last executing test programs: 2m43.737345917s ago: executing program 1 (id=1117): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 2m43.700899229s ago: executing program 1 (id=1118): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) fsync(r0) 2m43.234610901s ago: executing program 1 (id=1136): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0xfffe}, &(0x7f0000000180)=0x8) 2m43.126988239s ago: executing program 1 (id=1137): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 2m42.988939238s ago: executing program 1 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000c70000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdc1, &(0x7f0000001cc0)={@random="841307217ac9", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "108ca2", 0xd8b, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, {[], {0x4e23, 0x4e22, 0xd8b, 0x0, @gue={{0x2, 0x0, 0x3, 0x47}, "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"}}}}}}}, 0x0) 2m42.583561776s ago: executing program 1 (id=1145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@remote, 0x0, 0x7, 0x0, 0x843, 0x2}, {0x0, 0x1, 0x0, 0x9}, {0xfffffffffffff800, 0x7fffffffffd, 0x4, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x1, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2m42.554536998s ago: executing program 32 (id=1145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@remote, 0x0, 0x7, 0x0, 0x843, 0x2}, {0x0, 0x1, 0x0, 0x9}, {0xfffffffffffff800, 0x7fffffffffd, 0x4, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x1, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2m4.001126957s ago: executing program 4 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 2m3.915347863s ago: executing program 4 (id=2019): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x221c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0xa80, &(0x7f0000000280)="$eJzs3d1rXGd+B/DvGet9Q9abdbNpyMaTBGe1WVfRS+NgctF1pJGtrV6KJEMMLetlLRdj0ZR1CxtTiAOlVw1dSim0hVJy2avA9qJ7U3zTl8tetVBo8x+U0CuntJ0yZ2akGXlGYytjy8l+PmY055zn97ydc+Y81mjmPOGLrF6vl48jrl/+68fZWJ48by998tHHHzYeH9zJWE7kjeJvk4kk1WTkf8tzZXRxaXNjbUBBN5OrSe4mRZLxNJ/7mOxau5rij/LU/vrdFH+R53pkm3jIzjFQnZ9rx33+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2lxaXZ2rsjqyvrld6r9lVOAH5LeLu5n5azfxc8GVVskReORiYn2VN/PndpPfrbx4+W80Fx7oTnz90Ruf+XZk299faTSzn9Igx6LW+/dvvmD3d2dH7XWx6vV0YGZxh95sx7a2BH35MXa+srWxsrahYu16srWRvX8uXOzr19a3qour6S2dWVru7ZWXdysXdje2KxOL367Onf+/EK1NnNl4/L6xaWZ1Vp745u/ND87e676vZlfq13Y3NpYf/17M1uLl1ZWV1fWL5YxjeRGzJuNE/FXV7ar27ULa9Xq9Ru7OwuDGtkImuuZUnQHzQ8qaX52fn5ubn4y5944/8abs7MjrQ3zc+0NswfkvojjP2kZtr984Mi/Gfr1Gz6HSmv8z2pWsp7LeSfVnv8Ws5TNbGStR1qxX157/D/z9/96aL2d4397lH9uP/n5lOP/i821F/uN/33aOvhfvd4s+aj52/9u5b3czs38ILvZzU5+9LlLrOYfutc/O5j+P/V6/QjlVhu9Pd25D4bQ1oupZT0r2cpGVrKWC+WWamtLNedzLucym+/nUpazlWqWs5LV1LKVK9nKdmrlGbWYzdSqyXY2splqprOYb6eauZzPZBZSTS0zuZKNXM56LmYpF8pSrudGud8XDmnjXtDcgwTNHxJ032D++cb/+hP4P0EeuSFfweHo6q3xf6xvQL29NL342FoFAAAADNMv/lOePvXMP/57Mppvlu/LL6+s1maPu1kAAADAEJUf13uh8TRaT/LNFD1+/68cU+MAAACAoSjK79gVSaZyeqS18UZ2cyI+BAAAAABfEuXf/19sPE01lk6n2LsTytXjbhsAAAAwHIPvsT8wophI656W1WvN52utiNZ9fqeWV1ZrM4sbq2/N5dXyLgPlNw3uK+1EUoyWXz94LS81o16aaj5PdZc40Yiam3lrLq/l5VZHpl9pPL0y3SNyvhn5rWbktw6JXGhEAsCX3cv3j8ef1R9y/H8tZ5sRZ58fGUsy8nyPkXV2f2QdOY6OAgB7Bs+x0x3xfitf5/j/y/u//4+2krvG/2dy/f8aG3cykx/m3ezmWs7mdDPydHe9v/6T1nsGex9DmM3ZAe8GtGP/+c1Kzg54P2CqY6KXswPeEWjG5jeShUd7EADgMXu5zzjcb/wvI9L+4GBz/D/b8ft/7v/9f29qoR1fKQSAJ8LeDPZDXaif6Nxy3H0EALoZpQEAAAAAAAAAAAAAAAAAAAAAAAAAAGD4hnrb/4kjZv+P1rx+zS31IbRnPA8QPNnaB+0t7z/U3vjg1nu3/zhJZ1Kl0YlhT6bQXChbOtySK0Mop55k+PNHHPdCTiZH3qvplTSW5JE3fnIYVXzWWmi+NiqHXTwuH5oKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF0CRnOi1vZKMJ5lN8vrjb9Wjc+e4G/D4/UrnSnEv9/LjPH18zQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HJq3f+/kubzV5qbMlJJziS5mqR+3G0cpnvH3YAhmTxivo77/zeOeepFRpqHPcXo4tLmxlrj8JdzP1Q++ejjD7/RnX38QespAysHJpdo1XAw9q+eai99rcw1tbRz6+bvvPvb1aW3U8lY3t5eXl1au7j53f0szxY/TappPtoa7W08fu/M3/2kR89/2uhpbwfrXS53ztL99X6jV+7D6z3Mjd2d+UZN27V3tn/3t278uCPpmbyUvDKdTHfX9JuNR5+aXsroYbUVnxZ/UDydP83V8vg39kZRLxqH6Ktl/yev39jdmfnhu7vX+rTpZE4nuZZMDGzT3q4+XV5PeirPuspoo9bZMqjx49SAPvbWOcdFs8S5Pn34WnnKTLX6MNbVh0qfOqv9+1Du8I79XmkvFMXBFi20WjSW7hZ9Pa/2ONL18aT/Xnj18CPdW/Fp8W/FpfxLfr9j/o9K4/ifSf9XZ3cRZWTHmdI3stKMLHs+35nw/YOR//lnD9T6ntPU8LD+sOvFW+m4/reO1ZCuR/Xi0OtRR40LfWrs/bo4UOPBs6LSt+PliHTqQI7W1advpmY7TzWj+rTzF/KdZOT5w66K943W3+l/RenO/93eyUd9/f95MZ3/yh3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE++IjnRa3slOZPkZHu9mtQfotjxfgmVqeJhmzhUd/Z+fMGdKn9WurZ9MDhbcS/36u8/qkYBAAAAAAAA8Li9vfTJRx9/2HiUf48/ca9eb/19v5qMJDlZ/MlkljY31gYUNJpcTXK3sTzRL+i/603dWxv58tT++t2k/tWjdwkAGOD/AwAA//8B8nJS") poll(&(0x7f0000000000), 0x3d, 0x200000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b '], 0xb8) 2m3.82621437s ago: executing program 4 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)=@can={{}, 0x41, 0x0, 0x4, 0x0, "5000040000008e56"}, 0x10}}, 0x0) 2m3.783843033s ago: executing program 4 (id=2023): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xe7) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4083, 0xff3}], 0x1, 0x40, 0x9, 0x1b) 2m3.623354203s ago: executing program 4 (id=2026): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000700)={0x1, &(0x7f0000000640)=[{0x0, 0x6378}]}) 2m3.422268297s ago: executing program 4 (id=2027): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x6aed42, 0x4) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000200)='./file0\x00', 0x0, r1) 2m3.422131847s ago: executing program 33 (id=2027): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x6aed42, 0x4) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000200)='./file0\x00', 0x0, r1) 49.848368082s ago: executing program 5 (id=4104): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2008404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1, 0x100000002, 0xffffffffffffffd, 0x4}) 49.593167529s ago: executing program 5 (id=4101): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xd3c, 0x3, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 49.542887383s ago: executing program 5 (id=4102): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200) 49.472808548s ago: executing program 5 (id=4105): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 49.395498073s ago: executing program 5 (id=4108): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x12000, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) 49.218419256s ago: executing program 5 (id=4114): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000240)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000140)="55f0e46e5a", 0x5}, {&(0x7f0000000380)="d6503c64000000000ddbe639cb11767c032512ba0a6c14", 0x17}], 0x3}, 0x40011) 49.187966538s ago: executing program 34 (id=4114): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000240)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000140)="55f0e46e5a", 0x5}, {&(0x7f0000000380)="d6503c64000000000ddbe639cb11767c032512ba0a6c14", 0x17}], 0x3}, 0x40011) 23.566312974s ago: executing program 6 (id=4869): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0xc}, 0x20) 23.562455635s ago: executing program 6 (id=4871): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 23.349186209s ago: executing program 6 (id=4876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, r0}, 0xc) 23.314991582s ago: executing program 6 (id=4878): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0xe7) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4083, 0xff3}], 0x1, 0x8000, 0x9, 0x1b) 23.215314108s ago: executing program 6 (id=4879): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x108000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89101) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) 23.075785448s ago: executing program 6 (id=4880): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x6, 0x1, 0xfe, 0x7, 0x1b, "9a2ab0d114ae4ce3"}) socket$inet6_tcp(0xa, 0x1, 0x0) 23.046096731s ago: executing program 35 (id=4880): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x6, 0x1, 0xfe, 0x7, 0x1b, "9a2ab0d114ae4ce3"}) socket$inet6_tcp(0xa, 0x1, 0x0) 20.910834738s ago: executing program 0 (id=4922): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)="0000000000000002", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 20.865186381s ago: executing program 0 (id=4923): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r1, 0x1) 20.772539447s ago: executing program 0 (id=4925): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000180)='1\x00', 0x2) 20.743639709s ago: executing program 0 (id=4927): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 20.697456482s ago: executing program 0 (id=4930): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x548) socket$nl_route(0x10, 0x3, 0x0) 20.538589213s ago: executing program 0 (id=4936): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)={[{@map_acorn}, {@block={'block', 0x3d, 0x400}, 0x0}, {@check_relaxed}, {@overriderock}, {@map_normal}, {@showassoc, 0x41}, {@session={'session', 0x3d, 0x42}}, {@uid}, {@cruft}, {@block={'block', 0x3d, 0x400}}, {@map_off}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}]}, 0x2, 0x6d2, &(0x7f0000000f40)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000005280)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 20.515004385s ago: executing program 36 (id=4936): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)={[{@map_acorn}, {@block={'block', 0x3d, 0x400}, 0x0}, {@check_relaxed}, {@overriderock}, {@map_normal}, {@showassoc, 0x41}, {@session={'session', 0x3d, 0x42}}, {@uid}, {@cruft}, {@block={'block', 0x3d, 0x400}}, {@map_off}, {@mode={'mode', 0x3d, 0x4}}, {@map_off}]}, 0x2, 0x6d2, &(0x7f0000000f40)="$eJzs3V1vG1kdx/HfOE7iZKGsAFVV1YfTlpVSUdyxs00VFYk143EyYHusGQe1EtKqbJNVVbcLbZFobkpueJCWN4C44QIueBFIXO+rgBsE0grukHYvBs2TH+KnTZu2u9vvx9r1eM6Zc/5nxvVfE3vOCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHLqtl2x1PTaOzfNdE498FvZ8qfReHna2qIupwuX5/YrWfF/ekM6la469c1B8cn4fxd1Jn11RqX4qaT9N06+eeMbxUK+/YyAn4WO2uCjJ5/eu93r7T6cVmFl0OKCjtz8q6RCvrSSHZMJlbbcthf6Xqu25Rov9M3mxoZ9dbsRmobXdMNbYddtGSdwC10/MGvOZVPZ3Fw3bvmWv9Peqteabr7y+neqtr1hfrCcHmhJ5dDZ9ppNr72V1ImL4zrXzYc/Tiu4tZYxe3d7u+vzRhJXqnyWStV5lap2tVqpVKuVjWub167bdnF4RUFS0Y5Zdp/GNjn2Ny2+YI7ngxs4BoU4///Dkpoqqa0d3ZSZ+HBUVyBfrSnlmTz/v3XVndlvP/+XSv0sf0r6XlZ8Wkn+P5e+Ojct/0+JxcgkG0wqsaasP9pjMYnI6JGeaF/3dFs99bSrh0doY2V6JOefP8KX8Iieakuu2vIUypenlmra0p++qmyN0aY2tCFb72pbDYUyashTU65C3VKortzkHeUokKuauvIVyGhNji7LqKJNbWpdRq7KuiVfO2prS3XV9L8oivZ0N9nv6zPiVF6pMqXC8nCl6oyWqraGkvkflOf/nzxN36d20T6E/P96Sd8Hy+nTR7PqAJ8DUXb+P6wwf7PzLy4iAAAAAABw3Kzkr+9W8t39WUmRGl7TtV91WAAAAAAA4BhZipZ1RlZ8/i/prB5y/g8AAAAAwJeNlVxjZ0laTX7Ubw2uhPosfwRYeAkhAgAAAACA55Rc+X9uSYqSSSvOyzrS+T8AAAAAAPgC+M3QHPvFfI7dKP9avyAp7Cxbf/3PsoJF66Bz81vW/VpcUruf1fnkcIvdxmnrRDZRb/K0JCl55bhnrDPp5JjZJJj9eQc/3ps3178VHApgaWG4gSkBWHHPG8XslT7UhXSTC9k883f2/x4lJWkvqw2v6ZYdv3mjolrtRKHr3uz+/MHdX0hB/5cOe3d7u+X3PujdSWI5iFcd3I8bfToSTmHyzhjE8jiZbyG55mLSiFfUyLv8bbu1aiX92vn4F1S7XxjuaNYBGPT5K11U8quNi6tp3dX9/oz78fhL8fgr5eSQjYw+WLQGUVQOj3zSgZgSRSmJ4lJa59LaJVX/mS73j0LBKn17QaqWx4/BSBTV4Sjm7wvrv2P7YiiK5CkvGdoX63EUf4sbmhLF+tGiGDsiAPCq7Omskk+hs0omMe9noVKWd/P0kH+oPVPemZ/d3xnN7o9/H0XJBgtSMftuYmYvJcWf6GtWkoeW0iEVT0/4RLezvFLSlE90+zmyW9zXXwb3QMrCHovikyiKblSSfn93KKv+caS7sX7DZnUh3oVXH9//aTIBfuz93fd3H1Sr6xv227Z9rarFZBjZ04LIPQCAMfPvsTO3hvW2LqQ1Ltz591vp0kjG+3r/JwVlvacP1NMdXclvIXB+cqurQz9DuJKetWrorNWcfPNGcl+6JKMO3eHlytSzuiSXDrVb7dddVL7JaKYe1F1/wUcBAICX6+KcPDw5/5dG8v8VraU11k73z7v3vyaN59E4l2dnx/1T+mk5tzI/+HeOe28AAPB6cIOPrdXur60g8DrvVjY3K7XutmsC3/mhCbz6lmu8dtcNnO1ae8s1Kvpd3/GbphNo2au7oQl3Oh0/6JqGH5iOH3o3kzu/m+zW76HbqrW7nhN2mm4tdI3jt7s1p2vqXuiYzs73m1647QbJxmHHdbyG59S6nt82ob8TOG7ZmNB1hyp6dbfd9RpevNg2ncBr1YJb5kd+c6flmrobOoHX6fppg3lfXrvhB62k2XIxmvR7AQAAXjuPnuzfu93r7T48vLASn5qnaw40XJR/GT9xqyU9ehKflcdrilkRcwQBAPA5M0jgR9io9AIDAgAAAAAAAAAAAAAAAAAAAAAAY6Ze//esC4uaUCT11/zsRLZGv9TgEsOxdiwdd2BHWSgcdav8koj9ex9Nq7Ok2yv9Nfnu7/V2F/KRHry0Af7rK9IbyRqla4rH39fKjIPbX8gvDT2GTr+7lzY1tU5cOLFouX8sis/wz2FpfvAP/jylKIqiaHYXy6P7cGlkgIVZnRYlPVyafwgOD2fsLQrgy+r/AQAA//+fzC+r") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000005280)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 2.415257973s ago: executing program 7 (id=5272): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.013823191s ago: executing program 3 (id=5277): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000301010300000000000000000a0000090c001980080001000d0100003c0001800c000280010001000100"], 0x5c}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) 1.839939583s ago: executing program 3 (id=5282): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010100}, 0xc) 1.74316479s ago: executing program 3 (id=5284): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008000) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) 1.658974586s ago: executing program 3 (id=5285): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="37a2ecf2383a37e7ff01e80f71f8fdfdd40874ca22bccd52ccdc83231843bc494b2a2ccc", 0x24}, {0x0}], 0x2}, 0x800) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x651, 0x2}, 0x90) 1.44070481s ago: executing program 8 (id=5290): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.386989155s ago: executing program 7 (id=5292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x20) 1.3008085s ago: executing program 8 (id=5293): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 1.29859395s ago: executing program 7 (id=5304): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000001001"], 0x10b8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) 1.227776715s ago: executing program 7 (id=5296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.170310359s ago: executing program 2 (id=5297): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.096687714s ago: executing program 8 (id=5298): set_mempolicy(0x1, 0x0, 0x7582) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) r0 = socket$inet6(0xa, 0x2, 0x0) dup2(r0, 0xffffffffffffffff) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1.095311124s ago: executing program 9 (id=5299): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 1.01301548s ago: executing program 2 (id=5300): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000580)="f156b5", 0x3}], 0x1, 0x5e9e, 0x3) socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 968.044003ms ago: executing program 8 (id=5301): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) 949.797355ms ago: executing program 2 (id=5302): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x0, 0x0, 0x98}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 932.559545ms ago: executing program 8 (id=5303): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 919.035147ms ago: executing program 2 (id=5305): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 811.445854ms ago: executing program 9 (id=5306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xfffffffb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 754.293598ms ago: executing program 3 (id=5307): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 503.456015ms ago: executing program 9 (id=5308): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7105097f010609010f01"], 0x10) 430.16683ms ago: executing program 8 (id=5309): socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") syz_clone(0x1144380, 0x0, 0x0, 0x0, 0x0, 0x0) 429.64869ms ago: executing program 2 (id=5319): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e63, 0xe4, @empty, 0x7daa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e630e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee80000000000000000200000000", 0x58}], 0x1) 335.616097ms ago: executing program 7 (id=5310): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2804000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x240, &(0x7f0000000480)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 332.823797ms ago: executing program 9 (id=5311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) write(r0, 0x0, 0x0) 324.243027ms ago: executing program 2 (id=5312): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x2, 0x349}, &(0x7f0000000500), &(0x7f0000000600), 0x0) 221.517615ms ago: executing program 7 (id=5313): set_mempolicy(0x1, 0x0, 0x7582) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) r0 = socket$inet6(0xa, 0x2, 0x0) dup2(r0, 0xffffffffffffffff) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 208.895376ms ago: executing program 3 (id=5314): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 106.826052ms ago: executing program 9 (id=5315): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000580)="f156b5", 0x3}], 0x1, 0x5e9e, 0x3) socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 9 (id=5316): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): g EA inode 12 err=-117 [ 164.402557][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 164.402574][ C1] EXT4-fs (loop6): initial error at time 1775509336: ext4_xattr_inode_iget:441: inode 12 [ 164.402600][ C1] EXT4-fs (loop6): last error at time 1775509336: ext4_xattr_inode_iget:441: inode 12 [ 164.512675][T11913] loop6: lost filesystem error report for type 5 error -117 [ 164.512931][T11913] EXT4-fs (loop6): 1 orphan inode deleted [ 164.527361][T11913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.595840][ T8392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.625103][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 164.625122][ T28] audit: type=1326 audit(1775509336.874:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11919 comm="syz.2.3409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb0d9a8c819 code=0x7ffc0000 [ 164.686097][T11931] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3416'. [ 164.700174][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3416'. [ 164.709316][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3416'. [ 164.749511][T11940] loop3: detected capacity change from 0 to 512 [ 164.770920][T11940] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.816404][T11940] EXT4-fs (loop3): 1 truncate cleaned up [ 164.860482][T11940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.926346][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.947902][T11957] syzkaller1: entered promiscuous mode [ 164.954071][T11957] syzkaller1: entered allmulticast mode [ 164.975939][ T28] audit: type=1326 audit(1775509337.224:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.047222][ T28] audit: type=1326 audit(1775509337.224:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.076032][ T28] audit: type=1326 audit(1775509337.224:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.101744][ T28] audit: type=1326 audit(1775509337.224:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.144502][ T28] audit: type=1326 audit(1775509337.224:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.169153][ T28] audit: type=1326 audit(1775509337.224:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.214962][T11970] loop0: detected capacity change from 0 to 128 [ 165.229249][ T28] audit: type=1326 audit(1775509337.224:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.272301][ T28] audit: type=1326 audit(1775509337.224:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.301157][ T28] audit: type=1326 audit(1775509337.224:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11958 comm="syz.5.3429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 165.325269][T11974] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.522373][T11997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.543689][T11997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.006932][T12034] netlink: 'syz.0.3463': attribute type 1 has an invalid length. [ 166.026494][T12034] loop0: detected capacity change from 0 to 128 [ 166.123508][T12038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.164563][T12011] IPVS: You probably need to specify IP address on multicast interface. [ 166.178656][T12011] IPVS: Error connecting to the multicast addr [ 166.345017][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3469'. [ 166.363023][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3469'. [ 166.496056][T12062] bridge1: entered promiscuous mode [ 166.512325][T12062] bridge1: entered allmulticast mode [ 166.524203][T12062] team0: Port device bridge1 added [ 166.545864][T12062] bridge0: port 2(team0) entered blocking state [ 166.552517][T12062] bridge0: port 2(team0) entered disabled state [ 166.559034][T12062] team0: entered allmulticast mode [ 166.565236][T12062] team0: left allmulticast mode [ 166.610618][T12073] pim6reg: entered allmulticast mode [ 166.631270][T12073] pim6reg: left allmulticast mode [ 166.862160][T12103] loop7: detected capacity change from 0 to 7 [ 166.909002][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 166.919154][ C0] buffer_io_error: 10899 callbacks suppressed [ 166.919174][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 166.934387][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 166.944570][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 167.184277][T12129] 9pnet: p9_errstr2errno: server reported unknown error [ 167.300106][T12127] loop6: detected capacity change from 0 to 32768 [ 167.360319][ T3306] loop6: p1 p3 < > [ 167.368570][T12127] loop6: p1 p3 < > [ 167.833802][T12171] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3523'. [ 167.887402][T12179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.898193][T12179] syz.0.3526 (12179) used greatest stack depth: 8736 bytes left [ 168.050773][T12197] loop6: detected capacity change from 0 to 256 [ 168.240480][T12215] serio: Serial port ptm0 [ 168.338385][T12225] xt_connbytes: Forcing CT accounting to be enabled [ 168.346874][T12225] program syz.6.3546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.395226][T12227] loop6: detected capacity change from 0 to 2048 [ 168.722982][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3561'. [ 168.788540][T12262] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.814758][T12264] syzkaller1: entered promiscuous mode [ 168.825961][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3566'. [ 168.835646][T12264] syzkaller1: entered allmulticast mode [ 168.959509][T12277] team0 (unregistering): Port device team_slave_0 removed [ 168.970440][T12277] team0 (unregistering): Port device team_slave_1 removed [ 169.076970][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.089775][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.288875][T12309] loop3: detected capacity change from 0 to 512 [ 169.303685][T12309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.330218][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.897063][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 169.897083][ T28] audit: type=1400 audit(1775509342.144:1903): avc: denied { mount } for pid=12391 comm="syz.0.3594" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 170.144127][T12422] loop0: detected capacity change from 0 to 128 [ 170.260242][ T28] audit: type=1326 audit(1775509342.504:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.404723][ T28] audit: type=1326 audit(1775509342.504:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.438838][ T28] audit: type=1326 audit(1775509342.504:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.450506][T12432] loop0: detected capacity change from 0 to 256 [ 170.467797][ T28] audit: type=1326 audit(1775509342.504:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.529638][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3606'. [ 170.546669][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3606'. [ 170.570167][ T28] audit: type=1326 audit(1775509342.504:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.672358][ T28] audit: type=1326 audit(1775509342.504:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.740131][ T28] audit: type=1326 audit(1775509342.504:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.807325][ T28] audit: type=1326 audit(1775509342.504:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 170.831195][ T28] audit: type=1326 audit(1775509342.504:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.3599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82ff3c819 code=0x7ffc0000 [ 171.289862][T12489] loop6: detected capacity change from 0 to 8192 [ 171.363717][T12498] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3617'. [ 171.380290][T12498] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3617'. [ 171.474014][T12489] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.402394][T12563] loop6: detected capacity change from 0 to 128 [ 172.628394][T12587] loop0: detected capacity change from 0 to 512 [ 172.832357][T12599] bio_check_eod: 10899 callbacks suppressed [ 172.832380][T12599] syz.0.3655: attempt to access beyond end of device [ 172.832380][T12599] loop0: rw=34817, sector=352, nr_sectors = 966 limit=512 [ 172.924831][T12614] loop5: detected capacity change from 0 to 512 [ 172.959545][T12614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.972318][T11883] tipc: Subscription rejected, illegal request [ 172.978997][T12620] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3668'. [ 172.989845][T12614] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.010130][T12620] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3668'. [ 173.043228][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.057936][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.057936][ T8423] loop0: rw=1, sector=1320, nr_sectors = 2048 limit=512 [ 173.076287][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.076287][ T8423] loop0: rw=1, sector=3368, nr_sectors = 2048 limit=512 [ 173.101432][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'. [ 173.111565][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'. [ 173.117467][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.117467][ T8423] loop0: rw=1, sector=5416, nr_sectors = 2080 limit=512 [ 173.135233][T12627] bpf: Bad value for 'gid' [ 173.158375][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.158375][ T8423] loop0: rw=1, sector=7496, nr_sectors = 2048 limit=512 [ 173.178479][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.178479][ T8423] loop0: rw=1, sector=9544, nr_sectors = 2048 limit=512 [ 173.223999][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.223999][ T8423] loop0: rw=1, sector=11592, nr_sectors = 2248 limit=512 [ 173.246625][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.246625][ T8423] loop0: rw=1, sector=13840, nr_sectors = 2152 limit=512 [ 173.280609][ T8423] kworker/u8:11: attempt to access beyond end of device [ 173.280609][ T8423] loop0: rw=1, sector=15992, nr_sectors = 472 limit=512 [ 173.338855][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'. [ 173.481947][T12668] syzkaller1: entered promiscuous mode [ 173.500364][T12668] syzkaller1: entered allmulticast mode [ 173.599110][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3699'. [ 173.658025][T12693] loop3: detected capacity change from 0 to 1024 [ 173.693972][T12693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.731086][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.812864][T12717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12717 comm=syz.6.3712 [ 173.912620][T12725] loop5: detected capacity change from 0 to 2048 [ 173.941858][T12725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.976507][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.139708][ T3422] Process accounting resumed [ 174.213750][T12743] loop5: detected capacity change from 0 to 8192 [ 174.306954][T12750] loop3: detected capacity change from 0 to 512 [ 174.332455][T12750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.359865][T12750] ext4 filesystem being mounted at /722/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.392021][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.505320][T12762] syzkaller1: entered promiscuous mode [ 174.511300][T12762] syzkaller1: entered allmulticast mode [ 174.520396][T12760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.556593][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.940550][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 174.940569][ T28] audit: type=1326 audit(1775509347.184:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 174.974460][ T28] audit: type=1326 audit(1775509347.184:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3fcc77c582 code=0x7ffc0000 [ 174.998817][ T28] audit: type=1326 audit(1775509347.184:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3fcc77c617 code=0x7ffc0000 [ 175.027184][ T28] audit: type=1326 audit(1775509347.204:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3fcc739511 code=0x7ffc0000 [ 175.054089][T12824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.066427][ T28] audit: type=1326 audit(1775509347.204:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3fcc77d609 code=0x7ffc0000 [ 175.066580][ T28] audit: type=1326 audit(1775509347.204:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3fcc73957b code=0x7ffc0000 [ 175.116203][ T28] audit: type=1326 audit(1775509347.204:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 175.140331][ T28] audit: type=1326 audit(1775509347.204:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 175.141448][T12824] ext4 filesystem being mounted at /731/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.168093][ T28] audit: type=1326 audit(1775509347.204:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3fcc738c6c code=0x7ffc0000 [ 175.209830][ T28] audit: type=1326 audit(1775509347.204:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.6.3750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3fcc738cce code=0x7ffc0000 [ 175.266094][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.335042][T12838] set_capacity_and_notify: 2 callbacks suppressed [ 175.335058][T12838] loop3: detected capacity change from 0 to 1024 [ 175.372207][T12838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.405324][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.492523][T12854] netlink: 'syz.3.3770': attribute type 3 has an invalid length. [ 175.876432][T12904] loop3: detected capacity change from 0 to 512 [ 175.911752][T12904] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.937134][T12909] loop5: detected capacity change from 0 to 128 [ 175.986050][T12904] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 176.002910][T12915] loop5: detected capacity change from 0 to 128 [ 176.010048][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 176.017052][ C0] EXT4-fs (loop3): initial error at time 1775509348: ext4_mb_generate_buddy:1317 [ 176.026329][ C0] EXT4-fs (loop3): last error at time 1775509348: ext4_mb_generate_buddy:1317 [ 176.056258][T12915] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 176.065845][T12904] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.3805: Failed to acquire dquot type 1 [ 176.104246][T12915] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 176.114195][T12915] FAT-fs (loop5): Filesystem has been set read-only [ 176.125966][T12904] loop3: lost filesystem error report for type 5 error -28 [ 176.126214][T12904] EXT4-fs (loop3): 1 truncate cleaned up [ 176.140624][T12915] syz.5.3798: attempt to access beyond end of device [ 176.140624][T12915] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 176.155780][T12904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.180792][T12904] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.3805: Failed to acquire dquot type 1 [ 176.261334][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.342151][T12921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.350822][T12921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.499919][T12941] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12941 comm=syz.2.3809 [ 176.623435][T12953] __nla_validate_parse: 3 callbacks suppressed [ 176.623485][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3815'. [ 176.974710][T12989] loop3: detected capacity change from 0 to 512 [ 177.007064][T12989] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3832: inode has both inline data and extents flags [ 177.040115][T12989] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.040329][T12989] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3832: couldn't read orphan inode 15 (err -117) [ 177.061458][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 177.061484][ C1] EXT4-fs (loop3): initial error at time 1775509349: ext4_orphan_get:1397: inode 15 [ 177.061547][ C1] EXT4-fs (loop3): last error at time 1775509349: ext4_orphan_get:1397: inode 15 [ 177.184833][T12989] loop3: lost filesystem error report for type 5 error -117 [ 177.185415][T12989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.431940][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.484578][T13033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13033 comm=syz.3.3846 [ 177.800931][T13056] SELinux: ebitmap start bit (6553620) is not a multiple of the map unit size (64) [ 177.820354][T13056] SELinux: failed to load policy [ 177.910239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.931183][T13071] loop3: detected capacity change from 0 to 164 [ 177.967854][T13071] ISOFS: Bad logical zone size 2816 [ 178.080122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.950253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.110121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.235175][T13155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.500872][T13178] loop6: detected capacity change from 0 to 4096 [ 179.522090][T13178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.587430][ T8392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.653740][T13190] loop5: detected capacity change from 0 to 2048 [ 179.668009][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3920'. [ 179.680659][ T8442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.689820][T12482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.696721][T13194] macvlan2: entered promiscuous mode [ 179.704796][T12483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.714827][T13190] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 179.732515][T13194] bond0: entered promiscuous mode [ 179.743373][T13194] bond_slave_0: entered promiscuous mode [ 179.758748][T13190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.760541][T13194] bond_slave_1: entered promiscuous mode [ 179.789496][T13194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.928533][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.990235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.990246][T13213] loop6: detected capacity change from 0 to 2048 [ 180.055096][T13213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.150124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.169632][ T8392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.193038][T13201] IPVS: You probably need to specify IP address on multicast interface. [ 180.210383][T13201] IPVS: Error connecting to the multicast addr [ 180.246850][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3938'. [ 180.307984][T13238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.324585][T13234] bond1: option primary_reselect: invalid value (8) [ 180.352283][T13234] bond1 (unregistering): Released all slaves [ 180.398092][T13241] netlink: 'syz.3.3942': attribute type 1 has an invalid length. [ 180.438367][T13241] loop3: detected capacity change from 0 to 128 [ 180.629749][T13261] loop7: detected capacity change from 0 to 7 [ 180.674103][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 180.684191][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 180.694650][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 180.704797][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 180.782707][ T28] kauditd_printk_skb: 358 callbacks suppressed [ 180.782724][ T28] audit: type=1400 audit(1775509609.031:2315): avc: denied { unmount } for pid=6100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 180.863770][T13278] loop5: detected capacity change from 0 to 512 [ 180.895546][T13278] EXT4-fs (loop5): 1 truncate cleaned up [ 180.915957][T13278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.994348][ T28] audit: type=1400 audit(1775509609.241:2316): avc: denied { rename } for pid=13277 comm="syz.5.3960" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.018764][T13278] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3960: invalid indirect mapped block 4294901760 (level 0) [ 181.043063][T13285] 9pnet: p9_errstr2errno: server reported unknown error [ 181.079623][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.193500][T13299] loop5: detected capacity change from 0 to 512 [ 181.213864][T13299] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.227456][T13299] EXT4-fs (loop5): 1 truncate cleaned up [ 181.236600][T13299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.257284][ T28] audit: type=1400 audit(1775509609.501:2317): avc: denied { map } for pid=13297 comm="syz.5.3969" path="/542/file2/memory.events.local" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.295330][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.447249][T13313] SET target dimension over the limit! [ 181.637196][T13334] loop3: detected capacity change from 0 to 128 [ 181.784888][T13349] team0 (unregistering): Port device bridge1 removed [ 182.343659][T13369] loop6: detected capacity change from 0 to 512 [ 182.462006][T13369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.488191][T13369] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.515678][T13369] EXT4-fs (loop6): shut down requested (0) [ 182.586719][ T8392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.601995][ T36] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 182.842686][T13409] netlink: 'syz.0.4012': attribute type 3 has an invalid length. [ 182.904858][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4015'. [ 182.913954][T13416] netlink: 'syz.0.4015': attribute type 30 has an invalid length. [ 182.925510][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.934480][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.943159][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.951919][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.970766][ T3388] Process accounting resumed [ 183.057615][T13425] loop0: detected capacity change from 0 to 2048 [ 183.110174][ C0] net_ratelimit: 6 callbacks suppressed [ 183.110189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.238326][T13429] hsr0: entered allmulticast mode [ 183.243530][T13429] hsr_slave_0: entered allmulticast mode [ 183.249224][T13429] hsr_slave_1: entered allmulticast mode [ 183.256620][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4021'. [ 183.266186][T13429] hsr_slave_0: left promiscuous mode [ 183.272364][T13429] hsr_slave_1: left promiscuous mode [ 183.278946][T13429] hsr0 (unregistering): left allmulticast mode [ 183.309364][T13433] loop6: detected capacity change from 0 to 512 [ 183.565697][T13447] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.579442][T13449] loop6: detected capacity change from 0 to 1024 [ 183.611285][T13449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.634534][T13449] EXT4-fs (loop6): shut down requested (0) [ 183.691812][ T8392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.709848][ T28] audit: type=1400 audit(1775509611.951:2318): avc: denied { watch } for pid=13458 comm="syz.3.4034" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 183.888091][T13471] team0 (unregistering): Port device team_slave_0 removed [ 183.901824][T13471] team0 (unregistering): Port device team_slave_1 removed [ 184.035576][T13485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.070154][T13359] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 184.086486][ T28] audit: type=1326 audit(1775509612.331:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 184.110512][ T28] audit: type=1326 audit(1775509612.331:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 184.134668][ T28] audit: type=1326 audit(1775509612.331:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 184.145966][T13490] netlink: 'syz.5.4046': attribute type 11 has an invalid length. [ 184.158532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.160628][ T28] audit: type=1326 audit(1775509612.331:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 184.198478][ T28] audit: type=1326 audit(1775509612.331:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.6.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 184.242849][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.370232][T13485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.683189][T13542] loop0: detected capacity change from 0 to 512 [ 184.693791][T13542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.710394][T13485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.719068][T13542] EXT4-fs (loop0): 1 orphan inode deleted [ 184.724991][T13542] EXT4-fs (loop0): 1 truncate cleaned up [ 184.731578][T13542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.867536][T13485] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.200195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.391797][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.430652][ T8442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.439740][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.448618][T12482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.656139][T13660] loop5: detected capacity change from 0 to 512 [ 185.673750][T13660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.695299][T13660] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.4078: corrupted in-inode xattr: invalid ea_ino [ 185.709303][T13660] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.709484][T13660] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4078: couldn't read orphan inode 15 (err -117) [ 185.718720][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 185.718745][ C0] EXT4-fs (loop5): initial error at time 1775509613: ext4_iget_extra_inode:5040: inode 15 [ 185.718807][ C0] EXT4-fs (loop5): last error at time 1775509613: ext4_iget_extra_inode:5040: inode 15 [ 185.758803][T13660] loop5: lost filesystem error report for type 5 error -117 [ 185.759508][T13660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.869986][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.943335][T13684] loop5: detected capacity change from 0 to 128 [ 186.184883][T13698] loop5: detected capacity change from 0 to 512 [ 186.193854][T13698] EXT4-fs: Ignoring removed nobh option [ 186.206400][T13700] ip6erspan0: entered allmulticast mode [ 186.217891][T13698] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.231675][T13698] EXT4-fs (loop5): 1 truncate cleaned up [ 186.243845][T13698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.310097][ T3915] Bluetooth: hci0: command 0x1003 tx timeout [ 186.316381][ T5477] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.436385][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.495567][T13717] loop5: detected capacity change from 0 to 512 [ 186.709837][T13729] xt_hashlimit: size too large, truncated to 1048576 [ 186.744264][T13733] loop0: detected capacity change from 0 to 256 [ 186.871158][T13745] loop3: detected capacity change from 0 to 512 [ 186.897479][T13745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.964728][T13745] EXT4-fs (loop3): 1 truncate cleaned up [ 186.975896][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 186.975913][ T28] audit: type=1400 audit(1775509615.221:2404): avc: denied { mounton } for pid=13755 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 187.020768][T13745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.052955][ T28] audit: type=1400 audit(1775509615.291:2405): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.084860][ T28] audit: type=1400 audit(1775509615.291:2406): avc: denied { search } for pid=3040 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.107850][ T12] vlan2: left promiscuous mode [ 187.118998][ T12] dummy0: left promiscuous mode [ 187.140425][ T12] bridge0: port 3(vlan2) entered disabled state [ 187.141242][ T28] audit: type=1400 audit(1775509615.291:2407): avc: denied { search } for pid=3040 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.178888][ T12] bridge_slave_1: left allmulticast mode [ 187.184820][T13765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4123'. [ 187.190353][ T12] bridge_slave_1: left promiscuous mode [ 187.207038][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.237093][T13765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4123'. [ 187.247186][ T28] audit: type=1400 audit(1775509615.291:2408): avc: denied { read } for pid=3040 comm="dhcpcd" name="n34" dev="tmpfs" ino=17783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.281892][ T12] bridge_slave_0: left allmulticast mode [ 187.289693][ T28] audit: type=1400 audit(1775509615.291:2409): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=17783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.320096][ T12] bridge_slave_0: left promiscuous mode [ 187.332401][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.343530][T13765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4123'. [ 187.346395][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.365072][ T28] audit: type=1400 audit(1775509615.291:2410): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=17783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.391291][ T28] audit: type=1400 audit(1775509615.481:2411): avc: denied { read open } for pid=13770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.426547][ T28] audit: type=1400 audit(1775509615.481:2412): avc: denied { getattr } for pid=13770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.452592][ T28] audit: type=1326 audit(1775509615.531:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.6.4126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x7ffc0000 [ 187.591698][ T12] bond1 (unregistering): Released all slaves [ 187.658522][ T12] tipc: Disabling bearer [ 187.693644][ T12] tipc: Left network mode [ 187.755042][ T12] IPVS: stopping master sync thread 8280 ... [ 187.788153][ T12] hsr_slave_0: left promiscuous mode [ 187.800602][ T12] hsr_slave_1: left promiscuous mode [ 187.806413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.199040][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4151'. [ 188.264391][ T12] IPVS: stop unused estimator thread 0... [ 188.310190][ C0] net_ratelimit: 6 callbacks suppressed [ 188.310207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.324036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.332633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.340795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.349769][T13755] chnl_net:caif_netlink_parms(): no params data found [ 188.400926][T13892] loop6: detected capacity change from 0 to 128 [ 188.556678][T13755] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.565554][T13755] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.572995][T13755] bridge_slave_0: entered allmulticast mode [ 188.579699][T13755] bridge_slave_0: entered promiscuous mode [ 188.587750][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4165'. [ 188.597638][T13755] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.605058][T13755] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.612555][T13755] bridge_slave_1: entered allmulticast mode [ 188.619432][T13755] bridge_slave_1: entered promiscuous mode [ 188.647664][T13755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.679225][T13755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.701492][T13755] team0: Port device team_slave_0 added [ 188.708351][T13755] team0: Port device team_slave_1 added [ 188.729749][T13755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.736929][T13755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.769892][T13755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.784576][T13755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.818888][T13755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.887411][T13755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.943223][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 188.962418][T13755] hsr_slave_0: entered promiscuous mode [ 188.973014][T13755] hsr_slave_1: entered promiscuous mode [ 188.981469][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 189.021486][T13956] syzkaller1: entered promiscuous mode [ 189.031706][T13956] syzkaller1: entered allmulticast mode [ 189.095175][T13967] hsr0: entered promiscuous mode [ 189.103947][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 189.177145][T13967] hsr_slave_0: left promiscuous mode [ 189.188681][T13967] hsr_slave_1: left promiscuous mode [ 189.230368][T13967] hsr0 (unregistering): left promiscuous mode [ 189.326223][T13755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 189.350188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.358392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.358842][T13755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 189.366656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.381512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.414976][T13998] loop0: detected capacity change from 0 to 512 [ 189.445041][T13755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 189.477756][T13755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 189.513398][T13856] Process accounting resumed [ 189.562288][T14011] syzkaller1: entered promiscuous mode [ 189.568034][T14011] syzkaller1: entered allmulticast mode [ 189.654207][T13755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.669381][T13755] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.692265][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.699534][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.733516][T14028] netlink: 'syz.3.4208': attribute type 21 has an invalid length. [ 189.741823][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.748936][T11883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.769268][T14032] loop0: detected capacity change from 0 to 1024 [ 189.776441][T14028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4208'. [ 189.822847][T14032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.898757][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.981338][T14055] loop0: detected capacity change from 0 to 128 [ 190.195625][T14048] bridge_slave_0: left allmulticast mode [ 190.201506][T14048] bridge_slave_0: left promiscuous mode [ 190.207241][T14048] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.220294][T14048] bond0: (slave bond_slave_0): Releasing backup interface [ 190.259032][T14048] bond0: (slave bond_slave_1): Releasing backup interface [ 190.274727][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.284651][T14048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.294744][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.304344][T14048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.410199][ T8431] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.418932][ T8431] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.436512][ T8431] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.460243][ T8427] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.479461][T13755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.567884][T14093] EXT4-fs: Ignoring removed nobh option [ 190.620579][T14093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 190.651796][T14093] EXT4-fs (loop0): 1 truncate cleaned up [ 190.658326][T14093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.676376][T14093] EXT4-fs (loop0): shut down requested (0) [ 190.739556][T13755] veth0_vlan: entered promiscuous mode [ 190.748109][T13755] veth1_vlan: entered promiscuous mode [ 190.767550][T13755] veth0_macvtap: entered promiscuous mode [ 190.775692][T13755] veth1_macvtap: entered promiscuous mode [ 190.782143][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.799996][T13755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.812649][T13755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.825218][ T8427] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.834661][ T8427] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.846886][ T8427] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.869250][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.963360][T14114] set_capacity_and_notify: 1 callbacks suppressed [ 190.963380][T14114] loop3: detected capacity change from 0 to 4096 [ 191.001349][T14114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.037632][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.899962][T14127] netlink: 'syz.2.4229': attribute type 39 has an invalid length. [ 192.064947][T14141] loop6: detected capacity change from 0 to 4096 [ 192.076947][T14141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.147045][ T8392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.188964][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 192.188983][ T28] audit: type=1400 audit(1775509620.431:2479): avc: denied { getopt } for pid=14148 comm="syz.0.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.332080][ T28] audit: type=1326 audit(1775509620.581:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.0.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 192.394312][ T28] audit: type=1326 audit(1775509620.601:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.0.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 192.456504][ T28] audit: type=1326 audit(1775509620.601:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.0.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 192.501780][ T28] audit: type=1326 audit(1775509620.601:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.0.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 192.627365][T14180] netlink: 'syz.6.4256': attribute type 3 has an invalid length. [ 192.654377][T14182] loop0: detected capacity change from 0 to 1024 [ 192.692501][T14182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.738918][T14191] loop6: detected capacity change from 0 to 128 [ 192.868976][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.152260][T14223] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14223 comm=syz.0.4276 [ 193.209068][T14227] loop3: detected capacity change from 0 to 128 [ 193.246656][T14227] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 193.274266][T14227] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 193.288191][T14227] FAT-fs (loop3): Filesystem has been set read-only [ 193.300128][T14227] syz.3.4278: attempt to access beyond end of device [ 193.300128][T14227] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.364974][T14237] loop0: detected capacity change from 0 to 256 [ 193.387717][T14237] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.415733][T14237] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.807430][ T28] audit: type=1400 audit(1775509622.051:2484): avc: denied { map } for pid=14267 comm="syz.6.4297" path="socket:[37627]" dev="sockfs" ino=37627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.843970][ T28] audit: type=1400 audit(1775509622.051:2485): avc: denied { read accept } for pid=14267 comm="syz.6.4297" path="socket:[37627]" dev="sockfs" ino=37627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.944849][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4301'. [ 194.456603][ T28] audit: type=1326 audit(1775509878.701:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14320 comm="syz.3.4316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7347b7c819 code=0x0 [ 195.175518][ T28] audit: type=1400 audit(1775509879.421:2487): avc: denied { map } for pid=14336 comm="syz.7.4325" path="socket:[38555]" dev="sockfs" ino=38555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 195.185411][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4329'. [ 195.224524][T14346] bpf: Bad value for 'gid' [ 195.236706][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4329'. [ 195.347563][T14356] loop7: detected capacity change from 0 to 2048 [ 195.407920][T14356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.499812][T13755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.723596][T14393] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.4345'. [ 195.740254][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 195.750492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.762482][T14393] netlink: zone id is out of range [ 195.771479][T14393] netlink: zone id is out of range [ 195.803283][T14393] netlink: set zone limit has 8 unknown bytes [ 195.838517][T14396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.898309][T14396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.908332][T14396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.921266][T14401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.929707][T14401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.945984][T14401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.142929][T14416] loop0: detected capacity change from 0 to 164 [ 196.478845][T14440] xt_hashlimit: size too large, truncated to 1048576 [ 196.649066][ T28] audit: type=1400 audit(1775509880.891:2488): avc: denied { listen } for pid=14458 comm="syz.2.4373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.923379][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4383'. [ 196.937835][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4383'. [ 196.961819][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4384'. [ 196.979416][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4384'. [ 197.066229][T14495] loop3: detected capacity change from 0 to 4096 [ 197.069452][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4390'. [ 197.104136][T14495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.141001][T14505] loop0: detected capacity change from 0 to 512 [ 197.164418][T14505] EXT4-fs: Ignoring removed nobh option [ 197.174838][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.188971][T14505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.209853][T14505] EXT4-fs (loop0): 1 truncate cleaned up [ 197.217368][T14505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.311040][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.418809][ T28] audit: type=1326 audit(1775509881.661:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.3.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 197.505566][ T28] audit: type=1326 audit(1775509881.661:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.3.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 197.562125][ T28] audit: type=1326 audit(1775509881.701:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.3.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 197.569448][T14545] loop3: detected capacity change from 0 to 2048 [ 197.589166][ T28] audit: type=1326 audit(1775509881.701:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.3.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 197.617242][ T28] audit: type=1326 audit(1775509881.701:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.3.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 197.642902][ T28] audit: type=1400 audit(1775509881.711:2494): avc: denied { accept } for pid=14531 comm="syz.7.4406" path="socket:[38864]" dev="sockfs" ino=38864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.667150][ T28] audit: type=1400 audit(1775509881.751:2495): avc: denied { write } for pid=14537 comm="syz.7.4408" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 197.720808][T14545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.762377][T14553] loop6: detected capacity change from 0 to 2048 [ 197.785026][T14553] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 197.809241][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.833725][T14553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.872762][ T8392] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.986345][T14578] bridge1: entered promiscuous mode [ 198.007241][T14578] bridge1: entered allmulticast mode [ 198.089888][T14607] netlink: 'syz.6.4429': attribute type 1 has an invalid length. [ 198.127925][T14607] loop6: detected capacity change from 0 to 128 [ 198.249816][T14623] loop6: detected capacity change from 0 to 1024 [ 198.257625][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4437'. [ 198.258202][T14623] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.274048][T14623] EXT4-fs: Mount option(s) incompatible with ext2 [ 198.289400][T14627] bond_slave_0: entered promiscuous mode [ 198.295268][T14627] bond_slave_1: entered promiscuous mode [ 198.301935][T14627] macvlan2: entered promiscuous mode [ 198.307683][T14627] bond0: entered promiscuous mode [ 198.322861][T14627] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.384453][T14635] loop7: detected capacity change from 0 to 7 [ 198.466815][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 198.477107][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 198.486646][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 198.497028][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 198.920468][T14680] 9pnet: p9_errstr2errno: server reported unknown error [ 198.948493][T14687] loop0: detected capacity change from 0 to 512 [ 198.957960][T14687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 198.983894][T14687] EXT4-fs (loop0): 1 truncate cleaned up [ 198.993036][T14687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.020131][ T28] audit: type=1400 audit(1775509883.261:2496): avc: denied { firmware_load } for pid=14692 comm="syz.7.4468" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 199.048101][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.296513][T14714] Cannot find add_set index 0 as target [ 199.418242][T14725] syzkaller1: entered promiscuous mode [ 199.424520][T14725] syzkaller1: entered allmulticast mode [ 199.476368][T14731] loop6: detected capacity change from 0 to 128 [ 199.646105][ T28] audit: type=1326 audit(1775509883.891:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14754 comm="syz.3.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 199.673032][ T28] audit: type=1326 audit(1775509883.921:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14754 comm="syz.3.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 199.911880][T14775] __nla_validate_parse: 1 callbacks suppressed [ 199.911902][T14775] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4503'. [ 200.267862][T14804] EXT4-fs: test_dummy_encryption option not supported [ 200.312716][T14602] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.383815][T14804] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.407742][T14804] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 200.415821][T14804] FAT-fs (loop0): Filesystem has been set read-only [ 200.422741][T14804] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 200.430853][T14804] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 201.836096][T14927] set_capacity_and_notify: 2 callbacks suppressed [ 201.836131][T14927] loop0: detected capacity change from 0 to 164 [ 201.860355][T14927] rock: directory entry would overflow storage [ 201.866639][T14927] rock: sig=0x5252, size=5, remaining=3 [ 202.390149][ T5477] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 202.390381][ T3915] Bluetooth: hci0: command 0x1003 tx timeout [ 202.720588][T14971] netlink: 'syz.2.4561': attribute type 11 has an invalid length. [ 202.752746][T14973] loop3: detected capacity change from 0 to 512 [ 202.761404][T14973] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 202.763549][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 202.763680][ T28] audit: type=1326 audit(1775542917.021:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14974 comm="syz.2.4563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0d9a8c819 code=0x0 [ 202.799448][T14973] EXT4-fs (loop3): 1 truncate cleaned up [ 202.800116][T14973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.822736][ T28] audit: type=1326 audit(1775542917.073:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 202.847571][ T28] audit: type=1326 audit(1775542917.073:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 202.872377][ T28] audit: type=1326 audit(1775542917.073:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 202.896455][ T28] audit: type=1326 audit(1775542917.073:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 202.920581][ T28] audit: type=1326 audit(1775542917.105:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 202.945503][ T28] audit: type=1326 audit(1775542917.105:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 202.970301][ T28] audit: type=1326 audit(1775542917.105:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 202.995674][ T28] audit: type=1326 audit(1775542917.105:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 203.020174][ T28] audit: type=1326 audit(1775542917.105:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14972 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 203.055415][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.287269][T14810] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 203.534923][T15031] loop3: detected capacity change from 0 to 512 [ 203.546202][T15031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.590096][T15031] EXT4-fs (loop3): 1 orphan inode deleted [ 203.595976][T15031] EXT4-fs (loop3): 1 truncate cleaned up [ 203.610946][T15031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.637803][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4588'. [ 203.651041][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4588'. [ 203.759354][T15043] loop6: detected capacity change from 0 to 2048 [ 203.797078][T15043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.842580][T15043] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 203.918976][T15043] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 203.950296][T15043] EXT4-fs (loop6): This should not happen!! Data will be lost [ 203.950296][T15043] [ 203.975757][T15043] EXT4-fs (loop6): Total free blocks count 0 [ 203.988695][T15043] EXT4-fs (loop6): Free/Dirty block details [ 204.001722][T15043] EXT4-fs (loop6): free_blocks=66060288 [ 204.027452][T15043] EXT4-fs (loop6): dirty_blocks=48 [ 204.032663][T15043] EXT4-fs (loop6): Block reservation details [ 204.046156][T15043] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 204.057243][T15043] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 204.112667][ T8392] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 204.177619][T15062] xt_hashlimit: size too large, truncated to 1048576 [ 204.185352][T15064] loop7: detected capacity change from 0 to 512 [ 204.232743][T15064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.249108][T15064] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.383146][T13755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.678435][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.730445][T15110] loop3: detected capacity change from 0 to 128 [ 204.764738][T15110] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.809009][T15110] ext4 filesystem being mounted at /930/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.932353][T15118] bond0: left promiscuous mode [ 204.943206][T15118] bond_slave_0: left promiscuous mode [ 204.950389][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.960331][T15118] bond_slave_1: left promiscuous mode [ 205.208705][T15133] loop3: detected capacity change from 0 to 512 [ 205.237256][T15133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.297075][T15133] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.4625: corrupted in-inode xattr: invalid ea_ino [ 205.326211][T15133] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.326439][T15133] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4625: couldn't read orphan inode 15 (err -117) [ 205.335720][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 205.335746][ C0] EXT4-fs (loop3): initial error at time 1775542919: ext4_iget_extra_inode:5040: inode 15 [ 205.335793][ C0] EXT4-fs (loop3): last error at time 1775542919: ext4_iget_extra_inode:5040: inode 15 [ 205.398702][T15133] loop3: lost filesystem error report for type 5 error -117 [ 205.403536][T15133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.465028][T15098] syz.2.4613 (15098) used greatest stack depth: 5912 bytes left [ 205.566077][T15146] loop0: detected capacity change from 0 to 512 [ 205.625747][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.631334][T15146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.694781][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.789560][T15157] loop3: detected capacity change from 0 to 8192 [ 205.807428][T15157] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.849489][T15159] loop6: detected capacity change from 0 to 512 [ 206.330120][T15194] FAT-fs (loop6): Directory bread(block 64) failed [ 206.345906][T15194] FAT-fs (loop6): Directory bread(block 65) failed [ 206.355754][T15194] FAT-fs (loop6): Directory bread(block 66) failed [ 206.362519][T15194] FAT-fs (loop6): Directory bread(block 67) failed [ 206.369421][T15194] FAT-fs (loop6): Directory bread(block 68) failed [ 206.395652][T15194] FAT-fs (loop6): Directory bread(block 69) failed [ 206.402636][T15194] FAT-fs (loop6): Directory bread(block 70) failed [ 206.409503][T15194] FAT-fs (loop6): Directory bread(block 71) failed [ 206.416447][T15194] FAT-fs (loop6): Directory bread(block 72) failed [ 206.423348][T15194] FAT-fs (loop6): Directory bread(block 73) failed [ 206.920078][T15239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4667'. [ 206.951262][T15239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4667'. [ 206.995188][T15239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4667'. [ 207.489653][T15283] netlink: 'syz.3.4687': attribute type 1 has an invalid length. [ 207.570410][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4701'. [ 207.585729][T15288] xt_hashlimit: size too large, truncated to 1048576 [ 207.608977][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4701'. [ 207.655554][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4701'. [ 208.103193][T15319] set_capacity_and_notify: 2 callbacks suppressed [ 208.103210][T15319] loop3: detected capacity change from 0 to 512 [ 208.162985][T15319] EXT4-fs: Ignoring removed nobh option [ 208.191912][T15319] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.224927][T15319] EXT4-fs (loop3): 1 truncate cleaned up [ 208.237601][T15319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.442008][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 208.442026][ T28] audit: type=1326 audit(1775542922.974:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.0.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 208.478458][ T28] audit: type=1326 audit(1775542922.984:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.0.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 208.502587][ T28] audit: type=1326 audit(1775542923.016:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.0.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 208.527040][ T28] audit: type=1326 audit(1775542923.016:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.0.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 208.553856][ T28] audit: type=1326 audit(1775542923.016:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15344 comm="syz.0.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37f63c819 code=0x7ffc0000 [ 208.579992][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.596685][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4714'. [ 208.700067][T15366] loop3: detected capacity change from 0 to 128 [ 208.841930][T15380] Process accounting resumed [ 208.936997][T15399] xt_connbytes: Forcing CT accounting to be enabled [ 208.945055][T15399] program syz.7.4740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.020280][T15408] loop0: detected capacity change from 0 to 512 [ 209.062396][T15408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.087556][T15408] ext4 filesystem being mounted at /920/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.119851][T15403] loop6: detected capacity change from 0 to 8192 [ 209.144637][T15420] loop7: detected capacity change from 0 to 128 [ 209.229183][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.275665][T15432] syzkaller1: entered promiscuous mode [ 209.288375][T15432] syzkaller1: entered allmulticast mode [ 209.366009][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'. [ 209.382451][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 209.407967][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'. [ 209.414977][T15450] loop7: detected capacity change from 0 to 512 [ 209.446908][T15450] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.457545][ T28] audit: type=1326 audit(1775542924.045:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15455 comm="syz.6.4764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fcc77c819 code=0x0 [ 209.461114][T15450] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.530969][T13755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.631145][T15472] loop0: detected capacity change from 0 to 4096 [ 209.650895][T15472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.716959][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.810837][T15488] loop0: detected capacity change from 0 to 2048 [ 209.848305][T15488] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 209.891220][T15488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.977166][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.054380][T15498] net_ratelimit: 17 callbacks suppressed [ 210.054459][T15498] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 210.283211][T15522] loop7: detected capacity change from 0 to 256 [ 210.296126][T15520] loop3: detected capacity change from 0 to 512 [ 210.304667][T15522] msdos: Unknown parameter 'ÿ18446744073709551615' [ 210.355214][T15520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.372672][T15520] ext4 filesystem being mounted at /964/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.400933][T15526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.420203][T15526] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 210.493575][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.505257][ T28] audit: type=1400 audit(1775542925.147:2615): avc: denied { setopt } for pid=15537 comm="syz.7.4799" lport=54765 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 210.530011][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.602102][T15544] syzkaller0: entered promiscuous mode [ 210.607632][T15544] syzkaller0: entered allmulticast mode [ 210.607715][ T28] audit: type=1326 audit(1775542925.242:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.3.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 210.770148][ T28] audit: type=1326 audit(1775542925.284:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.3.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 210.874719][ T28] audit: type=1326 audit(1775542925.284:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15548 comm="syz.3.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7347b7c819 code=0x7ffc0000 [ 211.087725][T15577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.174314][T15585] netlink: 'syz.7.4815': attribute type 3 has an invalid length. [ 211.252372][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.400630][T15598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.456644][T15598] ext4 filesystem being mounted at /933/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.618794][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.718824][T15624] netlink: 'syz.0.4843': attribute type 39 has an invalid length. [ 211.858385][T15643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15643 comm=syz.7.4844 [ 211.923435][T15648] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 211.951614][T15648] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 211.977382][T15648] FAT-fs (loop0): Filesystem has been set read-only [ 211.984686][T15648] syz.0.4847: attempt to access beyond end of device [ 211.984686][T15648] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 212.009014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.193478][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4857'. [ 212.437961][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4868'. [ 212.562573][T15712] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4874: inode has both inline data and extents flags [ 212.577947][T15712] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.578113][T15712] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4874: couldn't read orphan inode 15 (err -117) [ 212.587377][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 212.587394][ C0] EXT4-fs (loop0): initial error at time 1775542927: ext4_orphan_get:1397: inode 15 [ 212.587421][ C0] EXT4-fs (loop0): last error at time 1775542927: ext4_orphan_get:1397: inode 15 [ 212.625432][T15712] loop0: lost filesystem error report for type 5 error -117 [ 212.626003][T15712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.715024][T15719] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 212.733365][T15719] EXT4-fs (loop6): 1 truncate cleaned up [ 212.756428][T15719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.776777][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.806001][ T8392] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 212.821521][ T8392] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 212.900593][ T8763] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.109052][T15741] set_capacity_and_notify: 6 callbacks suppressed [ 213.109122][T15741] loop0: detected capacity change from 0 to 1024 [ 213.125746][T15741] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.140113][T15741] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.4885: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 213.159257][T15741] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 213.159412][T15741] EXT4-fs error (device loop0): ext4_quota_enable:7220: comm syz.0.4885: Bad quota inode: 3, type: 0 [ 213.168568][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 213.168594][ C0] EXT4-fs (loop0): initial error at time 1775542927: ext4_ext_check_inode:521: inode 3 [ 213.168623][ C0] EXT4-fs (loop0): last error at time 1775542927: ext4_ext_check_inode:521: inode 3 [ 213.221667][T15741] loop0: lost filesystem error report for type 5 error -117 [ 213.222476][T15741] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 213.248758][T15741] EXT4-fs (loop0): mount failed [ 213.264048][T15749] netlink: 'syz.7.4887': attribute type 11 has an invalid length. [ 213.272492][T15749] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4887'. [ 213.327315][T15732] chnl_net:caif_netlink_parms(): no params data found [ 213.433447][T15732] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.440726][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.448239][T15732] bridge_slave_0: entered allmulticast mode [ 213.454801][T15732] bridge_slave_0: entered promiscuous mode [ 213.461897][T15732] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.469201][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.478090][T15732] bridge_slave_1: entered allmulticast mode [ 213.484903][T15732] bridge_slave_1: entered promiscuous mode [ 213.504839][T15732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.518960][T15732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.555068][T15732] team0: Port device team_slave_0 added [ 213.566981][T15732] team0: Port device team_slave_1 added [ 213.585966][T15732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.592997][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.619101][T15732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.630565][T15732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.637667][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.663728][T15732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.694884][T11883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.703108][T15732] hsr_slave_0: entered promiscuous mode [ 213.711830][T15732] hsr_slave_1: entered promiscuous mode [ 213.718214][T15732] debugfs: 'hsr0' already exists in 'hsr' [ 213.724094][T15732] Cannot create hsr debugfs directory [ 213.730632][ T28] kauditd_printk_skb: 244 callbacks suppressed [ 213.730707][ T28] audit: type=1400 audit(1775542928.528:2863): avc: denied { setopt } for pid=15781 comm="syz.0.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.781076][T15785] loop0: detected capacity change from 0 to 512 [ 213.790686][T15785] EXT4-fs (loop0): 1 truncate cleaned up [ 213.797560][T15785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.857814][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.883734][T15788] pimreg: entered allmulticast mode [ 213.891895][T15732] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 213.905327][T15732] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 213.923971][T15732] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 213.941754][T15732] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 214.012175][T15732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.029730][T15732] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.044429][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.051627][T11883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.063936][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.071084][T11883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.092299][T15732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.102987][T15732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.188194][T15732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.442057][T15823] loop3: detected capacity change from 0 to 2048 [ 214.480160][T15823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.515755][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.543085][T15732] veth0_vlan: entered promiscuous mode [ 214.565056][T15835] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.4910'. [ 214.565400][T15732] veth1_vlan: entered promiscuous mode [ 214.600945][T15732] veth0_macvtap: entered promiscuous mode [ 214.602328][T15835] netlink: zone id is out of range [ 214.612566][T15732] veth1_macvtap: entered promiscuous mode [ 214.625580][T15732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.640329][T15732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.640336][T15835] netlink: zone id is out of range [ 214.664691][T14596] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.679179][T14596] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.692852][T15835] netlink: set zone limit has 8 unknown bytes [ 214.700237][T14596] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.709238][T14596] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.743608][ T28] audit: type=1326 audit(1775542929.599:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 214.797440][ T28] audit: type=1326 audit(1775542929.599:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 214.843831][ T28] audit: type=1326 audit(1775542929.599:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 214.868324][ T28] audit: type=1326 audit(1775542929.599:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 214.900531][ T28] audit: type=1326 audit(1775542929.599:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 214.925784][ T28] audit: type=1326 audit(1775542929.599:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 214.969369][ T28] audit: type=1326 audit(1775542929.599:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 214.995405][ T28] audit: type=1326 audit(1775542929.599:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 215.021256][ T28] audit: type=1326 audit(1775542929.599:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15839 comm="syz.7.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fd52c819 code=0x7ffc0000 [ 215.057702][T15855] xt_hashlimit: size too large, truncated to 1048576 [ 215.421293][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4934'. [ 215.430749][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4934'. [ 215.462197][T11883] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.510067][T15889] loop8: detected capacity change from 0 to 2048 [ 215.533895][T11883] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.581307][T11883] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.602514][T15889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.619305][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4940'. [ 215.631229][T11883] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.643927][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.652217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.660957][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.669268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.705017][T15732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.826403][T11883] bridge_slave_1: left allmulticast mode [ 215.835724][T11883] bridge_slave_1: left promiscuous mode [ 215.852264][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.875378][T11883] bridge_slave_0: left promiscuous mode [ 215.881852][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.013643][T11883] bond0 (unregistering): left promiscuous mode [ 216.020504][T11883] bond_slave_0: left promiscuous mode [ 216.026578][T11883] bond_slave_1: left promiscuous mode [ 216.032242][T11883] dummy0: left promiscuous mode [ 216.038673][T11883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.048799][T11883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.058364][T11883] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 216.067205][T11883] bond0 (unregistering): Released all slaves [ 216.075202][T11883] bond1 (unregistering): Released all slaves [ 216.089103][T15924] bridge1: entered promiscuous mode [ 216.094389][T15924] bridge1: entered allmulticast mode [ 216.102343][T15924] team0: Port device bridge1 added [ 216.107876][T15931] bridge0: port 3(team0) entered blocking state [ 216.120528][T15931] bridge0: port 3(team0) entered disabled state [ 216.129807][T15931] team0: entered allmulticast mode [ 216.137115][T15931] team_slave_0: entered allmulticast mode [ 216.143335][T15931] team_slave_1: entered allmulticast mode [ 216.150573][T15931] team0: entered promiscuous mode [ 216.156798][T15931] team_slave_0: entered promiscuous mode [ 216.162724][T15931] team_slave_1: entered promiscuous mode [ 216.168885][T15931] bridge0: port 3(team0) entered blocking state [ 216.175224][T15931] bridge0: port 3(team0) entered forwarding state [ 216.193314][T15943] team0 (unregistering): Port device team_slave_0 removed [ 216.210144][T15943] team0 (unregistering): Port device team_slave_1 removed [ 216.232696][T11883] batadv0: left promiscuous mode [ 216.245011][T11883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.253655][T11883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.263487][T11883] pimreg (unregistering): left allmulticast mode [ 216.290674][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4954'. [ 216.331096][T11883] team0 (unregistering): Port device team_slave_1 removed [ 216.343103][T11883] team0 (unregistering): Port device C removed [ 216.381016][T15954] hsr0: entered allmulticast mode [ 216.386140][T15954] hsr_slave_0: entered allmulticast mode [ 216.392101][T15954] hsr_slave_1: entered allmulticast mode [ 216.399106][T15959] hsr_slave_0: left promiscuous mode [ 216.405441][T15959] hsr_slave_1: left promiscuous mode [ 216.413625][T15959] hsr0 (unregistering): left allmulticast mode [ 216.536152][T15899] chnl_net:caif_netlink_parms(): no params data found [ 216.607613][T15899] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.616495][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.623889][T15899] bridge_slave_0: entered allmulticast mode [ 216.630678][T15899] bridge_slave_0: entered promiscuous mode [ 216.638714][T11883] IPVS: stop unused estimator thread 0... [ 216.644821][T15899] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.652600][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.669127][T15899] bridge_slave_1: entered allmulticast mode [ 216.675850][T15899] bridge_slave_1: entered promiscuous mode [ 216.735708][T15899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.840999][T15899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.870632][T15899] team0: Port device team_slave_0 added [ 216.879161][T15899] team0: Port device team_slave_1 added [ 216.885139][T16025] loop3: detected capacity change from 0 to 512 [ 216.892370][T16025] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.907720][T16025] EXT4-fs (loop3): 1 truncate cleaned up [ 216.931762][T16025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.963819][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.973899][T15899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.981983][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.041793][T15899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.060611][T15899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.069047][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.096680][T15899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.133754][T15899] hsr_slave_0: entered promiscuous mode [ 217.140037][T15899] hsr_slave_1: entered promiscuous mode [ 217.146291][T15899] debugfs: 'hsr0' already exists in 'hsr' [ 217.152078][T15899] Cannot create hsr debugfs directory [ 217.232497][T16051] SET target dimension over the limit! [ 217.396307][T15899] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 217.433767][T16083] loop8: detected capacity change from 0 to 128 [ 217.604726][T15899] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 217.648787][T15899] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 217.667006][T15899] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 217.757985][T16111] bridge0: port 3(team0) entered disabled state [ 217.790298][T16111] team0 (unregistering): left allmulticast mode [ 217.797105][T16111] team_slave_0: left allmulticast mode [ 217.802943][T16111] team_slave_1: left allmulticast mode [ 217.808739][T16111] team0 (unregistering): left promiscuous mode [ 217.831311][T16111] team_slave_0: left promiscuous mode [ 217.842648][T16111] team_slave_1: left promiscuous mode [ 217.854487][T16111] bridge0: port 3(team0) entered disabled state [ 217.880997][T16111] team0 (unregistering): Port device team_slave_0 removed [ 217.906110][T16111] team0 (unregistering): Port device team_slave_1 removed [ 217.916249][T16111] team0 (unregistering): Port device bridge1 removed [ 217.981482][T15899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.003443][T15899] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.049074][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.056580][T11883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.083628][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.090886][T11883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.139657][T15899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.238303][T15899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.251814][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5010'. [ 218.274870][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5010'. [ 218.545856][T15899] veth0_vlan: entered promiscuous mode [ 218.563933][T15899] veth1_vlan: entered promiscuous mode [ 218.580807][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.601996][T15899] veth0_macvtap: entered promiscuous mode [ 218.622975][T15899] veth1_macvtap: entered promiscuous mode [ 218.661927][T15899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.682979][T15899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.706597][T11883] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.723566][T11883] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.737259][T11883] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.753603][T11883] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.883826][T16203] team0 (unregistering): Port device team_slave_0 removed [ 218.900704][T16203] team0 (unregistering): Port device team_slave_1 removed [ 219.248000][T16224] loop7: detected capacity change from 0 to 512 [ 220.044113][T16250] xt_hashlimit: size too large, truncated to 1048576 [ 220.272514][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5046'. [ 220.379042][T16279] loop7: detected capacity change from 0 to 512 [ 220.409619][T16279] EXT4-fs (loop7): 1 truncate cleaned up [ 220.442429][T16279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.562983][T13755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.635184][T16305] loop9: detected capacity change from 0 to 1024 [ 220.644561][T16308] ip6erspan0: entered allmulticast mode [ 220.664780][T16305] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.682667][T16305] EXT4-fs: Mount option(s) incompatible with ext2 [ 220.698487][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5050'. [ 220.737960][T16312] loop3: detected capacity change from 0 to 512 [ 220.817055][T16312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.838971][T16312] ext4 filesystem being mounted at /1014/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.021728][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.091494][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 221.091514][ T28] audit: type=1326 audit(1775543192.236:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632a99c819 code=0x7ffc0000 [ 221.134910][T16338] loop3: detected capacity change from 0 to 2048 [ 221.142592][ T28] audit: type=1326 audit(1775543192.236:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632a99c819 code=0x7ffc0000 [ 221.192549][T16338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.217467][ T28] audit: type=1326 audit(1775543192.268:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632a99c819 code=0x7ffc0000 [ 221.241494][ T28] audit: type=1326 audit(1775543192.268:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632a99c819 code=0x7ffc0000 [ 221.279431][T16338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 221.291395][ T28] audit: type=1326 audit(1775543192.278:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f632a99c819 code=0x7ffc0000 [ 221.317658][ T28] audit: type=1326 audit(1775543192.331:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f632a95d04e code=0x7ffc0000 [ 221.341472][ T28] audit: type=1326 audit(1775543192.331:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f632a95d04e code=0x7ffc0000 [ 221.359880][T16338] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 221.365262][ T28] audit: type=1326 audit(1775543192.341:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f632a95d04e code=0x7ffc0000 [ 221.404160][ T28] audit: type=1326 audit(1775543192.341:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f632a95d04e code=0x7ffc0000 [ 221.428099][ T28] audit: type=1326 audit(1775543192.341:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f632a95d04e code=0x7ffc0000 [ 221.451985][T16338] EXT4-fs (loop3): This should not happen!! Data will be lost [ 221.451985][T16338] [ 221.505081][T16354] loop9: detected capacity change from 0 to 256 [ 221.515924][T16338] EXT4-fs (loop3): Total free blocks count 0 [ 221.575386][T16338] EXT4-fs (loop3): Free/Dirty block details [ 221.632297][T16338] EXT4-fs (loop3): free_blocks=66060288 [ 221.645255][T16338] EXT4-fs (loop3): dirty_blocks=48 [ 221.651572][T16338] EXT4-fs (loop3): Block reservation details [ 221.661923][T16338] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 221.706585][T16365] loop9: detected capacity change from 0 to 512 [ 221.715337][T16365] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 221.732857][T16365] EXT4-fs (loop9): 1 truncate cleaned up [ 221.748908][T16365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.775587][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.874350][T16370] syzkaller1: entered promiscuous mode [ 221.883499][T15899] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.895414][T16370] syzkaller1: entered allmulticast mode [ 221.931270][T16372] netlink: 'syz.8.5076': attribute type 12 has an invalid length. [ 221.954706][T16372] netlink: 'syz.8.5076': attribute type 29 has an invalid length. [ 221.976120][T16372] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5076'. [ 222.144406][T16382] loop9: detected capacity change from 0 to 2048 [ 222.177651][T16382] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 222.267251][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 222.459993][T16405] loop7: detected capacity change from 0 to 128 [ 222.883718][T16413] PID 16413 killed due to inadequate hugepage pool [ 223.021933][T11883] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 223.831295][T16479] tipc: Started in network mode [ 223.844586][T16479] tipc: Node identity ac14140f, cluster identity 4711 [ 223.885279][T16479] tipc: New replicast peer: 255.255.255.255 [ 223.932158][T16479] tipc: Enabled bearer , priority 10 [ 224.049905][T16475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.117929][T16491] loop9: detected capacity change from 0 to 128 [ 224.802599][T16508] syzkaller1: entered promiscuous mode [ 224.812574][T16508] syzkaller1: entered allmulticast mode [ 224.991093][T14075] tipc: Node number set to 2886997007 [ 225.188744][T16517] loop8: detected capacity change from 0 to 256 [ 225.214487][T16517] FAT-fs (loop8): Directory bread(block 64) failed [ 225.226560][T16517] FAT-fs (loop8): Directory bread(block 65) failed [ 225.241105][T16517] FAT-fs (loop8): Directory bread(block 66) failed [ 225.254334][T16517] FAT-fs (loop8): Directory bread(block 67) failed [ 225.268118][T16517] FAT-fs (loop8): Directory bread(block 68) failed [ 225.297841][T16517] FAT-fs (loop8): Directory bread(block 69) failed [ 225.326073][T16517] FAT-fs (loop8): Directory bread(block 70) failed [ 225.341468][T16517] FAT-fs (loop8): Directory bread(block 71) failed [ 225.356053][T16517] FAT-fs (loop8): Directory bread(block 72) failed [ 225.412537][T16517] FAT-fs (loop8): Directory bread(block 73) failed [ 225.529188][T16519] xt_hashlimit: size too large, truncated to 1048576 [ 225.820932][T16543] syzkaller1: entered promiscuous mode [ 225.835709][T16543] syzkaller1: entered allmulticast mode [ 226.309006][T16573] loop7: detected capacity change from 0 to 512 [ 226.363967][T16573] EXT4-fs mount: 2 callbacks suppressed [ 226.363989][T16573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.389631][T16573] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.419391][T16582] loop3: detected capacity change from 0 to 128 [ 226.450719][T13755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.695799][T16592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.723299][T16592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.750672][T16592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.988043][T16598] loop7: detected capacity change from 0 to 512 [ 226.999169][T16598] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5168: inode has both inline data and extents flags [ 227.013352][T16598] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.013536][T16598] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5168: couldn't read orphan inode 15 (err -117) [ 227.022729][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 227.022747][ C0] EXT4-fs (loop7): initial error at time 1775543198: ext4_orphan_get:1397: inode 15 [ 227.022772][ C0] EXT4-fs (loop7): last error at time 1775543198: ext4_orphan_get:1397: inode 15 [ 227.060644][T16598] loop7: lost filesystem error report for type 5 error -117 [ 227.061446][T16598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.170852][T13755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.369402][T16616] loop9: detected capacity change from 0 to 1024 [ 227.379743][T16616] EXT4-fs: Ignoring removed bh option [ 227.412498][T16616] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.446802][T16616] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.5163: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 227.500886][T16616] EXT4-fs (loop9): Remounting filesystem read-only [ 227.601790][T15899] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.909360][T16650] loop9: detected capacity change from 0 to 4096 [ 227.946970][T16650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.040396][T15899] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.072885][T16663] loop8: detected capacity change from 0 to 2048 [ 228.116919][T16663] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 228.160057][T16669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5181'. [ 228.178440][T16669] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.196886][T16663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.278446][T16676] SELinux: ebitmap start bit (6553620) is not a multiple of the map unit size (64) [ 228.294878][T16676] SELinux: failed to load policy [ 228.306690][T15732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.562465][T16714] PID 16714 killed due to inadequate hugepage pool [ 228.684434][T16733] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5196'. [ 228.726714][T16733] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.746377][T14074] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.837153][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.844541][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.926247][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.964730][T16735] bridge_slave_0: left allmulticast mode [ 228.981411][T16735] bridge_slave_0: left promiscuous mode [ 228.992994][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.024063][T16735] bridge_slave_1: left allmulticast mode [ 229.036669][T16735] bridge_slave_1: left promiscuous mode [ 229.053495][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.070804][T16735] bond0: (slave bond_slave_0): Releasing backup interface [ 229.096516][T16735] bond0: (slave bond_slave_1): Releasing backup interface [ 229.134809][T16735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.162599][T16735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.164183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.184741][T16735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.204422][T16735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.230478][T16735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.325321][ T3422] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.336240][T16771] loop8: detected capacity change from 0 to 512 [ 229.373556][T16771] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.5205: inode has both inline data and extents flags [ 229.415676][T16771] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.415804][T16771] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.5205: couldn't read orphan inode 15 (err -117) [ 229.425100][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 229.425124][ C0] EXT4-fs (loop8): initial error at time 1775543200: ext4_orphan_get:1397: inode 15 [ 229.425165][ C0] EXT4-fs (loop8): last error at time 1775543200: ext4_orphan_get:1397: inode 15 [ 229.538599][T16771] loop8: lost filesystem error report for type 5 error -117 [ 229.540084][T16771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.729389][T16794] loop9: detected capacity change from 0 to 512 [ 229.737979][T15732] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.770635][T16794] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.5224: inode has both inline data and extents flags [ 229.818359][T16794] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.818550][T16794] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.5224: couldn't read orphan inode 15 (err -117) [ 229.827770][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 229.827793][ C0] EXT4-fs (loop9): initial error at time 1775543201: ext4_orphan_get:1397: inode 15 [ 229.827830][ C0] EXT4-fs (loop9): last error at time 1775543201: ext4_orphan_get:1397: inode 15 [ 229.973431][T16801] PID 16801 killed due to inadequate hugepage pool [ 230.010231][T16794] loop9: lost filesystem error report for type 5 error -117 [ 230.015046][T16794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.083414][T16813] netlink: 'syz.8.5216': attribute type 11 has an invalid length. [ 230.091435][T16813] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5216'. [ 230.153665][T15899] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.354542][T16837] loop3: detected capacity change from 0 to 512 [ 230.507799][T16845] loop9: detected capacity change from 0 to 4096 [ 230.555826][T16845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.609547][T16845] EXT4-fs error (device loop9): __ext4_new_inode:1079: comm syz.9.5228: reserved inode found cleared - inode=1 [ 230.629766][T16844] syz.3.5226: attempt to access beyond end of device [ 230.629766][T16844] loop3: rw=34817, sector=352, nr_sectors = 966 limit=512 [ 230.705933][T16845] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 230.760797][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.760797][ T59] loop3: rw=1, sector=1320, nr_sectors = 2048 limit=512 [ 230.761072][T15899] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.790683][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.790683][ T59] loop3: rw=1, sector=3368, nr_sectors = 2072 limit=512 [ 230.808493][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.808493][ T59] loop3: rw=1, sector=5440, nr_sectors = 2056 limit=512 [ 230.836173][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.836173][ T59] loop3: rw=1, sector=7496, nr_sectors = 2072 limit=512 [ 230.855485][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.855485][ T59] loop3: rw=1, sector=9568, nr_sectors = 2088 limit=512 [ 230.873342][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.873342][ T59] loop3: rw=1, sector=11656, nr_sectors = 2104 limit=512 [ 230.892502][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.892502][ T59] loop3: rw=1, sector=13760, nr_sectors = 2048 limit=512 [ 230.911292][ T59] kworker/u8:4: attempt to access beyond end of device [ 230.911292][ T59] loop3: rw=1, sector=15808, nr_sectors = 656 limit=512 [ 230.930848][T16841] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.938226][T16841] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.062663][T16868] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 231.078080][T16868] SELinux: failed to load policy [ 231.100424][T16870] loop3: detected capacity change from 0 to 2048 [ 231.132218][T16870] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 231.171452][T16870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.234670][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.382242][T16841] bridge_slave_0: left allmulticast mode [ 231.388433][T16841] bridge_slave_0: left promiscuous mode [ 231.394927][T16841] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.407365][T16841] bridge_slave_1: left allmulticast mode [ 231.413200][T16841] bridge_slave_1: left promiscuous mode [ 231.419037][T16841] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.433070][T16841] bond0: (slave bond_slave_0): Releasing backup interface [ 231.448145][T16841] bond_slave_0: left promiscuous mode [ 231.457687][T16841] bond0: (slave bond_slave_1): Releasing backup interface [ 231.465470][T16841] bond_slave_1: left promiscuous mode [ 231.476300][T16841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.486160][T16841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.497079][T16841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.506952][T16841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.519181][T16841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.679655][T16890] loop8: detected capacity change from 0 to 512 [ 231.905873][T16900] tipc: Started in network mode [ 231.913905][T16900] tipc: Node identity ac14140f, cluster identity 4711 [ 231.921270][T16900] tipc: New replicast peer: 255.255.255.255 [ 231.927640][T16900] tipc: Enabled bearer , priority 10 [ 231.989003][T16907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.001577][T16896] syz.8.5243: attempt to access beyond end of device [ 232.001577][T16896] loop8: rw=34817, sector=352, nr_sectors = 966 limit=512 [ 232.015442][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 232.015458][ T28] audit: type=1400 audit(1775543203.711:2925): avc: denied { connect } for pid=16905 comm="syz.2.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.072502][T16904] loop7: detected capacity change from 0 to 4096 [ 232.085524][T16907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.148730][T16904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.201055][T16904] EXT4-fs error (device loop7): __ext4_new_inode:1079: comm syz.7.5249: reserved inode found cleared - inode=1 [ 232.282462][T16917] loop9: detected capacity change from 0 to 2048 [ 232.291568][T16904] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 232.317592][T16917] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 232.382753][T16917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.420438][T13755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.527536][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5256'. [ 232.553383][T15899] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.558045][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.569861][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.606554][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5260'. [ 232.626699][T16939] loop9: detected capacity change from 0 to 128 [ 232.813609][T16923] bridge_slave_0: left allmulticast mode [ 232.843469][T16923] bridge_slave_0: left promiscuous mode [ 232.861642][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.047637][ T28] audit: type=1400 audit(1775543460.806:2926): avc: denied { watch_reads } for pid=16952 comm="syz.2.5262" path="/1151" dev="tmpfs" ino=5978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 233.147032][T16923] bridge_slave_1: left allmulticast mode [ 233.162877][T16923] bridge_slave_1: left promiscuous mode [ 233.180838][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.191091][T16959] loop3: detected capacity change from 0 to 4096 [ 233.205134][T16923] bond0: (slave bond_slave_0): Releasing backup interface [ 233.222581][T16959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.235851][T16923] bond0: (slave bond_slave_1): Releasing backup interface [ 233.262848][T16959] EXT4-fs error (device loop3): __ext4_new_inode:1079: comm syz.3.5267: reserved inode found cleared - inode=1 [ 233.283456][T16959] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 233.301022][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.343022][T16923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.382266][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.394507][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.406132][T16923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.484446][T13857] tipc: Node number set to 2886997007 [ 233.505124][T16453] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.554994][T16453] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.580310][T16453] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.617303][T16453] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.802891][T16018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.819967][T16984] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 233.853614][T16984] SELinux: failed to load policy [ 234.026695][T16995] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5277'. [ 234.109081][T16991] loop9: detected capacity change from 0 to 8192 [ 234.185033][T17003] netlink: 'syz.3.5282': attribute type 4 has an invalid length. [ 234.211901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.234635][T17007] netlink: 'syz.3.5282': attribute type 4 has an invalid length. [ 234.502047][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5289'. [ 234.531417][T17023] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 234.541591][T17023] SELinux: failed to load policy [ 234.595525][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5290'. [ 235.112968][T17060] loop8: detected capacity change from 0 to 128 [ 235.133753][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5305'. [ 235.149762][T17060] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.173035][T17060] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.575633][T15732] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.622273][T16018] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9 [ 235.695088][T17082] loop7: detected capacity change from 0 to 128 [ 235.773356][T17079] loop8: detected capacity change from 0 to 8192 [ 235.940464][ T28] audit: type=1400 audit(1775543463.840:2927): avc: granted { setsecparam } for pid=17094 comm="syz.9.5315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 236.494882][T17077] ================================================================== [ 236.503018][T17077] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 236.511030][T17077] [ 236.513364][T17077] write to 0xffffea0004f2e498 of 8 bytes by task 17052 on cpu 1: [ 236.521090][T17077] __filemap_remove_folio+0x201/0x310 [ 236.526504][T17077] filemap_remove_folio+0x6d/0x1d0 [ 236.531662][T17077] truncate_inode_folio+0x42/0x50 [ 236.536704][T17077] shmem_undo_range+0x26d/0xb10 [ 236.541568][T17077] shmem_evict_inode+0x12e/0x510 [ 236.546610][T17077] evict+0x2af/0x510 [ 236.550528][T17077] iput+0x41a/0x580 [ 236.554363][T17077] dentry_unlink_inode+0x24f/0x260 [ 236.559593][T17077] __dentry_kill+0x13f/0x460 [ 236.564292][T17077] finish_dput+0x2b/0x200 [ 236.568666][T17077] dput+0x52/0x60 [ 236.572406][T17077] __fput+0x444/0x650 [ 236.576413][T17077] ____fput+0x1c/0x30 [ 236.580407][T17077] task_work_run+0x130/0x1a0 [ 236.585003][T17077] do_exit+0x4ae/0x1600 [ 236.589175][T17077] do_group_exit+0xfe/0x140 [ 236.593690][T17077] get_signal+0xe54/0xf60 [ 236.598039][T17077] arch_do_signal_or_restart+0x96/0x450 [ 236.603601][T17077] irqentry_exit+0xf7/0x520 [ 236.608110][T17077] asm_exc_page_fault+0x26/0x30 [ 236.612985][T17077] [ 236.615312][T17077] read to 0xffffea0004f2e498 of 8 bytes by task 17077 on cpu 0: [ 236.623148][T17077] folio_mapping+0xa1/0xe0 [ 236.627572][T17077] move_folios_to_lru+0x128/0x6d0 [ 236.632704][T17077] evict_folios+0x31f8/0x35c0 [ 236.637424][T17077] try_to_shrink_lruvec+0x81b/0xbf0 [ 236.642631][T17077] shrink_lruvec+0x255/0x1c60 [ 236.647321][T17077] shrink_node+0x67a/0x2130 [ 236.651837][T17077] do_try_to_free_pages+0x408/0xc80 [ 236.657048][T17077] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 236.663045][T17077] try_charge_memcg+0x37e/0xa10 [ 236.667912][T17077] obj_cgroup_charge_pages+0x23/0xc0 [ 236.673211][T17077] __memcg_kmem_charge_page+0x9e/0x170 [ 236.678685][T17077] __alloc_frozen_pages_noprof+0x18a/0x360 [ 236.684504][T17077] alloc_pages_mpol+0xb3/0x260 [ 236.689285][T17077] alloc_pages_noprof+0x8f/0x140 [ 236.694322][T17077] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 236.700228][T17077] __kvmalloc_node_noprof+0x3d4/0x650 [ 236.705632][T17077] ip_set_alloc+0x24/0x30 [ 236.709976][T17077] hash_netiface_create+0x282/0x740 [ 236.715191][T17077] ip_set_create+0x3cf/0x970 [ 236.719793][T17077] nfnetlink_rcv_msg+0x509/0x5d0 [ 236.724747][T17077] netlink_rcv_skb+0x123/0x220 [ 236.729528][T17077] nfnetlink_rcv+0x167/0x1720 [ 236.734213][T17077] netlink_unicast+0x5c0/0x690 [ 236.738994][T17077] netlink_sendmsg+0x5c8/0x6f0 [ 236.743758][T17077] ____sys_sendmsg+0x563/0x5b0 [ 236.748521][T17077] ___sys_sendmsg+0x195/0x1e0 [ 236.753209][T17077] __x64_sys_sendmsg+0xd4/0x160 [ 236.758173][T17077] x64_sys_call+0x194c/0x3020 [ 236.762988][T17077] do_syscall_64+0x12c/0x370 [ 236.767600][T17077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.773606][T17077] [ 236.775932][T17077] value changed: 0xffff88811c801930 -> 0x0000000000000000 [ 236.783043][T17077] [ 236.785369][T17077] Reported by Kernel Concurrency Sanitizer on: [ 236.791532][T17077] CPU: 0 UID: 0 PID: 17077 Comm: syz.8.5309 Not tainted syzkaller #0 PREEMPT(full) [ 236.800912][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.810986][T17077] ================================================================== [ 237.101856][T17077] syz.8.5309 (17077) used greatest stack depth: 5776 bytes left [ 238.680269][T15993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.480763][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog