1 [ 207.169550][T20666] loop6: detected capacity change from 0 to 512 [ 207.180340][T20666] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 207.190087][T20666] EXT4-fs (loop6): 1 truncate cleaned up [ 207.197915][T20666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.221707][T20666] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 4: comm syz.6.7378: lblock 0 mapped to illegal pblock 4 (length 1) [ 207.278841][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.335516][T20687] netlink: 260 bytes leftover after parsing attributes in process `syz.6.7385'. [ 207.344671][T20687] netlink: 260 bytes leftover after parsing attributes in process `syz.6.7385'. [ 207.404697][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7388'. [ 207.414390][ T29] audit: type=1400 audit(2000000012.900:2082): avc: denied { listen } for pid=20701 comm="syz.7.7391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.434112][ T29] audit: type=1400 audit(2000000012.900:2083): avc: denied { read } for pid=20701 comm="syz.7.7391" lport=54077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.506927][T20716] netlink: 820 bytes leftover after parsing attributes in process `syz.7.7396'. [ 207.516482][T20716] netlink: 820 bytes leftover after parsing attributes in process `syz.7.7396'. [ 207.555744][T20724] loop3: detected capacity change from 0 to 128 [ 207.569653][T20724] netlink: 202732 bytes leftover after parsing attributes in process `syz.3.7400'. [ 207.581583][T20724] netlink: zone id is out of range [ 207.586752][T20724] netlink: zone id is out of range [ 207.592031][T20724] netlink: zone id is out of range [ 207.597252][T20724] netlink: zone id is out of range [ 207.602796][T20724] netlink: zone id is out of range [ 207.607980][T20724] netlink: zone id is out of range [ 207.613107][T20724] netlink: zone id is out of range [ 207.618517][T20724] netlink: zone id is out of range [ 207.623749][T20724] netlink: zone id is out of range [ 207.628914][T20724] netlink: zone id is out of range [ 207.651775][T20730] loop6: detected capacity change from 0 to 256 [ 207.668443][ T29] audit: type=1400 audit(2000000013.150:2084): avc: denied { setopt } for pid=20731 comm="syz.1.7403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.700228][T20722] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 207.708308][T20722] FAT-fs (loop6): Filesystem has been set read-only [ 207.730392][T20740] loop9: detected capacity change from 0 to 512 [ 207.765282][T20749] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 207.765282][T20749] program syz.6.7413 not setting count and/or reply_len properly [ 207.785958][T20753] netlink: 'syz.7.7412': attribute type 10 has an invalid length. [ 207.804755][T20753] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.812058][T20753] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.826890][T20740] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 207.828241][T20753] bridge_slave_1: left allmulticast mode [ 207.837028][T20740] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 207.842705][T20753] bridge_slave_1: left promiscuous mode [ 207.852559][T20740] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7407: Failed to acquire dquot type 1 [ 207.869712][T20753] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.882613][T20753] bridge_slave_0: left allmulticast mode [ 207.888419][T20753] bridge_slave_0: left promiscuous mode [ 207.894329][T20753] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.901962][T20740] EXT4-fs (loop9): 1 truncate cleaned up [ 207.908278][T20740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.920785][ T29] audit: type=1400 audit(2000000013.400:2085): avc: denied { getopt } for pid=20761 comm="syz.6.7417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.947521][T20740] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.009777][T20772] block device autoloading is deprecated and will be removed. [ 208.026830][T16529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.153829][T20788] netlink: 'syz.9.7430': attribute type 3 has an invalid length. [ 208.254429][T20808] netlink: 'syz.9.7438': attribute type 10 has an invalid length. [ 208.277111][T20808] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.284394][T20808] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.298663][T20814] loop6: detected capacity change from 0 to 512 [ 208.299633][T20808] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.312102][T20808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.319582][T20808] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.326718][T20808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.336952][T20808] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.346674][T20815] bridge_slave_1: left allmulticast mode [ 208.352668][T20815] bridge_slave_1: left promiscuous mode [ 208.358650][T20815] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.367898][T20815] bridge_slave_0: left allmulticast mode [ 208.373668][T20814] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 208.383948][T20815] bridge_slave_0: left promiscuous mode [ 208.389776][T20815] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.399341][T20814] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002c018, mo2=0002] [ 208.407680][T20814] System zones: 0-7 [ 208.412170][T20814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.460551][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.488964][T20815] bond0: (slave bridge0): Releasing backup interface [ 208.497651][ T3402] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 208.581817][T20839] loop3: detected capacity change from 0 to 512 [ 208.590173][T20839] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 208.647521][T20848] netlink: 'syz.7.7458': attribute type 30 has an invalid length. [ 208.771627][T20871] netlink: 'syz.3.7468': attribute type 10 has an invalid length. [ 208.805749][T20877] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 208.821872][T20871] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.829219][T20871] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.867049][T20871] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.874164][T20871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.881575][T20871] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.888747][T20871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.905274][T20871] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.942523][T20882] bridge_slave_1: left allmulticast mode [ 208.948397][T20882] bridge_slave_1: left promiscuous mode [ 208.954243][T20882] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.965310][T20882] bridge_slave_0: left allmulticast mode [ 208.971170][T20882] bridge_slave_0: left promiscuous mode [ 208.976922][T20882] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.005934][T20882] bond0: (slave bridge0): Releasing backup interface [ 209.016569][ T3402] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 209.266481][T20944] netlink: 'syz.6.7503': attribute type 10 has an invalid length. [ 209.274895][T20944] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.289517][T20944] bridge0: left promiscuous mode [ 209.300034][T20944] bridge_slave_1: left allmulticast mode [ 209.305748][T20944] bridge_slave_1: left promiscuous mode [ 209.311501][T20944] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.326984][T20944] bridge_slave_0: left allmulticast mode [ 209.332726][T20944] bridge_slave_0: left promiscuous mode [ 209.338651][T20944] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.369793][T20954] loop7: detected capacity change from 0 to 1024 [ 209.391906][T20954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.445533][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.548103][T20979] loop7: detected capacity change from 0 to 128 [ 209.856178][T20973] syz.6.7516 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 209.867255][T20973] CPU: 0 UID: 0 PID: 20973 Comm: syz.6.7516 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) [ 209.867415][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.867432][T20973] Call Trace: [ 209.867439][T20973] [ 209.867448][T20973] __dump_stack+0x1d/0x30 [ 209.867473][T20973] dump_stack_lvl+0xe8/0x140 [ 209.867494][T20973] dump_stack+0x15/0x1b [ 209.867576][T20973] dump_header+0x81/0x220 [ 209.867605][T20973] oom_kill_process+0x334/0x3f0 [ 209.867630][T20973] out_of_memory+0x979/0xb80 [ 209.867660][T20973] try_charge_memcg+0x5e6/0x9e0 [ 209.867759][T20973] charge_memcg+0x51/0xc0 [ 209.867785][T20973] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 209.867868][T20973] __read_swap_cache_async+0x1df/0x350 [ 209.867904][T20973] swap_cluster_readahead+0x277/0x3e0 [ 209.867937][T20973] swapin_readahead+0xde/0x6f0 [ 209.868024][T20973] ? __filemap_get_folio+0x4f7/0x6b0 [ 209.868050][T20973] ? __rcu_read_unlock+0x34/0x70 [ 209.868086][T20973] ? swap_cache_get_folio+0x77/0x200 [ 209.868134][T20973] do_swap_page+0x301/0x2430 [ 209.868173][T20973] ? css_rstat_updated+0xcd/0x5b0 [ 209.868209][T20973] ? __pfx_default_wake_function+0x10/0x10 [ 209.868231][T20973] handle_mm_fault+0x9a5/0x2be0 [ 209.868251][T20973] ? mas_walk+0xf2/0x120 [ 209.868346][T20973] do_user_addr_fault+0x636/0x1090 [ 209.868461][T20973] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 209.868572][T20973] exc_page_fault+0x62/0xa0 [ 209.868681][T20973] asm_exc_page_fault+0x26/0x30 [ 209.868768][T20973] RIP: 0033:0x7f83635953d8 [ 209.868786][T20973] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d ea 27 35 00 00 0f 8e 09 fe ff ff e8 a3 9f fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d b6 02 e8 00 e8 03 00 00 48 8d 1d b7 0b 35 00 e8 12 95 12 00 [ 209.868807][T20973] RSP: 002b:00007ffc0db23630 EFLAGS: 00010206 [ 209.868825][T20973] RAX: 0000000000033441 RBX: 00007f83638e7ba0 RCX: 0000000000033068 [ 209.868840][T20973] RDX: 00000000000003d9 RSI: 00007ffc0db23610 RDI: 0000000000000001 [ 209.868854][T20973] RBP: 00007f83638e7ba0 R08: 000000003abeba74 R09: 7fffffffffffffff [ 209.868938][T20973] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000033619 [ 209.868952][T20973] R13: 00007ffc0db23720 R14: ffffffffffffffff R15: 00007ffc0db23740 [ 209.868969][T20973] [ 210.088868][T20973] memory: usage 2220kB, limit 307200kB, failcnt 2653 [ 210.095558][T20973] memory+swap: usage 2852kB, limit 9007199254740988kB, failcnt 0 [ 210.103322][T20973] kmem: usage 2012kB, limit 9007199254740988kB, failcnt 0 [ 210.110476][T20973] Memory cgroup stats for /syz6: [ 210.111469][T20973] cache 0 [ 210.119497][T20973] rss 12288 [ 210.122685][T20973] shmem 0 [ 210.125669][T20973] mapped_file 0 [ 210.129205][T20973] dirty 0 [ 210.132154][T20973] writeback 4096 [ 210.135691][T20973] workingset_refault_anon 12 [ 210.140593][T20973] workingset_refault_file 0 [ 210.145092][T20973] swap 647168 [ 210.148418][T20973] swapcached 20480 [ 210.152136][T20973] pgpgin 125168 [ 210.155589][T20973] pgpgout 125161 [ 210.159223][T20973] pgfault 182593 [ 210.162772][T20973] pgmajfault 7 [ 210.166163][T20973] inactive_anon 4096 [ 210.170092][T20973] active_anon 24576 [ 210.173891][T20973] inactive_file 0 [ 210.177658][T20973] active_file 0 [ 210.181139][T20973] unevictable 0 [ 210.184616][T20973] hierarchical_memory_limit 314572800 [ 210.190071][T20973] hierarchical_memsw_limit 9223372036854771712 [ 210.196304][T20973] total_cache 0 [ 210.199855][T20973] total_rss 12288 [ 210.203498][T20973] total_shmem 0 [ 210.207046][T20973] total_mapped_file 0 [ 210.211057][T20973] total_dirty 0 [ 210.214583][T20973] total_writeback 4096 [ 210.218711][T20973] total_workingset_refault_anon 12 [ 210.223836][T20973] total_workingset_refault_file 0 [ 210.228918][T20973] total_swap 647168 [ 210.232747][T20973] total_swapcached 20480 [ 210.237044][T20973] total_pgpgin 125168 [ 210.241051][T20973] total_pgpgout 125161 [ 210.245116][T20973] total_pgfault 182593 [ 210.249234][T20973] total_pgmajfault 7 [ 210.253129][T20973] total_inactive_anon 4096 [ 210.257677][T20973] total_active_anon 24576 [ 210.262053][T20973] total_inactive_file 0 [ 210.266204][T20973] total_active_file 0 [ 210.270207][T20973] total_unevictable 0 [ 210.274197][T20973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7516,pid=20973,uid=0 [ 210.289053][T20973] Memory cgroup out of memory: Killed process 20973 (syz.6.7516) total-vm:95676kB, anon-rss:944kB, file-rss:21924kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 210.319659][T21007] netlink: 'syz.1.7527': attribute type 10 has an invalid length. [ 210.327787][T21007] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.336863][T21007] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.344055][T21007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.353104][T21007] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 210.366312][T21007] bridge_slave_1: left allmulticast mode [ 210.372173][T21007] bridge_slave_1: left promiscuous mode [ 210.378159][T21007] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.386296][T21007] bridge_slave_0: left allmulticast mode [ 210.392083][T21007] bridge_slave_0: left promiscuous mode [ 210.397899][T21007] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.398193][T21010] loop7: detected capacity change from 0 to 128 [ 210.421367][T21007] bond0: (slave bridge0): Releasing backup interface [ 210.428939][T21010] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.447368][ T1035] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 210.463808][T21010] ext4 filesystem being mounted at /611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.510378][T21010] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.7531: No space for directory leaf checksum. Please run e2fsck -D. [ 210.525934][T21010] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.7531: checksumming directory block 0 [ 210.599353][T14086] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.614727][T21035] loop3: detected capacity change from 0 to 512 [ 210.637691][T21035] loop3: detected capacity change from 0 to 1024 [ 210.666834][T21035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.698596][T21035] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 210.769035][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.827134][T21057] IPv6: Can't replace route, no match found [ 210.949843][T21076] loop9: detected capacity change from 0 to 512 [ 210.977510][T21081] __nla_validate_parse: 14 callbacks suppressed [ 210.977526][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7565'. [ 210.977951][T21076] journal_path: Lookup failure for './file0/../file0' [ 210.999812][T21076] EXT4-fs: error: could not find journal device path [ 211.138691][T21101] loop3: detected capacity change from 0 to 2048 [ 211.146409][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7580'. [ 211.155401][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7580'. [ 211.164354][T21111] netlink: 'syz.9.7580': attribute type 6 has an invalid length. [ 211.204598][T21101] Alternate GPT is invalid, using primary GPT. [ 211.211715][T21101] loop3: p1 p2 p3 [ 211.346631][T21142] loop3: detected capacity change from 0 to 512 [ 211.535899][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7613'. [ 211.558179][T21179] bond0: option mode: unable to set because the bond device has slaves [ 211.612143][T21187] loop9: detected capacity change from 0 to 512 [ 211.625198][T21193] netlink: 176 bytes leftover after parsing attributes in process `syz.7.7622'. [ 211.653127][T21187] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 211.671779][T21187] EXT4-fs (loop9): 1 truncate cleaned up [ 211.678078][T21187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.694192][T21196] nfs4: Bad value for 'source' [ 211.723039][T21202] loop7: detected capacity change from 0 to 512 [ 211.729952][T21202] EXT4-fs: Ignoring removed i_version option [ 211.730461][T16529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.747078][T21202] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 211.764110][T21202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 211.772502][T21202] System zones: 1-12 [ 211.776545][T21202] EXT4-fs (loop7): orphan cleanup on readonly fs [ 211.783507][T21202] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7627: invalid indirect mapped block 12 (level 1) [ 211.802840][T21202] EXT4-fs (loop7): Remounting filesystem read-only [ 211.814969][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 211.814986][ T29] audit: type=1326 audit(2000000017.300:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.6.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 211.820646][T21202] EXT4-fs (loop7): 1 truncate cleaned up [ 211.850707][T21202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 211.862927][ T29] audit: type=1326 audit(2000000017.320:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.6.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 211.887344][ T29] audit: type=1326 audit(2000000017.320:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.6.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 211.901138][T21219] loop3: detected capacity change from 0 to 512 [ 211.912030][ T29] audit: type=1326 audit(2000000017.320:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.6.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 211.941091][ T29] audit: type=1326 audit(2000000017.320:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21212 comm="syz.6.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 211.969606][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 211.977112][T21219] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.7633: iget: bad i_size value: 38620345925642 [ 211.991982][T21219] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7633: couldn't read orphan inode 15 (err -117) [ 212.014801][T21219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.034327][T21225] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 212.090246][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.123667][T21235] netlink: 'syz.6.7639': attribute type 5 has an invalid length. [ 212.198562][T21244] tipc: Enabling of bearer rejected, media not registered [ 212.259201][T21255] loop3: detected capacity change from 0 to 512 [ 212.308690][T21255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.327607][T21255] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.363084][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.464241][T21276] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7660'. [ 212.545612][T21280] loop9: detected capacity change from 0 to 2048 [ 212.607377][ T29] audit: type=1400 audit(2000000018.080:2152): avc: denied { write } for pid=21285 comm="syz.7.7665" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 212.659723][T21222] syz.1.7634 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 212.674286][T21222] CPU: 1 UID: 0 PID: 21222 Comm: syz.1.7634 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) [ 212.674333][T21222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.674394][T21222] Call Trace: [ 212.674400][T21222] [ 212.674407][T21222] __dump_stack+0x1d/0x30 [ 212.674427][T21222] dump_stack_lvl+0xe8/0x140 [ 212.674503][T21222] dump_stack+0x15/0x1b [ 212.674518][T21222] dump_header+0x81/0x220 [ 212.674548][T21222] oom_kill_process+0x334/0x3f0 [ 212.674583][T21222] out_of_memory+0x979/0xb80 [ 212.674681][T21222] try_charge_memcg+0x5e6/0x9e0 [ 212.674731][T21222] obj_cgroup_charge_pages+0xa6/0x150 [ 212.674766][T21222] __memcg_kmem_charge_page+0x9f/0x170 [ 212.674876][T21222] __alloc_frozen_pages_noprof+0x188/0x360 [ 212.674990][T21222] alloc_pages_mpol+0xb3/0x250 [ 212.675021][T21222] alloc_pages_noprof+0x90/0x130 [ 212.675047][T21222] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 212.675089][T21222] __kvmalloc_node_noprof+0x30f/0x4e0 [ 212.675171][T21222] ? ip_set_alloc+0x1f/0x30 [ 212.675201][T21222] ? ip_set_alloc+0x1f/0x30 [ 212.675285][T21222] ? hash_netiface_create+0x21b/0x740 [ 212.675319][T21222] ? __kmalloc_cache_noprof+0x189/0x320 [ 212.675351][T21222] ip_set_alloc+0x1f/0x30 [ 212.675432][T21222] hash_netiface_create+0x282/0x740 [ 212.675461][T21222] ? __pfx_hash_netiface_create+0x10/0x10 [ 212.675499][T21222] ip_set_create+0x3c9/0x960 [ 212.675565][T21222] ? __nla_parse+0x40/0x60 [ 212.675588][T21222] nfnetlink_rcv_msg+0x4c6/0x590 [ 212.675640][T21222] ? selinux_capable+0x1f9/0x270 [ 212.675740][T21222] netlink_rcv_skb+0x123/0x220 [ 212.675839][T21222] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 212.675870][T21222] nfnetlink_rcv+0x16b/0x1690 [ 212.675895][T21222] ? __kfree_skb+0x109/0x150 [ 212.675966][T21222] ? nlmon_xmit+0x4f/0x60 [ 212.675997][T21222] ? consume_skb+0x49/0x150 [ 212.676031][T21222] ? nlmon_xmit+0x4f/0x60 [ 212.676054][T21222] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 212.676131][T21222] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 212.676151][T21222] ? __dev_queue_xmit+0x182/0x1fb0 [ 212.676174][T21222] ? ref_tracker_free+0x37d/0x3e0 [ 212.676235][T21222] ? __netlink_deliver_tap+0x4dc/0x500 [ 212.676263][T21222] netlink_unicast+0x5a8/0x680 [ 212.676360][T21222] netlink_sendmsg+0x58b/0x6b0 [ 212.676379][T21222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.676461][T21222] __sock_sendmsg+0x145/0x180 [ 212.676484][T21222] ____sys_sendmsg+0x31e/0x4e0 [ 212.676593][T21222] ___sys_sendmsg+0x17b/0x1d0 [ 212.676631][T21222] __x64_sys_sendmsg+0xd4/0x160 [ 212.676658][T21222] x64_sys_call+0x2999/0x2fb0 [ 212.676749][T21222] do_syscall_64+0xd2/0x200 [ 212.676842][T21222] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.676876][T21222] ? clear_bhb_loop+0x40/0x90 [ 212.676895][T21222] ? clear_bhb_loop+0x40/0x90 [ 212.676916][T21222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.677008][T21222] RIP: 0033:0x7fc248abe9a9 [ 212.677025][T21222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.677045][T21222] RSP: 002b:00007fc24711f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.677067][T21222] RAX: ffffffffffffffda RBX: 00007fc248ce5fa0 RCX: 00007fc248abe9a9 [ 212.677082][T21222] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 212.677095][T21222] RBP: 00007fc248b40d69 R08: 0000000000000000 R09: 0000000000000000 [ 212.677154][T21222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.677164][T21222] R13: 0000000000000000 R14: 00007fc248ce5fa0 R15: 00007ffca1573728 [ 212.677182][T21222] [ 212.677189][T21222] memory: usage 307200kB, limit 307200kB, failcnt 52 [ 213.021303][ T29] audit: type=1326 audit(2000000018.510:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21311 comm="syz.6.7677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83636be9a9 code=0x0 [ 213.026247][T21222] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 213.026265][T21222] kmem: usage 306268kB, limit 9007199254740988kB, failcnt 0 [ 213.092899][T21222] Memory cgroup stats for /syz1: [ 213.093117][T21222] cache 253952 [ 213.101527][T21222] rss 286720 [ 213.104791][T21222] shmem 0 [ 213.107965][T21222] mapped_file 122880 [ 213.111877][T21222] dirty 122880 [ 213.115289][T21222] writeback 0 [ 213.118668][T21222] workingset_refault_anon 0 [ 213.123224][T21222] workingset_refault_file 15 [ 213.127878][T21222] swap 270336 [ 213.131193][T21222] swapcached 262144 [ 213.135012][T21222] pgpgin 137451 [ 213.138512][T21222] pgpgout 137252 [ 213.142068][T21222] pgfault 262142 [ 213.145619][T21222] pgmajfault 4 [ 213.149033][T21222] inactive_anon 540672 [ 213.153115][T21222] active_anon 8192 [ 213.156912][T21222] inactive_file 0 [ 213.160678][T21222] active_file 266240 [ 213.164626][T21222] unevictable 0 [ 213.168157][T21222] hierarchical_memory_limit 314572800 [ 213.173538][T21222] hierarchical_memsw_limit 9223372036854771712 [ 213.179730][T21222] total_cache 253952 [ 213.183705][T21222] total_rss 286720 [ 213.187455][T21222] total_shmem 0 [ 213.190920][T21222] total_mapped_file 122880 [ 213.195381][T21222] total_dirty 122880 [ 213.199285][T21222] total_writeback 0 [ 213.203160][T21222] total_workingset_refault_anon 0 [ 213.208280][T21222] total_workingset_refault_file 15 [ 213.213387][T21222] total_swap 270336 [ 213.217191][T21222] total_swapcached 262144 [ 213.221533][T21222] total_pgpgin 137451 [ 213.225505][T21222] total_pgpgout 137252 [ 213.229583][T21222] total_pgfault 262142 [ 213.233740][T21222] total_pgmajfault 4 [ 213.237690][T21222] total_inactive_anon 540672 [ 213.242283][T21222] total_active_anon 8192 [ 213.246530][T21222] total_inactive_file 0 [ 213.250693][T21222] total_active_file 266240 [ 213.255102][T21222] total_unevictable 0 [ 213.259186][T21222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7634,pid=21221,uid=0 [ 213.273943][T21222] Memory cgroup out of memory: Killed process 21222 (syz.1.7634) total-vm:95676kB, anon-rss:1072kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 213.328930][T21317] loop3: detected capacity change from 0 to 136 [ 213.366230][T21317] Attempt to read inode for relocated directory [ 213.375821][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7681'. [ 213.375881][T21322] 9pnet_fd: Insufficient options for proto=fd [ 213.525084][T21222] syz.1.7634 (21222) used greatest stack depth: 7872 bytes left [ 213.632597][T21355] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7698'. [ 213.690673][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.698276][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.705683][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.713160][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.720597][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.728026][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.735440][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.742916][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.750437][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.757859][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.765331][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.772845][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.780422][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.787835][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.795310][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.802725][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.810157][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.817607][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.824999][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.826306][T21365] loop9: detected capacity change from 0 to 256 [ 213.832441][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832466][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832487][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832514][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832538][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832560][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832580][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832604][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832684][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832706][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832729][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832749][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832802][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832825][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832847][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832884][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832910][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832935][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832972][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.832995][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.833020][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.833106][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.877424][ T29] audit: type=1400 audit(2000000019.350:2154): avc: denied { remount } for pid=21364 comm="syz.9.7701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 213.883904][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.983663][ T29] audit: type=1400 audit(2000000019.470:2155): avc: denied { mount } for pid=21374 comm="syz.6.7707" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 213.987986][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988015][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988036][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988086][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988160][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988184][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988209][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988255][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988280][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988301][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988325][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988350][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988437][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988532][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988558][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988583][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988605][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.988625][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 213.996802][T21375] devtmpfs: Cannot disable swap on remount [ 214.003507][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.026459][ T29] audit: type=1400 audit(2000000019.480:2156): avc: denied { remount } for pid=21374 comm="syz.6.7707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 214.030743][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.227431][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.234923][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.242431][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.249836][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.257430][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.264808][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.272203][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.279650][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.287126][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.294522][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.302019][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.309431][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.316809][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.324234][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.331706][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.339114][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.346499][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.353901][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.361372][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.368848][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.376284][ T1035] hid-generic 0000:0002:0000.0006: unknown main item tag 0x0 [ 214.384497][ T1035] hid-generic 0000:0002:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 214.501619][T21409] loop9: detected capacity change from 0 to 128 [ 214.513869][T21409] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.528733][T21409] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.528765][T21411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7722'. [ 214.546758][T21411] bridge_slave_0: default FDB implementation only supports local addresses [ 214.566929][T21415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7724'. [ 214.576672][T21415] netlink: 'syz.7.7724': attribute type 19 has an invalid length. [ 214.622680][T21418] random: crng reseeded on system resumption [ 214.700078][T21438] rdma_op ffff888118d0e580 conn xmit_rdma 0000000000000000 [ 214.923171][T21484] loop3: detected capacity change from 0 to 512 [ 214.941146][T21484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.964082][T21484] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.7758: bad orphan inode 16 [ 214.993390][T21484] ext4_test_bit(bit=15, block=4) = 0 [ 214.998781][T21484] EXT4-fs (loop3): 1 orphan inode deleted [ 215.190575][T21537] random: crng reseeded on system resumption [ 215.322363][T21563] loop6: detected capacity change from 0 to 128 [ 215.342431][T21567] loop7: detected capacity change from 0 to 512 [ 215.370224][T21567] ext4 filesystem being mounted at /678/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.385618][T21574] loop3: detected capacity change from 0 to 512 [ 215.425397][T21574] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.458994][T21574] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.7801: invalid size [ 215.754821][T21638] loop3: detected capacity change from 0 to 512 [ 215.778599][T21638] EXT4-fs: Ignoring removed nobh option [ 215.794859][T21638] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 215.806426][T21638] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 215.816566][T21638] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.7831: Corrupt directory, running e2fsck is recommended [ 215.831306][T21638] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 215.839669][T21638] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.7831: corrupted in-inode xattr: invalid ea_ino [ 215.854228][T21638] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.7831: couldn't read orphan inode 15 (err -117) [ 215.873805][T21607] loop9: detected capacity change from 0 to 32768 [ 215.927839][T21607] loop9: p1 p2 p3 < p5 p6 p7 > [ 215.933249][T21607] loop9: p2 size 16775168 extends beyond EOD, truncated [ 215.942684][T21607] loop9: p5 start 4294970168 is beyond EOD, truncated [ 215.983001][T21655] loop6: detected capacity change from 0 to 128 [ 215.991792][T21655] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 323) [ 215.999956][T21655] FAT-fs (loop6): Filesystem has been set read-only [ 216.017693][ T8030] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 323) [ 216.059916][T21663] __nla_validate_parse: 4 callbacks suppressed [ 216.059941][T21663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7843'. [ 216.075896][T21663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7843'. [ 216.085005][T21663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7843'. [ 216.105776][T21663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7843'. [ 216.142196][T21673] loop9: detected capacity change from 0 to 128 [ 216.155137][T21675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7849'. [ 216.183592][T21677] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7851'. [ 216.192762][T21677] netlink: 'syz.9.7851': attribute type 1 has an invalid length. [ 216.200549][T21677] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7851'. [ 216.305932][T21689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7856'. [ 216.316811][T21689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7856'. [ 216.492682][T21703] tipc: Started in network mode [ 216.497623][T21703] tipc: Node identity 7, cluster identity 1 [ 216.503608][T21703] tipc: Node number set to 7 [ 216.652114][T21724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7872'. [ 216.866332][T21749] new mount options do not match the existing superblock, will be ignored [ 217.098205][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 217.098220][ T29] audit: type=1326 audit(2000000022.590:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.6.7905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x0 [ 217.212549][T21808] loop3: detected capacity change from 0 to 512 [ 217.239990][T21808] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.282971][T21821] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.309300][ T29] audit: type=1326 audit(2000000022.800:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.9.7860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f1fd4e9a9 code=0x7fc00000 [ 217.434455][T21842] loop7: detected capacity change from 0 to 512 [ 217.466836][T21849] loop3: detected capacity change from 0 to 512 [ 217.471926][T21851] loop7: detected capacity change from 0 to 164 [ 217.480990][T21851] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 217.500389][T21849] ext4 filesystem being mounted at /180/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.542385][T21859] kernel profiling enabled (shift: 7) [ 217.543219][T21861] syz_tun: refused to change device tx_queue_len [ 217.558541][ T29] audit: type=1400 audit(2000000023.050:2194): avc: denied { append } for pid=21862 comm="syz.3.7937" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.591741][ T29] audit: type=1400 audit(2000000023.080:2195): avc: denied { bind } for pid=21864 comm="syz.7.7938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.616748][T21868] 9p: Unknown Cache mode or invalid value l [ 217.689907][T21877] loop7: detected capacity change from 0 to 764 [ 217.698557][T21877] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 217.767260][T21883] loop9: detected capacity change from 0 to 8192 [ 217.808858][T21883] loop9: p1 p2 p4 [ 217.812673][T21883] loop9: p1 size 65536 extends beyond EOD, truncated [ 217.821025][T21883] loop9: p2 start 861536256 is beyond EOD, truncated [ 217.828426][T21883] loop9: p4 size 65536 extends beyond EOD, truncated [ 217.905215][T21915] bond0: option ad_select: unable to set because the bond device is up [ 218.014954][T21921] loop9: detected capacity change from 0 to 8192 [ 218.101316][T21941] wireguard0: entered promiscuous mode [ 218.106954][T21941] wireguard0: entered allmulticast mode [ 218.109931][T21950] vhci_hcd: invalid port number 65 [ 218.117690][T21950] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 218.220656][ T29] audit: type=1326 audit(2000000023.710:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21970 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 218.244943][ T29] audit: type=1326 audit(2000000023.710:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21970 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 218.249859][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 218.273927][ T29] audit: type=1326 audit(2000000023.760:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21970 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 218.275934][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 218.306888][ T10] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 218.315022][ T29] audit: type=1326 audit(2000000023.800:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21970 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 218.339474][ T10] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 218.348770][ T29] audit: type=1326 audit(2000000023.800:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21970 comm="syz.1.7990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 218.442102][ T29] audit: type=1326 audit(2000000023.930:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21991 comm="syz.3.8000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf9246e9a9 code=0x0 [ 218.632400][T22025] loop7: detected capacity change from 0 to 512 [ 218.848829][T22068] vhci_hcd: invalid port number 65 [ 218.854005][T22068] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 219.050304][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.059165][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.066572][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.074150][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.082306][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.083036][T22091] loop6: detected capacity change from 0 to 8192 [ 219.090710][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.104316][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.112057][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.120768][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.128278][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.135986][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.144090][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.152367][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.160591][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.168120][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.175562][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.184062][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.191473][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.199510][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.206958][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.214932][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.222957][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.230380][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.238937][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.246313][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.253764][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.261884][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.269876][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.277261][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.285350][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.292978][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.301626][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.309088][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.316460][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.324369][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.332327][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.340605][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.348167][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.355686][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.364176][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.371620][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.379645][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.387097][ T3402] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 219.404904][ T3402] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 219.432291][T22091] loop6: p1 p2 p4 [ 219.449673][T22091] loop6: p1 size 65536 extends beyond EOD, truncated [ 219.457055][T22091] loop6: p2 start 861536256 is beyond EOD, truncated [ 219.464515][T22091] loop6: p4 size 65536 extends beyond EOD, truncated [ 219.826728][T22179] loop7: detected capacity change from 0 to 8192 [ 219.917066][T22206] loop9: detected capacity change from 0 to 512 [ 219.942690][T22206] EXT4-fs: Ignoring removed orlov option [ 219.959887][T22206] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 219.974452][T22206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 220.018824][T22206] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.8098: corrupted in-inode xattr: e_value size too large [ 220.033987][T22206] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.8098: couldn't read orphan inode 15 (err -117) [ 220.081922][T22231] loop7: detected capacity change from 0 to 512 [ 220.103625][T22231] ext4 filesystem being mounted at /747/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.140473][T22244] net_ratelimit: 5 callbacks suppressed [ 220.140492][T22244] netlink: del zone limit has 8 unknown bytes [ 220.297225][T22273] netlink: 'syz.1.8129': attribute type 29 has an invalid length. [ 220.315739][T22273] netlink: 'syz.1.8129': attribute type 29 has an invalid length. [ 220.525034][T22299] loop6: detected capacity change from 0 to 4096 [ 220.685568][T22329] loop6: detected capacity change from 0 to 1024 [ 220.702839][T22329] ext4 filesystem being mounted at /1335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.885267][T22358] loop9: detected capacity change from 0 to 2048 [ 221.024177][ T5070] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 221.024459][ T5070] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 221.024483][ T5070] EXT4-fs (loop9): This should not happen!! Data will be lost [ 221.024483][ T5070] [ 221.024496][ T5070] EXT4-fs (loop9): Total free blocks count 0 [ 221.024509][ T5070] EXT4-fs (loop9): Free/Dirty block details [ 221.075753][ T5070] EXT4-fs (loop9): free_blocks=4096 [ 221.075771][ T5070] EXT4-fs (loop9): dirty_blocks=512 [ 221.075785][ T5070] EXT4-fs (loop9): Block reservation details [ 221.075796][ T5070] EXT4-fs (loop9): i_reserved_data_blocks=32 [ 221.077270][ T5070] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 221.077366][ T5070] EXT4-fs (loop9): This should not happen!! Data will be lost [ 221.077366][ T5070] [ 221.153658][T22389] __nla_validate_parse: 14 callbacks suppressed [ 221.153674][T22389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8181'. [ 221.191348][T22389] bridge0: entered promiscuous mode [ 221.217244][T22399] netlink: 'syz.9.8186': attribute type 1 has an invalid length. [ 221.264358][T22404] loop7: detected capacity change from 0 to 512 [ 221.293803][T22411] random: crng reseeded on system resumption [ 221.404030][T22435] new mount options do not match the existing superblock, will be ignored [ 221.413612][T22435] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 221.456821][T22442] netlink: 'syz.9.8207': attribute type 1 has an invalid length. [ 221.472010][T22443] vhci_hcd: default hub control req: 400d v0000 i0000 l0 [ 221.540331][T22457] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 221.697575][T22491] loop3: detected capacity change from 0 to 512 [ 221.710158][T22491] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8232: Failed to acquire dquot type 1 [ 221.741849][T22491] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8232: corrupted inode contents [ 221.784941][T22491] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.8232: mark_inode_dirty error [ 221.837051][T22491] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8232: corrupted inode contents [ 221.895251][T22491] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8232: mark_inode_dirty error [ 221.912874][T22491] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8232: corrupted inode contents [ 221.916176][T22514] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8243'. [ 221.948139][T22491] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 221.956957][T22491] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8232: corrupted inode contents [ 221.978504][T22491] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.8232: mark_inode_dirty error [ 222.021991][T22491] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 222.022275][T22491] EXT4-fs (loop3): 1 truncate cleaned up [ 222.023043][T22491] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.113282][T22537] rtc_cmos 00:00: Alarms can be up to one day in the future [ 222.166245][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 222.166261][ T29] audit: type=1400 audit(2000000027.650:2251): avc: denied { write } for pid=22545 comm="syz.6.8257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.218974][ T29] audit: type=1326 audit(2000000027.710:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22551 comm="syz.7.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 222.268084][ T29] audit: type=1326 audit(2000000027.710:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22551 comm="syz.7.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 222.291781][ T29] audit: type=1326 audit(2000000027.710:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22551 comm="syz.7.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 222.315851][ T29] audit: type=1326 audit(2000000027.710:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22551 comm="syz.7.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 222.372131][ T29] audit: type=1326 audit(2000000027.780:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22551 comm="syz.7.8260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 222.440849][ T29] audit: type=1326 audit(2000000027.930:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22573 comm="syz.1.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 222.465075][ T29] audit: type=1326 audit(2000000027.930:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22573 comm="syz.1.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 222.591288][ T29] audit: type=1326 audit(2000000027.960:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22573 comm="syz.1.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc248abd310 code=0x7ffc0000 [ 222.609116][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8271'. [ 222.615643][ T29] audit: type=1326 audit(2000000027.960:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22573 comm="syz.1.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 222.623765][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8271'. [ 222.647394][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8271'. [ 222.730147][T22606] netlink: 420 bytes leftover after parsing attributes in process `syz.1.8282'. [ 222.873666][T22635] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8299'. [ 223.241285][T22700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8332'. [ 223.342446][T22697] loop3: detected capacity change from 0 to 8192 [ 223.379965][T22697] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 223.388552][T22697] FAT-fs (loop3): Filesystem has been set read-only [ 223.447243][T22728] loop9: detected capacity change from 0 to 1024 [ 223.570908][T22728] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.8343: Failed to acquire dquot type 0 [ 223.604286][T22728] EXT4-fs (loop9): 1 truncate cleaned up [ 223.614863][T22728] EXT4-fs mount: 26 callbacks suppressed [ 223.614878][T22728] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.744016][T16529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.877633][T22772] pimreg: entered allmulticast mode [ 224.132573][T22799] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8376'. [ 224.141704][T22799] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8376'. [ 224.143774][T22801] loop6: detected capacity change from 0 to 512 [ 224.171409][T22797] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 224.177974][T22797] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 224.180843][T22801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.185690][T22797] vhci_hcd vhci_hcd.0: Device attached [ 224.210621][T22801] ext4 filesystem being mounted at /1396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.230990][T22802] vhci_hcd: connection closed [ 224.231369][ T5049] vhci_hcd: stop threads [ 224.241056][ T5049] vhci_hcd: release socket [ 224.245560][ T5049] vhci_hcd: disconnect device [ 224.276912][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.533406][T22865] usb usb1: usbfs: process 22865 (syz.3.8405) did not claim interface 0 before use [ 224.713704][T22904] loop7: detected capacity change from 0 to 512 [ 224.738060][T22906] loop3: detected capacity change from 0 to 256 [ 224.744563][T22904] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 224.793656][T22904] EXT4-fs (loop7): orphan cleanup on readonly fs [ 224.822333][T22918] loop3: detected capacity change from 0 to 512 [ 224.836255][T22904] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.8425: corrupted inode contents [ 224.856195][T22918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.879295][T22904] EXT4-fs (loop7): Remounting filesystem read-only [ 224.885956][T22904] EXT4-fs (loop7): 1 truncate cleaned up [ 224.887000][T22918] EXT4-fs (loop3): 1 truncate cleaned up [ 224.904774][ T5034] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.915514][ T5034] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 224.926308][ T5034] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 224.937340][T22904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.952397][T22918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.988706][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.003896][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.401308][T23020] random: crng reseeded on system resumption [ 225.690383][T23064] loop6: detected capacity change from 0 to 4096 [ 225.697845][T23068] netlink: 'syz.7.8504': attribute type 1 has an invalid length. [ 225.712875][T23064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.784857][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.930908][T23100] loop6: detected capacity change from 0 to 128 [ 225.944074][T23100] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.960116][T23100] ext4 filesystem being mounted at /1429/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.011907][ T8030] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.102360][T23118] netlink: 'syz.1.8528': attribute type 1 has an invalid length. [ 226.286780][T23144] vhci_hcd: invalid port number 236 [ 226.292984][T23144] vhci_hcd: invalid port number 236 [ 226.581295][T23195] loop6: detected capacity change from 0 to 128 [ 226.624282][T23195] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.659922][T23207] __nla_validate_parse: 4 callbacks suppressed [ 226.659970][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8570'. [ 226.679411][T23195] ext4 filesystem being mounted at /1438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.722704][ T9] hid-generic 0004:0006:020A.0009: unknown main item tag 0x4 [ 226.730322][ T9] hid-generic 0004:0006:020A.0009: item fetching failed at offset 5/6 [ 226.768884][ T9] hid-generic 0004:0006:020A.0009: probe with driver hid-generic failed with error -22 [ 226.815956][ T8030] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.892846][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8577'. [ 227.113005][T23263] loop9: detected capacity change from 0 to 1024 [ 227.150337][T23263] EXT4-fs: Ignoring removed nobh option [ 227.155988][T23263] EXT4-fs: Ignoring removed bh option [ 227.199064][T23263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.212352][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 227.212366][ T29] audit: type=1400 audit(2000000032.690:2316): avc: denied { execstack } for pid=23287 comm="syz.1.8608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 227.242766][T23292] Invalid ELF header magic: != ELF [ 227.248473][T23283] loop7: detected capacity change from 0 to 512 [ 227.256095][ T29] audit: type=1400 audit(2000000032.730:2317): avc: denied { module_load } for pid=23291 comm="syz.6.8610" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=69111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 227.299062][T23283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 227.308669][T16529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.318907][T23283] System zones: 1-12 [ 227.329685][T23283] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.8607: error while reading EA inode 32 err=-116 [ 227.344129][T23283] EXT4-fs (loop7): Remounting filesystem read-only [ 227.351465][T23283] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 227.363290][T23283] EXT4-fs (loop7): 1 orphan inode deleted [ 227.373622][ T29] audit: type=1400 audit(2000000032.860:2318): avc: denied { ioctl } for pid=23302 comm="syz.6.8616" path="socket:[68507]" dev="sockfs" ino=68507 ioctlcmd=0x6618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.384425][T23283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.495755][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.660289][T10230] hid-generic 0004:0006:020A.000A: unknown main item tag 0x4 [ 227.667977][T10230] hid-generic 0004:0006:020A.000A: item fetching failed at offset 5/6 [ 227.676510][T10230] hid-generic 0004:0006:020A.000A: probe with driver hid-generic failed with error -22 [ 227.803795][T23372] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 227.810442][T23372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 227.818190][T23372] vhci_hcd vhci_hcd.0: Device attached [ 227.827060][T23376] loop3: detected capacity change from 0 to 128 [ 227.833719][T23373] vhci_hcd: connection closed [ 227.834024][ T5049] vhci_hcd: stop threads [ 227.843139][ T5049] vhci_hcd: release socket [ 227.847627][ T5049] vhci_hcd: disconnect device [ 227.905971][T23380] loop3: detected capacity change from 0 to 8192 [ 227.913495][T23380] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.005827][ T29] audit: type=1400 audit(2000000033.490:2319): avc: denied { write } for pid=23381 comm="syz.3.8650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.402354][T23389] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8653'. [ 228.421965][T23390] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.8651'. [ 228.515809][T23410] loop6: detected capacity change from 0 to 256 [ 228.548008][T23414] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8665'. [ 228.551509][T23416] netlink: 642 bytes leftover after parsing attributes in process `syz.1.8666'. [ 228.639204][T23425] loop6: detected capacity change from 0 to 1024 [ 228.649713][T23425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.665264][T23425] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 228.680946][T23425] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 228.693434][T23425] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.693434][T23425] [ 228.703306][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.711258][T23425] EXT4-fs (loop6): Total free blocks count 0 [ 228.717350][T23425] EXT4-fs (loop6): Free/Dirty block details [ 228.723322][T23425] EXT4-fs (loop6): free_blocks=68451041280 [ 228.729143][T23425] EXT4-fs (loop6): dirty_blocks=16 [ 228.734269][T23425] EXT4-fs (loop6): Block reservation details [ 228.740271][T23425] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 228.759172][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.851823][T23442] loop3: detected capacity change from 0 to 128 [ 228.859842][T23442] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.872226][T23442] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.921038][T19586] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.940344][T23445] loop3: detected capacity change from 0 to 1024 [ 228.947244][T23445] EXT4-fs: Ignoring removed nobh option [ 228.952927][T23445] EXT4-fs: Ignoring removed bh option [ 228.972035][T23445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.001022][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.023110][T23453] Invalid ELF header magic: != ELF [ 229.023961][T23455] loop6: detected capacity change from 0 to 128 [ 229.084951][T23465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8687'. [ 229.111765][T23467] loop6: detected capacity change from 0 to 256 [ 229.141265][T23471] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 229.147844][T23471] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.155585][T23471] vhci_hcd vhci_hcd.0: Device attached [ 229.155711][T23469] loop3: detected capacity change from 0 to 8192 [ 229.164750][T23472] vhci_hcd: connection closed [ 229.167977][ T5049] vhci_hcd: stop threads [ 229.168903][T23469] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.172678][ T5049] vhci_hcd: release socket [ 229.172688][ T5049] vhci_hcd: disconnect device [ 229.229850][T23477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8692'. [ 229.291016][T23486] loop7: detected capacity change from 0 to 128 [ 229.291127][T23485] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8705'. [ 229.306712][T23485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8705'. [ 229.360200][T23492] loop7: detected capacity change from 0 to 1764 [ 229.441522][T23504] loop9: detected capacity change from 0 to 512 [ 229.449087][T23504] EXT4-fs: Ignoring removed oldalloc option [ 229.469919][T23504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.482596][T23504] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.502287][T23504] EXT4-fs error (device loop9): ext4_get_first_dir_block:3525: inode #12: comm syz.9.8706: Attempting to read directory block (0) that is past i_size (3) [ 229.518190][ T29] audit: type=1400 audit(2000000034.990:2320): avc: denied { reparent } for pid=23503 comm="syz.9.8706" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.540823][ T29] audit: type=1400 audit(2000000034.990:2321): avc: denied { add_name } for pid=23503 comm="syz.9.8706" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.574244][T16529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.586061][T23523] loop3: detected capacity change from 0 to 256 [ 229.628178][ T29] audit: type=1400 audit(2000000035.120:2322): avc: denied { name_connect } for pid=23530 comm="syz.1.8717" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 229.841265][T23559] loop3: detected capacity change from 0 to 512 [ 229.850698][T23559] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0005) [ 229.858597][T23559] FAT-fs (loop3): Filesystem has been set read-only [ 230.156403][ T29] audit: type=1400 audit(2000000035.640:2323): avc: denied { map } for pid=23593 comm="syz.3.8748" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.232885][ T29] audit: type=1326 audit(2000000035.720:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23497 comm="syz.7.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0233e9a9 code=0x7fc00000 [ 230.336835][T23614] random: crng reseeded on system resumption [ 230.365327][T23614] Restarting kernel threads ... [ 230.377809][T23614] Done restarting kernel threads. [ 230.552903][T23626] loop7: detected capacity change from 0 to 512 [ 230.560333][T23626] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 230.653516][T23638] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 230.729764][ T29] audit: type=1400 audit(2000000036.220:2325): avc: denied { bind } for pid=23646 comm="syz.3.8773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.793752][T23653] tipc: Enabling of bearer rejected, failed to enable media [ 230.874379][T23665] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 230.916835][T23669] loop6: detected capacity change from 0 to 1024 [ 230.930042][T23669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.958538][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.049332][T23682] gretap0: entered promiscuous mode [ 231.058459][T23682] vlan2: entered promiscuous mode [ 231.455568][T23745] loop6: detected capacity change from 0 to 164 [ 231.478378][T23745] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 231.511335][T23751] sch_fq: defrate 4294967295 ignored. [ 231.599278][T23764] netlink: 'syz.6.8828': attribute type 2 has an invalid length. [ 231.639012][T23771] loop7: detected capacity change from 0 to 7 [ 231.871624][T23789] loop3: detected capacity change from 0 to 256 [ 231.886423][T23789] FAT-fs (loop3): Directory bread(block 1285) failed [ 231.896557][T23789] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 231.923946][T23796] __nla_validate_parse: 5 callbacks suppressed [ 231.923973][T23796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8843'. [ 231.959486][T23799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8844'. [ 232.184531][T23829] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.282945][T23838] random: crng reseeded on system resumption [ 232.305677][T23838] Restarting kernel threads ... [ 232.322894][T23838] Done restarting kernel threads. [ 232.399776][T23844] loop3: detected capacity change from 0 to 512 [ 232.415758][T23844] EXT4-fs (loop3): failed to initialize system zone (-117) [ 232.430795][T23844] EXT4-fs (loop3): mount failed [ 232.496008][T23850] bond_slave_0: entered promiscuous mode [ 232.501866][T23850] bond_slave_1: entered promiscuous mode [ 232.509885][T23850] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 232.518703][T23850] bond_slave_0: left promiscuous mode [ 232.524581][T23850] bond_slave_1: left promiscuous mode [ 232.602509][T23859] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 232.750181][T23870] vlan3: entered promiscuous mode [ 232.852694][T23880] loop7: detected capacity change from 0 to 1024 [ 232.883219][T23883] loop3: detected capacity change from 0 to 1024 [ 232.922543][T23880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.922976][T23883] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.999016][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 232.999034][ T29] audit: type=1400 audit(2000000038.470:2336): avc: denied { unlink } for pid=23882 comm="syz.3.8883" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 233.027904][ T29] audit: type=1400 audit(2000000038.470:2337): avc: denied { rename } for pid=23882 comm="syz.3.8883" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 233.084862][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.097177][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 233.186395][T23908] gretap0: entered promiscuous mode [ 233.203500][T23908] vlan3: entered promiscuous mode [ 233.231544][T23913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.535376][ T29] audit: type=1326 audit(2000000039.020:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 233.559014][ T29] audit: type=1326 audit(2000000039.020:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 233.600561][ T29] audit: type=1326 audit(2000000039.070:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 233.624295][ T29] audit: type=1326 audit(2000000039.070:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f83636be9e3 code=0x7ffc0000 [ 233.647832][ T29] audit: type=1326 audit(2000000039.070:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f83636be9e3 code=0x7ffc0000 [ 233.671295][ T29] audit: type=1326 audit(2000000039.070:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 233.694961][ T29] audit: type=1326 audit(2000000039.070:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 233.718584][ T29] audit: type=1326 audit(2000000039.070:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23942 comm="syz.6.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f83636be9a9 code=0x7ffc0000 [ 233.746676][T23950] loop3: detected capacity change from 0 to 512 [ 233.753479][T23950] EXT4-fs: Ignoring removed nobh option [ 233.788690][T23950] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.8910: corrupted inode contents [ 233.801997][T23950] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.8910: mark_inode_dirty error [ 233.814225][T23950] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.8910: corrupted inode contents [ 233.835157][T23950] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8910: mark_inode_dirty error [ 233.848744][T23950] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8910: Failed to acquire dquot type 0 [ 233.863353][T23960] loop6: detected capacity change from 0 to 764 [ 233.867880][T23950] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8910: corrupted inode contents [ 233.882950][T23950] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.8910: mark_inode_dirty error [ 233.894873][T23950] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8910: corrupted inode contents [ 233.908412][T23950] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8910: mark_inode_dirty error [ 233.919904][T23950] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8910: corrupted inode contents [ 233.935359][T23950] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 233.947737][T23962] loop6: detected capacity change from 0 to 2048 [ 233.954896][T23950] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.8910: corrupted inode contents [ 233.967780][T23950] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.8910: mark_inode_dirty error [ 233.997519][T23950] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 234.035890][T23950] EXT4-fs (loop3): 1 truncate cleaned up [ 234.049042][T23950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.097432][T23950] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.156749][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.157124][ T5016] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 234.441471][T24016] bond_slave_0: entered promiscuous mode [ 234.447207][T24016] bond_slave_1: entered promiscuous mode [ 234.455746][T24016] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 234.475264][T24016] bond_slave_0: left promiscuous mode [ 234.480752][T24016] bond_slave_1: left promiscuous mode [ 234.514091][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8946'. [ 234.582021][T24028] loop6: detected capacity change from 0 to 512 [ 234.622515][T24028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.668335][T24028] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 234.701284][T24028] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.8948: invalid block [ 234.744506][T24028] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8948: invalid indirect mapped block 4294967295 (level 1) [ 234.818926][T24028] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8948: invalid indirect mapped block 4294967295 (level 1) [ 234.859569][T24043] loop3: detected capacity change from 0 to 4096 [ 234.869725][T24028] EXT4-fs (loop6): 2 truncates cleaned up [ 234.886060][T24028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.907999][T24043] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 234.947840][T24043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.963295][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.011175][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.025589][T24053] bond_slave_0: entered promiscuous mode [ 235.031388][T24053] bond_slave_1: entered promiscuous mode [ 235.081301][T24053] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 235.108045][T24053] bond_slave_0: left promiscuous mode [ 235.113683][T24053] bond_slave_1: left promiscuous mode [ 235.427364][T24087] tap0: tun_chr_ioctl cmd 1074025677 [ 235.432908][T24087] tap0: linktype set to 773 [ 235.459347][T24101] loop7: detected capacity change from 0 to 1024 [ 235.500198][T24101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.548061][T24101] ext4 filesystem being mounted at /897/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.559838][T24107] loop6: detected capacity change from 0 to 512 [ 235.599691][T24107] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.8985: casefold flag without casefold feature [ 235.648256][T24107] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.8985: couldn't read orphan inode 15 (err -117) [ 235.661848][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.705203][T24107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.778960][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8989'. [ 235.864811][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.058816][T24144] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 236.131919][T24148] loop7: detected capacity change from 0 to 512 [ 236.159844][T24148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.212109][T24148] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 236.245515][T24148] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.9004: invalid block [ 236.288082][T24148] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.9004: invalid indirect mapped block 4294967295 (level 1) [ 236.338228][T24148] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.9004: invalid indirect mapped block 4294967295 (level 1) [ 236.364412][T24154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.367863][T24148] EXT4-fs (loop7): 2 truncates cleaned up [ 236.373005][T24154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.388411][T24148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.460081][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.782737][T24193] bridge0: port 1(macsec1) entered blocking state [ 236.789335][T24193] bridge0: port 1(macsec1) entered disabled state [ 236.807475][T24193] macsec1: entered allmulticast mode [ 236.812924][T24193] bridge0: entered allmulticast mode [ 236.831481][T24193] macsec1: left allmulticast mode [ 236.836550][T24193] bridge0: left allmulticast mode [ 237.276072][T24253] loop7: detected capacity change from 0 to 512 [ 237.286614][T24253] EXT4-fs: Ignoring removed nobh option [ 237.293356][T24258] netlink: 'syz.6.9056': attribute type 11 has an invalid length. [ 237.301342][T24258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9056'. [ 237.318865][T24258] netlink: 'syz.6.9056': attribute type 11 has an invalid length. [ 237.326736][T24258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9056'. [ 237.355614][T24253] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #3: comm syz.7.9054: corrupted inode contents [ 237.371478][T24250] loop3: detected capacity change from 0 to 8192 [ 237.382509][T24253] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #3: comm syz.7.9054: mark_inode_dirty error [ 237.419525][T24250] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 237.437717][T24253] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #3: comm syz.7.9054: corrupted inode contents [ 237.472316][T24253] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.9054: mark_inode_dirty error [ 237.502949][T24253] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.9054: Failed to acquire dquot type 0 [ 237.523050][T24274] x_tables: duplicate underflow at hook 4 [ 237.531554][T24253] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.9054: corrupted inode contents [ 237.570901][T24253] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #16: comm syz.7.9054: mark_inode_dirty error [ 237.595400][T24253] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.9054: corrupted inode contents [ 237.619568][T24253] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.9054: mark_inode_dirty error [ 237.638357][T24253] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.9054: corrupted inode contents [ 237.668559][T24253] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 237.678825][T24253] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.9054: corrupted inode contents [ 237.701558][T24253] EXT4-fs error (device loop7): ext4_truncate:4597: inode #16: comm syz.7.9054: mark_inode_dirty error [ 237.728611][T24253] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 237.743545][T24253] EXT4-fs (loop7): 1 truncate cleaned up [ 237.757603][T24253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.785191][T24253] ext4 filesystem being mounted at /917/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.928332][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.949895][ T5016] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 238.108479][T24314] netlink: 256 bytes leftover after parsing attributes in process `syz.6.9081'. [ 238.129290][T24313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9082'. [ 238.234428][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 238.234442][ T29] audit: type=1326 audit(2000000043.720:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.7.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 238.356672][ T29] audit: type=1326 audit(2000000043.770:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.7.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 238.381423][ T29] audit: type=1326 audit(2000000043.770:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.7.9088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0233e9a9 code=0x7ffc0000 [ 238.727410][T24362] netlink: 'syz.6.9102': attribute type 83 has an invalid length. [ 238.807447][T24364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9103'. [ 238.880417][T24366] loop6: detected capacity change from 0 to 8192 [ 239.038114][ T29] audit: type=1400 audit(2000000044.530:2370): avc: denied { unmount } for pid=14086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 239.081394][ T29] audit: type=1400 audit(2000000044.550:2371): avc: denied { name_bind } for pid=24373 comm="syz.7.9107" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 239.258410][ T29] audit: type=1400 audit(2000000044.740:2372): avc: denied { setopt } for pid=24384 comm="syz.3.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.278992][ T29] audit: type=1400 audit(2000000044.740:2373): avc: denied { ioctl } for pid=24384 comm="syz.3.9112" path="socket:[72948]" dev="sockfs" ino=72948 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.333817][T24393] netlink: 'syz.1.9116': attribute type 27 has an invalid length. [ 239.373673][T24397] loop3: detected capacity change from 0 to 164 [ 239.380752][T24397] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 239.393790][T24397] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 239.421929][T24393] team_slave_0: left promiscuous mode [ 239.427409][T24393] team_slave_1: left promiscuous mode [ 239.433078][T24397] rock: directory entry would overflow storage [ 239.440085][T24397] rock: sig=0x4f50, size=4, remaining=3 [ 239.445808][T24397] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 239.471436][T24393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.486318][T24393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.517141][T24393] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.525673][T24393] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.534206][T24393] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.542613][T24393] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.558735][T24393] bridge1: left promiscuous mode [ 239.563810][T24393] bridge1: left allmulticast mode [ 239.574861][T24393] ip6gre1: left promiscuous mode [ 239.580788][T24393] batadv0: left promiscuous mode [ 239.585861][T24393] macsec0: left promiscuous mode [ 239.591024][T24393] macsec0: left allmulticast mode [ 239.625371][T24398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.648122][T24398] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.666657][T24398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.717568][ T1035] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 239.802681][T24419] loop7: detected capacity change from 0 to 512 [ 239.804777][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9131'. [ 239.822145][T24425] erspan0: entered promiscuous mode [ 239.829703][T24419] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.839493][T24419] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 239.847534][T24424] loop3: detected capacity change from 0 to 1024 [ 239.868229][T24419] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 239.869192][T24424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.899123][T24419] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 239.912245][T24419] System zones: 0-2, 18-18, 34-35 [ 239.919557][ T29] audit: type=1326 audit(2000000045.400:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24427 comm="syz.1.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 239.920138][T24424] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.943970][ T29] audit: type=1326 audit(2000000045.400:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24427 comm="syz.1.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 239.978289][ T29] audit: type=1326 audit(2000000045.400:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24427 comm="syz.1.9132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 240.013124][T24419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.050519][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.096520][ T1035] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.143475][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.378361][ T5049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.425824][T24476] program syz.3.9151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.752682][T24508] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9164'. [ 241.016707][T24543] loop3: detected capacity change from 0 to 1024 [ 241.029669][T24543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.042159][T24543] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.055262][T24543] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.9180: path /484/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 241.134274][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.355572][T24578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9196'. [ 241.418347][ T5070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.426264][ T5070] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.577403][ T1035] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.778516][T24627] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 241.804789][T24627] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 242.493389][T24691] loop7: detected capacity change from 0 to 512 [ 242.501640][T24688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9244'. [ 242.530591][T24695] netlink: 'syz.7.9246': attribute type 27 has an invalid length. [ 242.546399][T24695] 0ªX¹¦D: left allmulticast mode [ 242.668699][T24695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.689964][T24695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.750191][T24695] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.760015][T24695] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.768980][T24695] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.779199][T24695] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.800033][T24695] wireguard0: left promiscuous mode [ 242.805302][T24695] wireguard0: left allmulticast mode [ 242.817988][T24695] bridge0: left promiscuous mode [ 242.871464][T24696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.908710][T24696] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.935961][T24696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.958948][T24706] netlink: 'syz.3.9262': attribute type 2 has an invalid length. [ 243.084433][T24723] new mount options do not match the existing superblock, will be ignored [ 243.125065][T24725] random: crng reseeded on system resumption [ 243.132305][T24731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9261'. [ 243.141371][T24731] netlink: 'syz.3.9261': attribute type 3 has an invalid length. [ 243.265382][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 243.265398][ T29] audit: type=1326 audit(2000000048.750:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 243.311484][ T29] audit: type=1326 audit(2000000048.800:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 243.335118][ T29] audit: type=1400 audit(2000000048.800:2459): avc: denied { perfmon } for pid=24746 comm="syz.1.9269" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.356175][ T29] audit: type=1400 audit(2000000048.800:2460): avc: denied { prog_run } for pid=24746 comm="syz.1.9269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.375263][ T29] audit: type=1326 audit(2000000048.800:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 243.398778][ T29] audit: type=1326 audit(2000000048.800:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 243.422498][ T29] audit: type=1326 audit(2000000048.800:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc248abe9a9 code=0x7ffc0000 [ 243.446075][ T29] audit: type=1326 audit(2000000048.800:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc248ab5967 code=0x7ffc0000 [ 243.469480][ T29] audit: type=1326 audit(2000000048.800:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc248a5ab89 code=0x7ffc0000 [ 243.492920][ T29] audit: type=1326 audit(2000000048.800:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24746 comm="syz.1.9269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc248ab5967 code=0x7ffc0000 [ 243.632530][T24757] netlink: 'syz.6.9271': attribute type 27 has an invalid length. [ 243.696006][T24757] tipc: Resetting bearer [ 243.740488][T24757] veth0_to_bond: left allmulticast mode [ 243.756274][T24757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.771740][T24757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.813868][T24757] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.822625][T24757] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.831160][T24757] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.840227][T24757] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.859732][T24757] veth5: left promiscuous mode [ 243.933366][T24761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.970000][T24761] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.999622][T24761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.044865][T24780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.063657][T24780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.352409][T24813] loop6: detected capacity change from 0 to 512 [ 244.367339][T24813] EXT4-fs: Ignoring removed oldalloc option [ 244.382567][T24813] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.9297: Parent and EA inode have the same ino 15 [ 244.400165][T24813] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.9297: Parent and EA inode have the same ino 15 [ 244.414407][T24813] EXT4-fs (loop6): 1 orphan inode deleted [ 244.427686][T24813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.445948][T24825] random: crng reseeded on system resumption [ 244.459181][T24813] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.514799][T24832] SELinux: syz.6.9306 (24832) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 244.569929][T24840] random: crng reseeded on system resumption [ 244.665304][T24850] loop3: detected capacity change from 0 to 512 [ 244.676617][T24853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9314'. [ 244.687391][T24850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.729717][T24850] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.9316: invalid indirect mapped block 4294967295 (level 0) [ 244.810762][T24850] EXT4-fs (loop3): Remounting filesystem read-only [ 244.818736][T24850] EXT4-fs (loop3): 1 orphan inode deleted [ 244.824744][T24850] EXT4-fs (loop3): 1 truncate cleaned up [ 244.831174][T24850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.881309][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.384163][ T5016] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.427371][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.447019][ T5016] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.494153][ T5016] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.554499][ T5016] tipc: Resetting bearer [ 245.562824][ T5016] tipc: Disabling bearer [ 245.571261][ T5016] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.616976][T24913] chnl_net:caif_netlink_parms(): no params data found [ 245.799026][ T5016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.814643][ T5016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.829144][ T5016] bond0 (unregistering): Released all slaves [ 245.838863][T24913] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.845989][T24913] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.854642][T24913] bridge_slave_0: entered allmulticast mode [ 245.861127][T24913] bridge_slave_0: entered promiscuous mode [ 245.868765][T24913] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.875852][T24913] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.883719][T24913] bridge_slave_1: entered allmulticast mode [ 245.890226][T24913] bridge_slave_1: entered promiscuous mode [ 245.917045][ T5016] tipc: Disabling bearer [ 245.930395][ T5016] tipc: Left network mode [ 245.950522][T24913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.983189][ T5016] hsr_slave_0: left promiscuous mode [ 245.989080][ T5016] hsr_slave_1: left promiscuous mode [ 245.994781][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.003613][ T5016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.015031][ T5016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.023306][ T5016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.035652][T24977] IPv6: Can't replace route, no match found [ 246.042652][ T5016] veth1_macvtap: left promiscuous mode [ 246.048232][ T5016] veth0_macvtap: left promiscuous mode [ 246.053750][ T5016] veth1_vlan: left promiscuous mode [ 246.060580][ T5016] veth0_vlan: left promiscuous mode [ 246.128819][ T5016] pimreg (unregistering): left allmulticast mode [ 246.140500][T24993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9377'. [ 246.149520][T24993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9377'. [ 246.195521][ T5016] team0 (unregistering): Port device team_slave_1 removed [ 246.206393][ T5016] team0 (unregistering): Port device team_slave_0 removed [ 246.233275][T25003] netlink: 'syz.3.9381': attribute type 27 has an invalid length. [ 246.244466][T24913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.396117][T25003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.421916][T25003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.483322][T25003] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.492403][T25003] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.501424][T25003] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.510430][T25003] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.602874][T24913] team0: Port device team_slave_0 added [ 246.721235][T25007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.739978][T25007] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.776967][T25007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.793823][T24913] team0: Port device team_slave_1 added [ 246.834537][T24913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.841542][T24913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.867537][T24913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.881622][T24913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.888605][T24913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.914743][T24913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.983655][T25034] loop3: detected capacity change from 0 to 4096 [ 246.985575][T24913] hsr_slave_0: entered promiscuous mode [ 246.998451][T24913] hsr_slave_1: entered promiscuous mode [ 246.998927][T25034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.022872][ T5016] IPVS: stop unused estimator thread 0... [ 247.027857][T25034] EXT4-fs (loop3): shut down requested (1) [ 247.044910][T25034] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 247.073742][T25034] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 247.103861][T25034] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 247.113836][T25034] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 247.145617][T19586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.387549][T24913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.400270][T24913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.420192][T24913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.436359][T24913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.502586][T24913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.524910][T24913] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.538228][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.545372][ T5016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.592615][T24913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.603666][T24913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.619189][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.626387][ T5016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.676040][T24913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.775116][T24913] veth0_vlan: entered promiscuous mode [ 247.783096][T24913] veth1_vlan: entered promiscuous mode [ 247.797794][T24913] veth0_macvtap: entered promiscuous mode [ 247.805324][T24913] veth1_macvtap: entered promiscuous mode [ 247.815282][T24913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.826550][T24913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.837075][T24913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.845891][T24913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.854672][T24913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.863475][T24913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.916196][T25132] netlink: 'syz.7.9433': attribute type 21 has an invalid length. [ 247.924151][T25132] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.989058][T25137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9424'. [ 247.998979][T25140] netlink: 'syz.4.9423': attribute type 27 has an invalid length. [ 247.999060][T25137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9424'. [ 248.046032][T25140] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.053361][T25140] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.099907][T25140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.124506][T25140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.161708][T25157] loop7: detected capacity change from 0 to 2048 [ 248.169430][T25140] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.178411][T25140] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.187405][T25140] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.196326][T25140] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.202135][T25157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.251365][T25147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.271336][T14086] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.271527][T25147] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.290304][T25147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.387206][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 248.393531][ T29] audit: type=1400 audit(2000000053.870:2817): avc: denied { write } for pid=25183 comm="syz.7.9445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 248.437224][ T29] audit: type=1400 audit(2000000053.920:2818): avc: denied { map } for pid=25189 comm="syz.6.9449" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.469974][ T29] audit: type=1400 audit(2000000053.960:2819): avc: denied { create } for pid=25191 comm="syz.7.9451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 248.514440][ T29] audit: type=1400 audit(2000000053.960:2820): avc: denied { create } for pid=25193 comm="syz.4.9450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 248.535408][ T29] audit: type=1400 audit(2000000053.980:2821): avc: denied { write } for pid=25193 comm="syz.4.9450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 248.555758][ T29] audit: type=1400 audit(2000000053.980:2822): avc: denied { bind } for pid=25193 comm="syz.4.9450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 248.606018][ T29] audit: type=1400 audit(2000000054.090:2823): avc: denied { create } for pid=25210 comm="syz.4.9459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 248.639039][ T29] audit: type=1400 audit(2000000054.090:2824): avc: denied { write } for pid=25210 comm="syz.4.9459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 248.694833][T25223] netlink: 'syz.7.9465': attribute type 8 has an invalid length. [ 248.787562][T25237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9472'. [ 248.797143][T25237] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9472'. [ 248.859729][T25235] loop4: detected capacity change from 0 to 8192 [ 248.869838][ T29] audit: type=1400 audit(2000000054.360:2825): avc: denied { mount } for pid=25234 comm="syz.4.9471" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 248.912438][ T29] audit: type=1400 audit(2000000054.400:2826): avc: denied { unmount } for pid=24913 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 249.000305][T25260] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9482'. [ 249.038998][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9486'. [ 249.049220][T25268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9486'. [ 249.320260][T25294] atomic_op ffff88811c082928 conn xmit_atomic 0000000000000000 [ 249.937186][T25312] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9505'. [ 249.984125][T25318] netlink: 'syz.1.9508': attribute type 27 has an invalid length. [ 250.021234][T25320] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 250.063888][T25321] erspan0: left promiscuous mode [ 250.099882][T25321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.119038][T25321] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.131994][T25328] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9512'. [ 250.146240][T25330] loop4: detected capacity change from 0 to 512 [ 250.153890][T25321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.181312][T25330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.198101][ T3394] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.212610][T25330] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.244196][T24913] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.268550][T25306] ================================================================== [ 250.276673][T25306] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 250.283095][T25306] [ 250.285417][T25306] write to 0xffffc90002fc7bc0 of 4 bytes by interrupt on cpu 1: [ 250.293057][T25306] pollwake+0xb6/0x100 [ 250.297129][T25306] __wake_up+0x66/0xb0 [ 250.301234][T25306] bpf_ringbuf_notify+0x22/0x30 [ 250.306104][T25306] irq_work_run+0xe2/0x2d0 [ 250.310556][T25306] __sysvec_irq_work+0x22/0x170 [ 250.315419][T25306] sysvec_irq_work+0x66/0x80 [ 250.320037][T25306] asm_sysvec_irq_work+0x1a/0x20 [ 250.324995][T25306] native_apic_msr_write+0x3d/0x60 [ 250.330120][T25306] x2apic_send_IPI_self+0x10/0x20 [ 250.335160][T25306] arch_irq_work_raise+0x46/0x50 [ 250.340114][T25306] __irq_work_queue_local+0x10f/0x2c0 [ 250.345502][T25306] irq_work_queue+0x70/0x100 [ 250.350105][T25306] bpf_ringbuf_discard+0xd3/0xf0 [ 250.355056][T25306] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 250.360532][T25306] bpf_trace_run3+0x10f/0x1d0 [ 250.365223][T25306] kmem_cache_free+0x257/0x300 [ 250.370012][T25306] kernfs_free_rcu+0x97/0xb0 [ 250.374616][T25306] rcu_core+0x5a5/0xc00 [ 250.378777][T25306] rcu_core_si+0xd/0x20 [ 250.382930][T25306] handle_softirqs+0xb7/0x290 [ 250.387615][T25306] run_ksoftirqd+0x1c/0x30 [ 250.392049][T25306] smpboot_thread_fn+0x328/0x530 [ 250.397012][T25306] kthread+0x489/0x510 [ 250.401088][T25306] ret_from_fork+0xda/0x150 [ 250.405599][T25306] ret_from_fork_asm+0x1a/0x30 [ 250.410374][T25306] [ 250.412703][T25306] read to 0xffffc90002fc7bc0 of 4 bytes by task 25306 on cpu 0: [ 250.420340][T25306] do_sys_poll+0x99c/0xbd0 [ 250.424761][T25306] __se_sys_ppoll+0x1b9/0x200 [ 250.429468][T25306] __x64_sys_ppoll+0x67/0x80 [ 250.434071][T25306] x64_sys_call+0x2de5/0x2fb0 [ 250.438759][T25306] do_syscall_64+0xd2/0x200 [ 250.443263][T25306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.449158][T25306] [ 250.451481][T25306] value changed: 0x00000000 -> 0x00000001 [ 250.457210][T25306] [ 250.459533][T25306] Reported by Kernel Concurrency Sanitizer on: [ 250.465687][T25306] CPU: 0 UID: 0 PID: 25306 Comm: syz.7.9502 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) [ 250.478189][T25306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.488266][T25306] ================================================================== [ 250.496854][ T5034] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.938027][ T3394] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 251.498110][ T5016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 251.505922][ T5016] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.118103][ T3394] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.257418][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!