last executing test programs: 53.269319485s ago: executing program 2 (id=643): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r1, @ANYRES32, @ANYBLOB="08000300"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 52.97749773s ago: executing program 2 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 52.927202851s ago: executing program 2 (id=649): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000740)=""/89, 0x59}, {&(0x7f0000000600)=""/185, 0xb9}], 0x5) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 52.669172586s ago: executing program 2 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 52.623568607s ago: executing program 2 (id=659): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) 52.355344382s ago: executing program 2 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 52.354324802s ago: executing program 32 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 29.031888998s ago: executing program 4 (id=1397): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) migrate_pages(0xffffffffffffffff, 0x7f, 0x0, 0x0) 28.671418814s ago: executing program 4 (id=1406): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x651, 0x1000}) 28.471801618s ago: executing program 4 (id=1413): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 28.306825911s ago: executing program 4 (id=1420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_PLIMIT={0x0, 0x2, 0x3ff}]}}]}, 0x48}}, 0x0) 28.259300242s ago: executing program 4 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x28822}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 28.187927454s ago: executing program 4 (id=1427): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 12.936131029s ago: executing program 33 (id=1427): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 1.66345182s ago: executing program 3 (id=1990): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x34, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x6e35, 0x5, 0x0, 0x7, 0x8, 0x20003, 0x9, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7220000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1.273486417s ago: executing program 3 (id=1996): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000024c0)='.\x00', 0x400000c) mkdir(&(0x7f0000000000)='./file0\x00', 0x70) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1.181391619s ago: executing program 3 (id=2000): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.11542257s ago: executing program 3 (id=2003): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 953.622693ms ago: executing program 3 (id=2010): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) 856.043144ms ago: executing program 6 (id=2015): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) 702.848297ms ago: executing program 3 (id=2019): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x2200400, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1207, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r0, &(0x7f00000001c0)="8a", 0x1, 0x8280c59) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r1, &(0x7f0000000040)="10", 0xffffffb7, 0x8081000) 665.249918ms ago: executing program 6 (id=2021): creat(0x0, 0xecf86c37d53049cc) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) 621.931629ms ago: executing program 6 (id=2024): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 538.8951ms ago: executing program 5 (id=2026): socket$netlink(0x10, 0x3, 0xc) setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000340)) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 498.965831ms ago: executing program 1 (id=2027): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x2000, 0x10001, 0x3}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x2, 0x0}) 498.652691ms ago: executing program 5 (id=2028): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_config_ext={0x200, 0xfffffffffffff48c}, 0x2002, 0x20000032, 0x7, 0x9, 0x9, 0x802, 0x2, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 464.030102ms ago: executing program 6 (id=2029): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001200)='bic', 0x3) 448.204492ms ago: executing program 1 (id=2030): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000240), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 421.808853ms ago: executing program 0 (id=2031): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 408.717643ms ago: executing program 1 (id=2032): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 397.202943ms ago: executing program 6 (id=2033): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x8a, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x40000017}], 0x1, 0x10160, 0x0) 370.174224ms ago: executing program 0 (id=2034): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0xfffe}, &(0x7f0000000180)=0x8) 341.262635ms ago: executing program 1 (id=2035): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x10, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x343b8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) 327.867954ms ago: executing program 6 (id=2036): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) 318.929205ms ago: executing program 0 (id=2037): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x2, 0x9, 0x0, 0x0) 300.289575ms ago: executing program 5 (id=2038): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 297.900835ms ago: executing program 0 (id=2039): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[], 0x1, 0x2cb, &(0x7f00000002c0)="$eJzs3TuLY2UYAOD35HKSHYuksBLBA1pYLTvb2mSQLCymUlKojYO7C5IMwi4EXMVgZWtj6Y+w80/YCP4AwR9g5xYLn5wkh5zZzWWCZMbL8xSTd873vud7zyVzIeTLJ69fTB4U8eibr36LbjeLxiAG8SyLfjSiklJKsTb4LgCAf7NnKcUfaemQuiwiusdrCwA4ooN///949JYAgCP74MOP3jsbjYbvF0U37l18OxuX/9mXj8vxs0fxWUzjYdyJXjxfvhZQ/bVQfr2XUpq3ilI/3rqYz8azcTMifl7t/6ya6DR60V9El+vvj4anxVJVH1E+ZnGymn9Qzn83evHqhvnvj4Z3N9THOI+336z1fzt68cun8XlM48GiiXX916dF8W76/s8vPy7bK+uz+WzcWeStpeb1XRUAAAAAAAAAAAAAAAAAAAAAAP7rbq/WzunEYv2ectNq/Z3m8/KbdhSV/uX1eZb1WbWjF9YHmqf4IaVOK2I0vFMURVolrutb8VorWjdz1AAAAAAAAAAAAAAAAAAAAPDP8uSLp5Pz6fTh43qQxyL49STixaHdQbUaQPW2/j1VzW1Dg9qWN+Lp5LyzfYe1ocYq3DFpNKucLGLn4USrXe25f9BJWAfZ/n5OyuDWtpxqB1eftLs/p72rny1BI6J/QBvV3TU5z2JjTieqLd3qmv5Uz8mvOle+bSjtv/1qQb5xqHfwicpfWQTzHTmR7Wrsnd+XZ652A1zKyVtbj6tdW41j872x+Vpse6a8JFs8rfO//0MHAAAAAAAAAAAAAAAAAADYaP2m35eGbu0pbaTO0doCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGu1/vz/PUH1Wf/llvkq3l81zePxkxs8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4n/goAAP//D3FGaw==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d0000000000000700000010000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) 274.734515ms ago: executing program 5 (id=2040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {&(0x7f0000000040)="a126000000000000", 0x8}, {&(0x7f0000000680)="37bcb3983785779d77392b7d63586b7d44a9eabc0e407f4847", 0x19}], 0x3) 200.643367ms ago: executing program 1 (id=2041): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x1008840, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x6a1, &(0x7f00000029c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d0000000000000700000010000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) 200.090626ms ago: executing program 5 (id=2042): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @random="8327ad9e0b15"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) 156.338818ms ago: executing program 0 (id=2043): r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 87.349759ms ago: executing program 1 (id=2044): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x14000, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x51d, &(0x7f0000000640)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x1000, 0x7ff) lseek(r0, 0xcbb, 0x3) 23.62889ms ago: executing program 5 (id=2045): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r1, 0x10, "886b8a6cc9700d43a4484d7e0b798e25"}, &(0x7f0000000340)=0x18) kernel console output (not intermixed with test programs): rted for file /vga_arbiter (pid: 3491 comm: kworker/1:5) [ 40.950610][ T4290] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 40.981291][ T4290] team0: entered promiscuous mode [ 40.995782][ T4290] team_slave_0: entered promiscuous mode [ 41.014308][ T4290] team_slave_1: entered promiscuous mode [ 41.026646][ T4290] team0: entered allmulticast mode [ 41.042078][ T4290] team_slave_0: entered allmulticast mode [ 41.051691][ T4290] team_slave_1: entered allmulticast mode [ 41.065337][ T4290] bridge0: port 3(team0) entered blocking state [ 41.072012][ T4290] bridge0: port 3(team0) entered disabled state [ 41.080328][ T4290] bridge0: port 3(team0) entered blocking state [ 41.086757][ T4290] bridge0: port 3(team0) entered forwarding state [ 41.106964][ T4304] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 41.112531][ T4304] dvmrp1: linktype set to 823 [ 41.308739][ T4326] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.326016][ T4326] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.367879][ T4332] dvmrp6: entered allmulticast mode [ 41.377287][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.432051][ T4337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.464506][ T4337] EXT4-fs (loop2): 1 truncate cleaned up [ 41.470714][ T4337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.518777][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 41.518793][ T28] audit: type=1400 audit(1774656411.392:301): avc: denied { remove_name } for pid=4336 comm="syz.2.383" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.552437][ T28] audit: type=1400 audit(1774656411.422:302): avc: denied { rename } for pid=4336 comm="syz.2.383" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.574823][ T28] audit: type=1400 audit(1774656411.422:303): avc: denied { unlink } for pid=4336 comm="syz.2.383" name="file3" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.601605][ T4350] __nla_validate_parse: 4 callbacks suppressed [ 41.601697][ T4350] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.387'. [ 41.634240][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.669273][ T4356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.390'. [ 41.713013][ T4358] sctp: [Deprecated]: syz.2.389 (pid 4358) Use of int in maxseg socket option. [ 41.713013][ T4358] Use struct sctp_assoc_value instead [ 41.734019][ T4354] netem: change failed [ 41.748710][ T28] audit: type=1400 audit(1774656411.612:304): avc: denied { create } for pid=4363 comm="syz.1.394" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.782314][ T4364] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 41.802837][ T4367] set_capacity_and_notify: 11 callbacks suppressed [ 41.802855][ T4367] loop4: detected capacity change from 0 to 7 [ 41.828287][ T4370] loop3: detected capacity change from 0 to 512 [ 41.834918][ T4367] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.844915][ T28] audit: type=1400 audit(1774656411.712:305): avc: denied { create } for pid=4371 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 41.847407][ T4372] delete_channel: no stack [ 41.885481][ T4367] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.895785][ T4367] loop4: unable to read partition table [ 41.916586][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.917034][ T28] audit: type=1400 audit(1774656411.742:306): avc: denied { unlink } for pid=3309 comm="syz-executor" name="file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.935839][ T4367] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 41.955936][ T4370] EXT4-fs: Ignoring removed nobh option [ 41.981741][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 41.989730][ T4370] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.012473][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.026430][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.044465][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.055765][ T4370] EXT4-fs (loop3): 1 truncate cleaned up [ 42.061928][ T4370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.120149][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.155358][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.165526][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.180120][ T4370] Invalid option length (255) for dns_resolver key [ 42.216994][ T4387] loop4: detected capacity change from 0 to 256 [ 42.237748][ T28] audit: type=1400 audit(1774656412.102:307): avc: denied { module_request } for pid=4384 comm="syz.4.404" kmod="nls_koi8-ru" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 42.269525][ T4387] FAT-fs (loop4): IO charset koi8-ru not found [ 42.294307][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.459278][ T4406] loop2: detected capacity change from 0 to 512 [ 42.506054][ T4406] EXT4-fs: Ignoring removed bh option [ 42.522030][ T4406] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 42.541327][ T4406] EXT4-fs (loop2): 1 truncate cleaned up [ 42.557755][ T4406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.580853][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 42.626523][ T4406] EXT4-fs (loop2): shut down requested (2) [ 42.632746][ T4406] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 42.642293][ T4406] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 42.653373][ T4406] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 42.676755][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.739896][ T4433] loop3: detected capacity change from 0 to 128 [ 42.741378][ T4434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.423'. [ 42.758513][ T4434] netem: unknown loss type 13 [ 42.778064][ T4436] loop4: detected capacity change from 0 to 128 [ 42.784842][ T4436] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.799244][ T4434] netem: change failed [ 42.816380][ T4436] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.870943][ T4446] loop0: detected capacity change from 0 to 512 [ 42.889557][ T30] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.919591][ T4446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.932437][ T28] audit: type=1400 audit(1774656412.802:308): avc: denied { write } for pid=4450 comm="syz.4.432" name="udp6" dev="proc" ino=4026532827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.981309][ T4446] EXT4-fs (loop0): 1 truncate cleaned up [ 42.987744][ T4446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.106762][ T4468] netlink: 830 bytes leftover after parsing attributes in process `syz.4.439'. [ 43.116409][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 43.133716][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.208159][ T4475] loop0: detected capacity change from 0 to 1024 [ 43.239327][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.292873][ T28] audit: type=1400 audit(1774656413.162:309): avc: denied { setattr } for pid=4474 comm="syz.0.442" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.388826][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.408836][ T4496] netlink: 277 bytes leftover after parsing attributes in process `syz.1.453'. [ 43.435358][ T4498] loop0: detected capacity change from 0 to 128 [ 43.458111][ T4498] syz.0.452: attempt to access beyond end of device [ 43.458111][ T4498] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 43.492652][ T4498] syz.0.452: attempt to access beyond end of device [ 43.492652][ T4498] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 43.515845][ T4498] syz.0.452: attempt to access beyond end of device [ 43.515845][ T4498] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 43.540964][ T4498] syz.0.452: attempt to access beyond end of device [ 43.540964][ T4498] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 43.541867][ T28] audit: type=1400 audit(1774656413.412:310): avc: denied { create } for pid=4504 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.669572][ T4507] loop1: detected capacity change from 0 to 512 [ 43.704821][ T4507] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.719831][ T4507] EXT4-fs (loop1): mount failed [ 43.795266][ T4523] option changes via remount are deprecated (pid=4522 comm=syz.2.464) [ 43.805061][ T4523] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 43.885133][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 44.069141][ T4548] EXT4-fs: Ignoring removed bh option [ 44.103705][ T4548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 44.292281][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 44.307248][ T4556] netlink: 340 bytes leftover after parsing attributes in process `syz.1.477'. [ 44.517335][ T4576] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.485: iget: bad i_size value: 38620345925642 [ 44.555425][ T4576] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.555792][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 44.571560][ C0] EXT4-fs (loop1): initial error at time 1774656414: ext4_orphan_get:1391: inode 15 [ 44.580961][ C0] EXT4-fs (loop1): last error at time 1774656414: ext4_orphan_get:1391: inode 15 [ 44.617145][ T4576] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.485: couldn't read orphan inode 15 (err -117) [ 44.637066][ T4581] netlink: 176 bytes leftover after parsing attributes in process `syz.4.487'. [ 44.655773][ T4576] loop1: lost filesystem error report for type 5 error -117 [ 44.656409][ T4576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.737214][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.784335][ T4593] netlink: 'syz.3.494': attribute type 6 has an invalid length. [ 45.015307][ T4631] syz.3.511 (4631) used greatest stack depth: 9328 bytes left [ 45.109001][ T4650] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 45.732174][ T4711] EXT4-fs: inline encryption not supported [ 45.749348][ T4711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.781993][ T4716] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 45.790767][ T4711] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.804982][ T4716] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.549: Invalid inode bitmap blk 4 in block_group 0 [ 45.818324][ T4716] loop2: lost filesystem error report for type 5 error -117 [ 45.818956][ T4716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.830109][ T4711] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.548: Freeing blocks not in datazone - block = 0, count = 16 [ 45.865270][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.905379][ T4727] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 45.918101][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.015938][ T4733] Falling back ldisc for ttyS3. [ 46.446108][ T4741] loop1: p3 p4 < > [ 46.459970][ T4741] loop1: p3 start 11362048 is beyond EOD, truncated [ 46.471157][ T4807] loop1: p3 p4 < > [ 46.478868][ T4807] loop1: p3 start 11362048 is beyond EOD, truncated [ 46.527214][ T4741] udevd[4741]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 46.537332][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 46.537421][ T28] audit: type=1400 audit(1774656416.412:369): avc: denied { shutdown } for pid=4813 comm="syz.1.580" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.579219][ T4819] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 46.587927][ T4819] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.583: iget: bad i_size value: 12154757448730 [ 46.601076][ T4819] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.604767][ T4819] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.583: couldn't read orphan inode 13 (err -117) [ 46.605703][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 46.632364][ C0] EXT4-fs (loop4): initial error at time 1774656416: ext4_orphan_get:1391: inode 13 [ 46.636618][ T28] audit: type=1400 audit(1774656416.502:370): avc: denied { ioctl } for pid=4823 comm="syz.0.585" path="socket:[8148]" dev="sockfs" ino=8148 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.641807][ C0] EXT4-fs (loop4): last error at time 1774656416: ext4_orphan_get:1391: inode 13 [ 46.675602][ T4819] loop4: lost filesystem error report for type 5 error -117 [ 46.683912][ T4819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.716739][ T28] audit: type=1400 audit(1774656416.582:371): avc: denied { create } for pid=4828 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.755144][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.755943][ T28] audit: type=1400 audit(1774656416.612:372): avc: denied { bind } for pid=4828 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.821329][ T4839] __nla_validate_parse: 5 callbacks suppressed [ 46.821429][ T4839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 46.838571][ T28] audit: type=1326 audit(1774656416.692:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37338c799 code=0x7fc00000 [ 46.934081][ T28] audit: type=1400 audit(1774656416.802:374): avc: denied { read } for pid=4851 comm="syz.4.597" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.029181][ T4860] futex_wake_op: syz.2.601 tries to shift op by -3; fix this program [ 47.081007][ T4864] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 47.166633][ T4874] set_capacity_and_notify: 6 callbacks suppressed [ 47.166686][ T4874] loop3: detected capacity change from 0 to 512 [ 47.205321][ T4879] netlink: 'syz.1.609': attribute type 21 has an invalid length. [ 47.216204][ T4874] EXT4-fs: Ignoring removed bh option [ 47.235472][ T4874] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 47.242296][ T4879] netlink: 128 bytes leftover after parsing attributes in process `syz.1.609'. [ 47.254089][ T4879] netlink: 'syz.1.609': attribute type 4 has an invalid length. [ 47.262051][ T4879] netlink: 'syz.1.609': attribute type 3 has an invalid length. [ 47.269935][ T4879] netlink: 3 bytes leftover after parsing attributes in process `syz.1.609'. [ 47.302000][ T4874] EXT4-fs (loop3): 1 truncate cleaned up [ 47.334304][ T4874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.397187][ T28] audit: type=1400 audit(1774656417.262:375): avc: denied { remove_name } for pid=4873 comm="syz.3.608" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.432356][ T28] audit: type=1400 audit(1774656417.262:376): avc: denied { add_name } for pid=4873 comm="syz.3.608" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.457941][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 47.467246][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.503300][ T4898] netlink: 'syz.0.616': attribute type 3 has an invalid length. [ 47.513862][ T4898] netlink: 772 bytes leftover after parsing attributes in process `syz.0.616'. [ 47.516762][ T28] audit: type=1400 audit(1774656417.382:377): avc: denied { create } for pid=4895 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.524230][ T4898] netlink: 'syz.0.616': attribute type 3 has an invalid length. [ 47.573553][ T4898] netlink: 772 bytes leftover after parsing attributes in process `syz.0.616'. [ 47.821101][ T28] audit: type=1400 audit(1774656417.382:378): avc: denied { getopt } for pid=4895 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.886528][ T4919] tipc: Started in network mode [ 47.891509][ T4919] tipc: Node identity ff, cluster identity 4711 [ 47.897842][ T4919] tipc: Enabling of bearer rejected, failed to enable media [ 48.357480][ T4947] loop2: detected capacity change from 0 to 1024 [ 48.394611][ T4947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.445552][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.465966][ T4950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.640'. [ 48.678994][ T4954] loop0: detected capacity change from 0 to 1024 [ 48.703159][ T4956] netlink: 'syz.2.643': attribute type 10 has an invalid length. [ 48.723281][ T4956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'. [ 48.740979][ T4954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.764257][ T4956] : entered promiscuous mode [ 48.776259][ T4954] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 48.800429][ T4956] bridge0: port 3() entered blocking state [ 48.806632][ T4956] bridge0: port 3() entered disabled state [ 48.812670][ T4956] : entered allmulticast mode [ 48.817749][ T4956] bridge0: entered allmulticast mode [ 48.823916][ T4956] : left allmulticast mode [ 48.828624][ T4956] bridge0: left allmulticast mode [ 48.835752][ T4954] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 48.865999][ T4954] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 48.939573][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.086097][ T4973] netlink: 556 bytes leftover after parsing attributes in process `syz.0.650'. [ 49.529081][ T315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.599974][ T315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.655585][ T315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.685292][ T5009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 49.700715][ T5011] GUP no longer grows the stack in syz.4.669 (5011): 200000009000-20000000a000 (200000005000) [ 49.736494][ T5011] CPU: 1 UID: 0 PID: 5011 Comm: syz.4.669 Not tainted syzkaller #0 PREEMPT(full) [ 49.736522][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.736542][ T5011] Call Trace: [ 49.736549][ T5011] [ 49.736576][ T5011] __dump_stack+0x1d/0x30 [ 49.736609][ T5011] dump_stack_lvl+0x95/0xd0 [ 49.736634][ T5011] dump_stack+0x15/0x1b [ 49.736657][ T5011] __get_user_pages+0x195b/0x1ea0 [ 49.736696][ T5011] ? __mt_destroy+0xce/0xe0 [ 49.736738][ T5011] __gup_longterm_locked+0x8d7/0xe30 [ 49.736778][ T5011] ? __rcu_read_unlock+0x33/0x70 [ 49.736814][ T5011] ? try_get_folio+0x369/0x3b0 [ 49.736906][ T5011] ? try_grab_folio_fast+0xdc/0x370 [ 49.736929][ T5011] gup_fast_fallback+0x1f3/0x13c0 [ 49.736976][ T5011] get_user_pages_fast+0x5f/0x90 [ 49.737084][ T5011] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 49.737158][ T5011] iov_iter_get_pages2+0x5e/0xa0 [ 49.737196][ T5011] __se_sys_vmsplice+0x541/0xfd0 [ 49.737318][ T5011] __x64_sys_vmsplice+0x55/0x70 [ 49.737342][ T5011] x64_sys_call+0x28e9/0x3020 [ 49.737376][ T5011] do_syscall_64+0x12c/0x370 [ 49.737415][ T5011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.737440][ T5011] RIP: 0033:0x7f9619c3c799 [ 49.737456][ T5011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.737475][ T5011] RSP: 002b:00007f9618697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 49.737572][ T5011] RAX: ffffffffffffffda RBX: 00007f9619eb5fa0 RCX: 00007f9619c3c799 [ 49.737587][ T5011] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 49.737604][ T5011] RBP: 00007f9619cd2c99 R08: 0000000000000000 R09: 0000000000000000 [ 49.737621][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.737634][ T5011] R13: 00007f9619eb6038 R14: 00007f9619eb5fa0 R15: 00007ffc119e2318 [ 49.737693][ T5011] [ 49.745912][ T315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.046412][ T315] bridge_slave_1: left allmulticast mode [ 50.077767][ T315] bridge_slave_1: left promiscuous mode [ 50.093653][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.123618][ T315] bridge_slave_0: left allmulticast mode [ 50.129382][ T315] bridge_slave_0: left promiscuous mode [ 50.135206][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.225193][ T315] dvmrp6 (unregistering): left allmulticast mode [ 50.278530][ T315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.289852][ T315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.299660][ T315] bond0 (unregistering): Released all slaves [ 50.369815][ T315] hsr_slave_0: left promiscuous mode [ 50.387394][ T315] hsr_slave_1: left promiscuous mode [ 50.396303][ T315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.417553][ T315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.444578][ T315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.452332][ T315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.461150][ T315] batman_adv: batadv0: Removing interface: ipvlan2 [ 50.472469][ T315] veth1_macvtap: left promiscuous mode [ 50.483484][ T5066] loop1: detected capacity change from 0 to 32768 [ 50.490074][ T315] veth0_macvtap: left promiscuous mode [ 50.497920][ T315] veth1_vlan: left promiscuous mode [ 50.503323][ T315] veth0_vlan: left promiscuous mode [ 50.559248][ T4741] loop1: p1 p2 p3 < p5 p6 > [ 50.568076][ T4741] loop1: p2 size 16775168 extends beyond EOD, truncated [ 50.590622][ T4741] loop1: p5 start 4294970168 is beyond EOD, truncated [ 50.607216][ T5066] loop1: p1 p2 p3 < p5 p6 > [ 50.615105][ T5066] loop1: p2 size 16775168 extends beyond EOD, truncated [ 50.636325][ T5066] loop1: p5 start 4294970168 is beyond EOD, truncated [ 50.692727][ T5117] loop4: detected capacity change from 0 to 7 [ 50.699959][ T5117] buffer_io_error: 30 callbacks suppressed [ 50.719611][ T5117] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.727961][ T5117] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.728174][ T315] team0 (unregistering): Port device team_slave_1 removed [ 50.736242][ T5117] loop4: unable to read partition table [ 50.748960][ T5117] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 50.754213][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.771190][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.780861][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 50.780940][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 50.792194][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 50.800879][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.811495][ T4741] udevd[4741]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 50.819229][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.828273][ T315] team0 (unregistering): Port device team_slave_0 removed [ 50.836828][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.860500][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 50.871841][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 50.873767][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 50.892042][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.894883][ T4741] udevd[4741]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 50.902823][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.926336][ T3302] Buffer I/O error on dev loop4, logical block 0, async page read [ 50.950384][ T5125] loop3: detected capacity change from 0 to 512 [ 51.003830][ T5125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.046268][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.097610][ T5004] chnl_net:caif_netlink_parms(): no params data found [ 51.149619][ T5145] loop0: detected capacity change from 0 to 512 [ 51.160432][ T5145] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 51.177087][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.184484][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.192027][ T5004] bridge_slave_0: entered allmulticast mode [ 51.198872][ T5004] bridge_slave_0: entered promiscuous mode [ 51.205892][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.213055][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.220339][ T5004] bridge_slave_1: entered allmulticast mode [ 51.226978][ T5004] bridge_slave_1: entered promiscuous mode [ 51.268015][ T5004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.280027][ T5156] netem: unknown loss type 13 [ 51.284957][ T5156] netem: change failed [ 51.320021][ T5164] loop4: detected capacity change from 0 to 512 [ 51.483862][ T5004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.512873][ T5004] team0: Port device team_slave_0 added [ 51.538541][ T5004] team0: Port device team_slave_1 added [ 51.575253][ T5004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.598097][ T5004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.673391][ T5187] loop1: detected capacity change from 0 to 512 [ 51.674342][ T5004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.698617][ T5187] EXT4-fs (loop1): 1 truncate cleaned up [ 51.722037][ T5004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.726647][ T5187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.737662][ T5004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.767943][ T5004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.802053][ T5187] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.723: bg 0: block 465: padding at end of block bitmap is not set [ 51.825839][ T5187] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.832897][ T5004] hsr_slave_0: entered promiscuous mode [ 51.840790][ T5199] __nla_validate_parse: 4 callbacks suppressed [ 51.840805][ T5199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.725'. [ 51.853594][ T5004] hsr_slave_1: entered promiscuous mode [ 51.895410][ T5187] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.895410][ T5187] [ 51.899106][ T5004] debugfs: 'hsr0' already exists in 'hsr' [ 51.924035][ T5187] EXT4-fs (loop1): Total free blocks count 0 [ 51.933090][ T5004] Cannot create hsr debugfs directory [ 51.940395][ T5187] EXT4-fs (loop1): Free/Dirty block details [ 51.955861][ T5187] EXT4-fs (loop1): free_blocks=0 [ 51.982723][ T5187] EXT4-fs (loop1): dirty_blocks=2 [ 51.988092][ T5187] EXT4-fs (loop1): Block reservation details [ 51.995324][ T5187] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 52.020520][ T5215] syz.0.728 (5215) used greatest stack depth: 9000 bytes left [ 52.092003][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.186692][ T5004] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.210267][ T5004] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.231519][ T5227] gretap0: entered promiscuous mode [ 52.248954][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 52.266610][ T5227] gretap0: left promiscuous mode [ 52.272119][ T5004] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.298211][ T5004] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.320145][ T5233] loop3: detected capacity change from 0 to 128 [ 52.370687][ T5243] loop1: detected capacity change from 0 to 512 [ 52.386291][ T5243] EXT4-fs: Ignoring removed nobh option [ 52.406797][ T5004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.414264][ T5243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.432490][ T5004] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.436094][ T5243] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.440799][ T5246] loop4: detected capacity change from 0 to 1024 [ 52.484772][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.491916][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.508747][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.517991][ T5250] loop3: detected capacity change from 0 to 128 [ 52.528685][ T5250] FAT-fs (loop3): Directory bread(block 32) failed [ 52.555311][ T5250] FAT-fs (loop3): Directory bread(block 33) failed [ 52.563180][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.570312][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.584367][ T5246] EXT4-fs: Ignoring removed orlov option [ 52.595878][ T5250] FAT-fs (loop3): Directory bread(block 34) failed [ 52.602435][ T5250] FAT-fs (loop3): Directory bread(block 35) failed [ 52.632643][ T5246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.644229][ T5250] FAT-fs (loop3): Directory bread(block 36) failed [ 52.652160][ T5250] FAT-fs (loop3): Directory bread(block 37) failed [ 52.654179][ T5252] netlink: 'syz.1.740': attribute type 6 has an invalid length. [ 52.660114][ T5250] FAT-fs (loop3): Directory bread(block 38) failed [ 52.674351][ T5250] FAT-fs (loop3): Directory bread(block 39) failed [ 52.681396][ T5250] FAT-fs (loop3): Directory bread(block 40) failed [ 52.689175][ T5250] FAT-fs (loop3): Directory bread(block 41) failed [ 52.758573][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.763270][ T5004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.824966][ T5261] ref_ctr_offset mismatch. inode: 0x2a2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 52.929270][ T5271] loop1: detected capacity change from 0 to 256 [ 53.001873][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 53.001889][ T28] audit: type=1400 audit(1774656422.872:389): avc: denied { create } for pid=5280 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.037914][ T5004] veth0_vlan: entered promiscuous mode [ 53.045793][ T28] audit: type=1400 audit(1774656422.912:390): avc: denied { ioctl } for pid=5280 comm="syz.3.744" path="socket:[9810]" dev="sockfs" ino=9810 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 53.049195][ T5004] veth1_vlan: entered promiscuous mode [ 53.113773][ T5004] veth0_macvtap: entered promiscuous mode [ 53.122740][ T5287] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 53.147118][ T5004] veth1_macvtap: entered promiscuous mode [ 53.162551][ T5004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.171034][ T5296] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 53.197928][ T5004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.209995][ T5301] netlink: 'syz.1.755': attribute type 3 has an invalid length. [ 53.218380][ T5301] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.755'. [ 53.227828][ T28] audit: type=1400 audit(1774656423.102:391): avc: denied { bind } for pid=5298 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.268514][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.271166][ T28] audit: type=1400 audit(1774656423.102:392): avc: denied { listen } for pid=5298 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.312021][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.335084][ T5305] loop1: detected capacity change from 0 to 2048 [ 53.347250][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.361414][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.381008][ T5316] loop4: detected capacity change from 0 to 1024 [ 53.397334][ T28] audit: type=1400 audit(1774656423.102:393): avc: denied { read } for pid=5298 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.431018][ T5305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.455859][ T5305] EXT4-fs (loop1): shut down requested (2) [ 53.482537][ T28] audit: type=1400 audit(1774656423.352:394): avc: denied { create } for pid=5304 comm="syz.1.757" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 53.486891][ T5316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 53.574195][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.628715][ T5333] loop0: detected capacity change from 0 to 1024 [ 53.638236][ T5333] EXT4-fs: Ignoring removed oldalloc option [ 53.644307][ T5333] EXT4-fs: Ignoring removed bh option [ 53.692188][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.726156][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 53.759949][ T5350] loop5: detected capacity change from 0 to 128 [ 53.807505][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.941252][ T5367] loop0: detected capacity change from 0 to 128 [ 53.959208][ T5367] FAT-fs (loop0): Directory bread(block 32) failed [ 53.966043][ T5367] FAT-fs (loop0): Directory bread(block 33) failed [ 53.972726][ T5367] FAT-fs (loop0): Directory bread(block 34) failed [ 54.004283][ T5367] FAT-fs (loop0): Directory bread(block 35) failed [ 54.035899][ T5367] FAT-fs (loop0): Directory bread(block 36) failed [ 54.057090][ T5367] FAT-fs (loop0): Directory bread(block 37) failed [ 54.078388][ T5367] FAT-fs (loop0): Directory bread(block 38) failed [ 54.125755][ T5367] FAT-fs (loop0): Directory bread(block 39) failed [ 54.132513][ T5367] FAT-fs (loop0): Directory bread(block 40) failed [ 54.143375][ T5367] FAT-fs (loop0): Directory bread(block 41) failed [ 54.377575][ T5389] tap0: tun_chr_ioctl cmd 2147767521 [ 54.395193][ T28] audit: type=1400 audit(1774656424.262:395): avc: denied { listen } for pid=5392 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.415810][ T28] audit: type=1400 audit(1774656424.262:396): avc: denied { ioctl } for pid=5392 comm="syz.3.792" path="socket:[11247]" dev="sockfs" ino=11247 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.493267][ T5400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.518407][ T5400] EXT4-fs (loop1): 1 truncate cleaned up [ 54.526079][ T5400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.542403][ T5400] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.795: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 54.566295][ T28] audit: type=1400 audit(1774656424.412:397): avc: denied { rename } for pid=5397 comm="syz.1.795" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.596433][ T5400] EXT4-fs (loop1): Remounting filesystem read-only [ 54.620449][ T5400] EXT4-fs warning (device loop1): ext4_rename_delete:3729: inode #2: comm syz.1.795: Deleting old file: nlink 4, error=-117 [ 54.661688][ T28] audit: type=1400 audit(1774656424.532:398): avc: denied { setattr } for pid=5397 comm="syz.1.795" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.710872][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.805359][ T5417] netlink: 4556 bytes leftover after parsing attributes in process `syz.4.804'. [ 54.839662][ T5424] tap0: tun_chr_ioctl cmd 2147767521 [ 54.903024][ T5434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.941623][ T5434] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.811: iget: bad i_size value: 38620345925642 [ 54.995758][ T5434] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.007908][ T5434] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.811: couldn't read orphan inode 15 (err -117) [ 55.017112][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 55.017147][ C1] EXT4-fs (loop1): initial error at time 1774656424: ext4_orphan_get:1391: inode 15 [ 55.017173][ C1] EXT4-fs (loop1): last error at time 1774656424: ext4_orphan_get:1391: inode 15 [ 55.020444][ T5446] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.029569][ T5434] loop1: lost filesystem error report for type 5 error -117 [ 55.073100][ T5434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.178193][ T5453] vcan0: tx drop: invalid da for name 0x0010000000000000 [ 55.192560][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 55.266651][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.416497][ T5475] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 16: comm syz.5.830: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 55.457202][ T5486] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.834: Failed to acquire dquot type 1 [ 55.490982][ T5486] loop1: lost filesystem error report for type 5 error -117 [ 55.491177][ T5486] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.834: Failed to acquire dquot type 1 [ 55.498675][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 55.498717][ C0] EXT4-fs (loop1): last error at time 1774656425: ext4_acquire_dquot:7001 [ 55.558486][ T5486] loop1: lost filesystem error report for type 5 error -117 [ 55.559000][ T5486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.834: bg 0: block 248: padding at end of block bitmap is not set [ 55.589720][ T5486] loop1: lost filesystem error report for type 5 error -117 [ 55.589913][ T5486] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 55.606426][ T5486] loop1: lost filesystem error report for type 5 error -117 [ 55.606717][ T5486] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.834: Failed to acquire dquot type 1 [ 55.625498][ T5486] loop1: lost filesystem error report for type 5 error -117 [ 55.625731][ T5486] EXT4-fs (loop1): 1 orphan inode deleted [ 55.639546][ T5486] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.735985][ T5503] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 55.741555][ T5503] dvmrp1: linktype set to 769 [ 55.851786][ T5518] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 55.955772][ T5518] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 55.966832][ T5518] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.842: Corrupt directory, running e2fsck is recommended [ 56.028954][ T5518] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 56.030282][ T5532] bridge0: entered promiscuous mode [ 56.056858][ T5532] macvlan2: entered promiscuous mode [ 56.057068][ T5518] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.842: corrupted in-inode xattr: invalid ea_ino [ 56.112284][ T5518] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.112507][ T5518] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.842: couldn't read orphan inode 15 (err -117) [ 56.121872][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.121913][ C1] EXT4-fs (loop3): initial error at time 1774656425: ext4_iget_extra_inode:5025: inode 15 [ 56.121963][ C1] EXT4-fs (loop3): last error at time 1774656425: ext4_iget_extra_inode:5025: inode 15 [ 56.185823][ T5518] loop3: lost filesystem error report for type 5 error -117 [ 56.186669][ T5518] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #2: comm syz.3.842: corrupted xattr block 255: invalid header [ 56.255126][ T5518] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 56.314723][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.855'. [ 56.335822][ T5549] bond0: Unable to set up delay as MII monitoring is disabled [ 56.679111][ T5579] netlink: 'syz.0.870': attribute type 2 has an invalid length. [ 56.694443][ T5579] netlink: 'syz.0.870': attribute type 8 has an invalid length. [ 56.729968][ T5583] netlink: 'syz.0.870': attribute type 2 has an invalid length. [ 56.737869][ T5579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.870'. [ 56.738845][ T5582] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.777921][ T5583] netlink: 'syz.0.870': attribute type 8 has an invalid length. [ 56.789034][ T5582] EXT4-fs (loop4): 1 truncate cleaned up [ 56.797937][ T5583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.870'. [ 56.926065][ T5588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 56.935446][ T5588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 57.030235][ T5602] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.263007][ T5624] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.322329][ T5624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.376294][ T5624] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.405493][ T5634] SELinux: ebitmap: truncated map [ 57.423007][ T5634] SELinux: failed to load policy [ 57.814973][ T5660] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.848386][ T5660] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 58.006800][ T5665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.906'. [ 58.084111][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 58.206868][ T5690] netlink: 260 bytes leftover after parsing attributes in process `syz.4.916'. [ 58.504033][ T5725] set_capacity_and_notify: 11 callbacks suppressed [ 58.504045][ T5725] loop3: detected capacity change from 0 to 4096 [ 58.510757][ T5730] loop4: detected capacity change from 0 to 512 [ 58.541001][ T5730] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 58.606869][ T5736] loop0: detected capacity change from 0 to 512 [ 58.615765][ T5736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.636944][ T5736] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.949: iget: bad i_size value: 38620345925642 [ 58.652121][ T5736] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.671764][ T5736] EXT4-fs (loop0): Remounting filesystem read-only [ 58.681092][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.681115][ C1] EXT4-fs (loop0): initial error at time 2000000002: ext4_orphan_get:1391: inode 15 [ 58.681141][ C1] EXT4-fs (loop0): last error at time 2000000002: ext4_orphan_get:1391: inode 15 [ 58.808308][ T5742] SELinux: ebitmap: truncated map [ 58.814693][ T5742] SELinux: failed to load policy [ 58.822739][ T5748] loop1: detected capacity change from 0 to 1024 [ 58.838153][ T5748] EXT4-fs: inline encryption not supported [ 58.844152][ T5750] tipc: Started in network mode [ 58.851355][ T5750] tipc: Node identity ac14140f, cluster identity 4711 [ 58.860253][ T5750] tipc: New replicast peer: 255.255.255.255 [ 58.882024][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 58.882038][ T28] audit: type=1400 audit(2000000002.600:422): avc: denied { execute } for pid=5755 comm="syz.0.947" name="file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.889617][ T5750] tipc: Enabled bearer , priority 10 [ 58.928199][ T28] audit: type=1400 audit(2000000002.600:423): avc: denied { execute_no_trans } for pid=5755 comm="syz.0.947" path="/202/file0" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.968096][ T5748] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 59.029109][ T5769] loop0: detected capacity change from 0 to 512 [ 59.042757][ T5769] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.067118][ T5769] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 59.077878][ T5769] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 59.087772][ T5769] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 59.096508][ T5769] System zones: 0-2, 18-18, 34-35 [ 59.118806][ T5769] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.0.953: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 59.138670][ T28] audit: type=1400 audit(2000000002.840:424): avc: denied { lock } for pid=5768 comm="syz.0.953" path="/205/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.179631][ T5769] EXT4-fs error (device loop0) in ext4_delete_entry:2737: Corrupt filesystem [ 59.353325][ T28] audit: type=1400 audit(2000000003.070:425): avc: denied { setopt } for pid=5779 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.408894][ T5784] SELinux: ebitmap: truncated map [ 59.423469][ T5784] SELinux: failed to load policy [ 59.451501][ T5788] loop3: detected capacity change from 0 to 1024 [ 59.465907][ T28] audit: type=1400 audit(2000000003.180:426): avc: denied { read } for pid=5779 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.488796][ T5788] EXT4-fs: Ignoring removed orlov option [ 59.507314][ T28] audit: type=1400 audit(2000000003.190:427): avc: denied { ioctl } for pid=5790 comm="syz.1.971" path="socket:[11734]" dev="sockfs" ino=11734 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.538545][ T5788] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.960: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 59.573620][ T5788] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 59.576891][ T5788] EXT4-fs error (device loop3): ext4_quota_enable:7195: comm syz.3.960: Bad quota inode: 4, type: 1 [ 59.586055][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 59.586076][ C1] EXT4-fs (loop3): initial error at time 2000000003: ext4_ext_check_inode:521: inode 4 [ 59.586140][ C1] EXT4-fs (loop3): last error at time 2000000003: ext4_ext_check_inode:521: inode 4 [ 59.655763][ T5788] loop3: lost filesystem error report for type 5 error -117 [ 59.655892][ T5788] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.680505][ T5796] loop0: detected capacity change from 0 to 512 [ 59.719132][ T5798] netlink: 56 bytes leftover after parsing attributes in process `syz.1.963'. [ 59.752318][ T5788] EXT4-fs (loop3): mount failed [ 59.816615][ T5788] netlink: 140 bytes leftover after parsing attributes in process `syz.3.960'. [ 59.899950][ T5809] netlink: 'syz.3.969': attribute type 2 has an invalid length. [ 59.917800][ T5809] netlink: 100 bytes leftover after parsing attributes in process `syz.3.969'. [ 60.014990][ T3368] tipc: Node number set to 2886997007 [ 60.034762][ T28] audit: type=1400 audit(2000000003.750:428): avc: denied { setopt } for pid=5820 comm="syz.5.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.145928][ T5801] bio_check_eod: 38 callbacks suppressed [ 60.145946][ T5801] syz.0.961: attempt to access beyond end of device [ 60.145946][ T5801] loop0: rw=0, sector=432, nr_sectors = 128 limit=512 [ 60.170272][ T5829] netlink: 116 bytes leftover after parsing attributes in process `syz.5.979'. [ 60.170553][ T28] audit: type=1400 audit(2000000003.810:429): avc: denied { bind } for pid=5824 comm="syz.5.977" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.316947][ T47] kworker/u8:3: attempt to access beyond end of device [ 60.316947][ T47] loop0: rw=1, sector=560, nr_sectors = 2944 limit=512 [ 60.341140][ T5843] loop1: detected capacity change from 0 to 512 [ 60.344467][ T47] kworker/u8:3: attempt to access beyond end of device [ 60.344467][ T47] loop0: rw=1, sector=3504, nr_sectors = 2224 limit=512 [ 60.372204][ T5844] team0: Device gtp0 is of different type [ 60.389121][ T47] kworker/u8:3: attempt to access beyond end of device [ 60.389121][ T47] loop0: rw=1, sector=5728, nr_sectors = 3736 limit=512 [ 60.428620][ T47] kworker/u8:3: attempt to access beyond end of device [ 60.428620][ T47] loop0: rw=1, sector=9464, nr_sectors = 2944 limit=512 [ 60.462008][ T47] kworker/u8:3: attempt to access beyond end of device [ 60.462008][ T47] loop0: rw=1, sector=12408, nr_sectors = 2048 limit=512 [ 60.482936][ T47] kworker/u8:3: attempt to access beyond end of device [ 60.482936][ T47] loop0: rw=1, sector=14456, nr_sectors = 2008 limit=512 [ 60.584144][ T5869] loop5: detected capacity change from 0 to 512 [ 60.607691][ T5869] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.644037][ T5878] loop4: detected capacity change from 0 to 512 [ 60.659453][ T5869] EXT4-fs error (device loop5): ext4_add_entry:2415: inode #12: comm syz.5.993: Directory hole found for htree leaf block 0 [ 60.772810][ T28] audit: type=1400 audit(2000000004.490:430): avc: denied { create } for pid=5884 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.794156][ T5885] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 60.810649][ T28] audit: type=1400 audit(2000000004.510:431): avc: denied { write } for pid=5884 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.883587][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'. [ 60.893206][ T5883] syz.4.995: attempt to access beyond end of device [ 60.893206][ T5883] loop4: rw=0, sector=432, nr_sectors = 128 limit=512 [ 61.015546][ T30] kworker/u8:1: attempt to access beyond end of device [ 61.015546][ T30] loop4: rw=1, sector=560, nr_sectors = 2048 limit=512 [ 61.033589][ T30] kworker/u8:1: attempt to access beyond end of device [ 61.033589][ T30] loop4: rw=1, sector=2608, nr_sectors = 2352 limit=512 [ 61.782819][ T5993] EXT4-fs: Ignoring removed i_version option [ 61.798600][ T5993] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.947564][ T6005] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #12: comm syz.5.1053: corrupted in-inode xattr: bad e_name length [ 61.965545][ T6005] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 61.965705][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 61.981627][ C0] EXT4-fs (loop5): initial error at time 2000000005: ext4_iget_extra_inode:5025: inode 12 [ 61.991590][ C0] EXT4-fs (loop5): last error at time 2000000005: ext4_iget_extra_inode:5025: inode 12 [ 62.009858][ T6005] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1053: couldn't read orphan inode 12 (err -117) [ 62.037888][ T6005] loop5: lost filesystem error report for type 5 error -117 [ 62.112622][ T6028] __nla_validate_parse: 5 callbacks suppressed [ 62.112639][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 62.229277][ T6038] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.258907][ T6038] EXT4-fs (loop0): shut down requested (1) [ 62.353919][ T23] kernel write not supported for file /uhid (pid: 23 comm: kworker/1:0) [ 62.568625][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 62.675390][ T6101] program syz.5.1075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.688428][ T6105] rdma_op ffff88811ef81180 conn xmit_rdma 0000000000000000 [ 62.801916][ T6126] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1083'. [ 62.946448][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.954584][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.053490][ T6150] fido_id[6150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.699616][ T6210] set_capacity_and_notify: 5 callbacks suppressed [ 63.699636][ T6210] loop4: detected capacity change from 0 to 512 [ 63.736094][ T6210] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #12: comm syz.4.1104: corrupted in-inode xattr: bad e_name length [ 63.756131][ T6210] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 63.756755][ T6210] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1104: couldn't read orphan inode 12 (err -117) [ 63.765951][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 63.765976][ C1] EXT4-fs (loop4): initial error at time 2000000007: ext4_iget_extra_inode:5025: inode 12 [ 63.766006][ C1] EXT4-fs (loop4): last error at time 2000000007: ext4_iget_extra_inode:5025: inode 12 [ 63.848372][ T6210] loop4: lost filesystem error report for type 5 error -117 [ 63.960810][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 63.960826][ T28] audit: type=1400 audit(2000000007.680:450): avc: denied { mount } for pid=6234 comm="syz.1.1112" name="/" dev="autofs" ino=14371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 64.018040][ T6237] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1113'. [ 64.048659][ T28] audit: type=1400 audit(2000000007.770:451): avc: denied { mount } for pid=6240 comm="syz.1.1116" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 64.050314][ T6237] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1113'. [ 64.137100][ T28] audit: type=1400 audit(2000000007.850:452): avc: denied { getopt } for pid=6244 comm="syz.1.1118" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.280475][ T28] audit: type=1400 audit(2000000008.996:453): avc: denied { connect } for pid=6259 comm="syz.5.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.418090][ T6273] loop1: detected capacity change from 0 to 512 [ 64.476806][ T6273] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #12: comm syz.1.1128: corrupted in-inode xattr: bad e_name length [ 64.525279][ T6273] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.525509][ T6273] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1128: couldn't read orphan inode 12 (err -117) [ 64.534786][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 64.534809][ C0] EXT4-fs (loop1): initial error at time 2000000009: ext4_iget_extra_inode:5025: inode 12 [ 64.534838][ C0] EXT4-fs (loop1): last error at time 2000000009: ext4_iget_extra_inode:5025: inode 12 [ 64.706747][ T6273] loop1: lost filesystem error report for type 5 error -117 [ 64.817404][ T6300] wireguard0: entered promiscuous mode [ 64.830332][ T6300] wireguard0: entered allmulticast mode [ 64.891218][ T6307] loop4: detected capacity change from 0 to 256 [ 64.984287][ T6314] pimreg: entered allmulticast mode [ 65.006715][ T6314] pimreg: left allmulticast mode [ 65.036169][ T6317] team0: Device is already in use. [ 65.066077][ T6325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.174141][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'. [ 65.186347][ T28] audit: type=1400 audit(2000000009.896:454): avc: denied { override_creds } for pid=6342 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.324522][ T6362] loop3: detected capacity change from 0 to 512 [ 65.353618][ T6362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.370918][ T6362] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1172: invalid indirect mapped block 256 (level 2) [ 65.387007][ T6362] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.387295][ T6362] EXT4-fs (loop3): 2 truncates cleaned up [ 65.396514][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 65.396551][ C1] EXT4-fs (loop3): initial error at time 2000000010: ext4_free_branches:1023: inode 11 [ 65.396579][ C1] EXT4-fs (loop3): last error at time 2000000010: ext4_free_branches:1023: inode 11 [ 65.456197][ T6362] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1172: bg 0: block 5: invalid block bitmap [ 65.468883][ T6362] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 65.481363][ T6362] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.481363][ T6362] [ 65.491596][ T6362] EXT4-fs (loop3): Total free blocks count 0 [ 65.497727][ T6362] EXT4-fs (loop3): Free/Dirty block details [ 65.503760][ T6362] EXT4-fs (loop3): free_blocks=0 [ 65.508919][ T6362] EXT4-fs (loop3): dirty_blocks=5 [ 65.514150][ T6362] EXT4-fs (loop3): Block reservation details [ 65.520546][ T6362] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 65.589962][ T6381] loop0: detected capacity change from 0 to 1024 [ 65.591235][ T6380] loop5: detected capacity change from 0 to 256 [ 65.607619][ T6380] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.618175][ T6381] EXT4-fs: Ignoring removed bh option [ 65.640820][ T6380] FAT-fs (loop5): Directory bread(block 64) failed [ 65.648302][ T6380] FAT-fs (loop5): Directory bread(block 65) failed [ 65.654918][ T6380] FAT-fs (loop5): Directory bread(block 66) failed [ 65.692861][ T6380] FAT-fs (loop5): Directory bread(block 67) failed [ 65.700925][ T6380] FAT-fs (loop5): Directory bread(block 68) failed [ 65.707883][ T6380] FAT-fs (loop5): Directory bread(block 69) failed [ 65.714649][ T6380] FAT-fs (loop5): Directory bread(block 70) failed [ 65.722285][ T6380] FAT-fs (loop5): Directory bread(block 71) failed [ 65.729082][ T6380] FAT-fs (loop5): Directory bread(block 72) failed [ 65.736677][ T6380] FAT-fs (loop5): Directory bread(block 73) failed [ 65.894647][ T6403] program syz.0.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.949299][ T6389] loop3: detected capacity change from 0 to 256 [ 65.965402][ T28] audit: type=1400 audit(2000000010.686:455): avc: denied { nlmsg_read } for pid=6410 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 66.061627][ T6389] FAT-fs (loop3): Directory bread(block 64) failed [ 66.080236][ T6389] FAT-fs (loop3): Directory bread(block 65) failed [ 66.092337][ T6389] FAT-fs (loop3): Directory bread(block 66) failed [ 66.099901][ T6389] FAT-fs (loop3): Directory bread(block 67) failed [ 66.108812][ T6389] FAT-fs (loop3): Directory bread(block 68) failed [ 66.133195][ T6389] FAT-fs (loop3): Directory bread(block 69) failed [ 66.168755][ T6389] FAT-fs (loop3): Directory bread(block 70) failed [ 66.186314][ T6389] FAT-fs (loop3): Directory bread(block 71) failed [ 66.195169][ T6389] FAT-fs (loop3): Directory bread(block 72) failed [ 66.215247][ T6389] FAT-fs (loop3): Directory bread(block 73) failed [ 66.314341][ T6433] program syz.4.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.418302][ T6444] loop1: detected capacity change from 0 to 128 [ 66.605714][ T28] audit: type=1400 audit(2000000011.306:456): avc: denied { name_bind } for pid=6458 comm="syz.0.1215" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 66.654636][ T6464] 9p: Unknown access argument 18446744073709551615: -34 [ 66.729996][ T6460] loop1: detected capacity change from 0 to 8192 [ 66.864132][ T28] audit: type=1400 audit(2000000011.576:457): avc: denied { read } for pid=6471 comm="syz.1.1220" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.945951][ T28] audit: type=1400 audit(2000000011.576:458): avc: denied { open } for pid=6471 comm="syz.1.1220" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.982254][ T6483] loop5: detected capacity change from 0 to 512 [ 67.006407][ T6483] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1223: inode #0: comm syz.5.1223: iget: illegal inode # [ 67.029630][ T6483] loop5: lost filesystem error report for type 5 error -117 [ 67.030590][ T6483] EXT4-fs (loop5): get orphan inode failed [ 67.037949][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 67.037969][ C1] EXT4-fs (loop5): initial error at time 2000000011: ext4_init_orphan_info:583 [ 67.037990][ C1] EXT4-fs (loop5): last error at time 2000000011: ext4_init_orphan_info:583 [ 67.068226][ T28] audit: type=1400 audit(2000000011.586:459): avc: denied { ioctl } for pid=6471 comm="syz.1.1220" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.075841][ T6483] EXT4-fs (loop5): mount failed [ 67.288909][ T6499] EXT4-fs mount: 36 callbacks suppressed [ 67.288924][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.321517][ T6503] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.344096][ T6477] FAT-fs (loop0): Directory bread(block 64) failed [ 67.360256][ T6477] FAT-fs (loop0): Directory bread(block 65) failed [ 67.389191][ T6477] FAT-fs (loop0): Directory bread(block 66) failed [ 67.401449][ T6503] EXT4-fs (loop5): 1 truncate cleaned up [ 67.412547][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.427298][ T6503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.439922][ T6477] FAT-fs (loop0): Directory bread(block 67) failed [ 67.451024][ T6477] FAT-fs (loop0): Directory bread(block 68) failed [ 67.504341][ T6477] FAT-fs (loop0): Directory bread(block 69) failed [ 67.570235][ T5004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.592682][ T6477] FAT-fs (loop0): Directory bread(block 70) failed [ 67.645070][ T6477] FAT-fs (loop0): Directory bread(block 71) failed [ 67.660340][ T6477] FAT-fs (loop0): Directory bread(block 72) failed [ 67.669332][ T6477] FAT-fs (loop0): Directory bread(block 73) failed [ 67.872138][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 67.931415][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 67.965206][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 68.152605][ T6554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.223425][ T6554] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.326966][ T12] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.349556][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.385785][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.385785][ T12] [ 68.419074][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.437653][ T6580] EXT4-fs: Ignoring removed bh option [ 68.470978][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.627691][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1265'. [ 68.685379][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.777693][ T6619] program syz.4.1274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.824226][ T6626] set_capacity_and_notify: 6 callbacks suppressed [ 68.824274][ T6626] loop5: detected capacity change from 0 to 512 [ 68.848801][ T6626] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #12: comm syz.5.1276: corrupted in-inode xattr: bad e_name length [ 68.863021][ T6626] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 68.865712][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 68.870609][ T6626] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1276: couldn't read orphan inode 12 (err -117) [ 68.874977][ C0] EXT4-fs (loop5): initial error at time 2000000013: ext4_iget_extra_inode:5025: inode 12 [ 68.901278][ T6626] loop5: lost filesystem error report for type 5 error -117 [ 68.903201][ C0] EXT4-fs (loop5): last error at time 2000000013: ext4_iget_extra_inode:5025 [ 68.909370][ T6626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.910572][ C0] [ 68.965851][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1276'. [ 69.852356][ T5004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.869572][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1288'. [ 69.896466][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1288'. [ 69.908476][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 69.908496][ T28] audit: type=1400 audit(2000000014.636:468): avc: denied { write } for pid=6655 comm="syz.3.1290" path="socket:[14971]" dev="sockfs" ino=14971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.008761][ T28] audit: type=1400 audit(2000000014.736:469): avc: denied { read write } for pid=6669 comm="syz.0.1296" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.033593][ T28] audit: type=1400 audit(2000000014.736:470): avc: denied { open } for pid=6669 comm="syz.0.1296" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.057666][ T28] audit: type=1400 audit(2000000014.756:471): avc: denied { ioctl } for pid=6669 comm="syz.0.1296" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.085584][ T6666] loop3: detected capacity change from 0 to 1764 [ 70.163228][ T28] audit: type=1400 audit(2000000014.886:472): avc: denied { connect } for pid=6675 comm="syz.1.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.600804][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 70.832317][ T6742] loop5: detected capacity change from 0 to 256 [ 70.843659][ T6742] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.890073][ T6747] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 70.901889][ T6747] bridge0: port 3(team0) entered disabled state [ 70.908313][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.915529][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.050966][ T6762] loop5: detected capacity change from 0 to 128 [ 71.243249][ T28] audit: type=1400 audit(2000000015.966:473): avc: denied { bind } for pid=6776 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.283926][ T6781] netlink: 'syz.5.1347': attribute type 10 has an invalid length. [ 71.295897][ T6781] team0: Port device netdevsim1 added [ 71.325976][ T6783] tipc: Enabling of bearer rejected, failed to enable media [ 71.794844][ T6808] loop5: detected capacity change from 0 to 512 [ 71.803674][ T6808] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.836420][ T6808] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 71.851171][ T6808] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 71.876459][ T6808] System zones: 0-2, 18-18, 34-35 [ 71.889720][ T6808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.954105][ T5004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.977894][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 72.159843][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 72.566385][ T6864] loop5: detected capacity change from 0 to 256 [ 72.580766][ T6870] loop3: detected capacity change from 0 to 1024 [ 72.590625][ T6870] EXT4-fs: inline encryption not supported [ 72.598506][ T6864] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.624661][ T28] audit: type=1400 audit(2000000017.336:474): avc: denied { name_connect } for pid=6871 comm="syz.4.1389" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 72.633070][ T6876] loop1: detected capacity change from 0 to 1024 [ 72.686682][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.707270][ T6882] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 72.722996][ T6876] EXT4-fs: inline encryption not supported [ 72.733291][ T28] audit: type=1400 audit(2000000017.446:475): avc: denied { kexec_image_load } for pid=6865 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 72.742940][ T6882] FAT-fs (loop5): Filesystem has been set read-only [ 72.761006][ T6882] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 72.769282][ T6882] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 72.789873][ T6876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.860952][ T28] audit: type=1400 audit(2000000017.586:476): avc: denied { read write } for pid=6875 comm="syz.1.1391" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.885610][ T28] audit: type=1400 audit(2000000017.586:477): avc: denied { open } for pid=6875 comm="syz.1.1391" path="/270/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.056663][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.066100][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.301435][ T6913] loop4: detected capacity change from 0 to 1024 [ 73.323087][ T6915] loop5: detected capacity change from 0 to 512 [ 73.351101][ T6913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.371109][ T6915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.388285][ T6913] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.398216][ T6915] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.425623][ T5004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.476191][ T3425] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.534513][ T3425] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 73.548795][ T3425] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.548795][ T3425] [ 73.572844][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.768465][ T6960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.806528][ T5004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.905565][ T6966] sctp: [Deprecated]: syz.5.1429 (pid 6966) Use of int in max_burst socket option deprecated. [ 73.905565][ T6966] Use struct sctp_assoc_value instead [ 73.933655][ T6972] set_capacity_and_notify: 1 callbacks suppressed [ 73.933690][ T6972] loop3: detected capacity change from 0 to 512 [ 73.964360][ T6972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.985029][ T6972] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.053848][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.149272][ T6995] loop3: detected capacity change from 0 to 1024 [ 74.168336][ T6995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.183804][ T6995] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 74.205614][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.346020][ T7006] __nla_validate_parse: 1 callbacks suppressed [ 74.346038][ T7006] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1444'. [ 74.865360][ T7016] netlink: 'syz.5.1448': attribute type 1 has an invalid length. [ 74.873578][ T7016] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1448'. [ 74.978769][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 74.978785][ T28] audit: type=1400 audit(2000000019.706:482): avc: denied { setopt } for pid=7022 comm="syz.1.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.584369][ T28] audit: type=1400 audit(2000000020.306:483): avc: denied { mount } for pid=7065 comm="syz.3.1471" name="/" dev="ramfs" ino=16728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.830930][ T7086] loop3: detected capacity change from 0 to 512 [ 75.840122][ T7086] EXT4-fs (loop3): 1 truncate cleaned up [ 75.846324][ T7086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.859898][ T28] audit: type=1400 audit(2000000020.586:484): avc: denied { rename } for pid=7085 comm="syz.3.1480" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.875750][ T7086] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1480: invalid indirect mapped block 4294901760 (level 0) [ 75.882593][ T28] audit: type=1400 audit(2000000020.586:485): avc: denied { unlink } for pid=7085 comm="syz.3.1480" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.925524][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.091564][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1489'. [ 76.120949][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'. [ 76.130049][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 76.241649][ T7119] loop0: detected capacity change from 0 to 1024 [ 76.258819][ T7119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.273505][ T7119] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 76.295517][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.353473][ T7125] SELinux: failed to load policy [ 76.390556][ T7129] netlink: 'syz.0.1498': attribute type 5 has an invalid length. [ 76.413122][ T7131] loop0: detected capacity change from 0 to 256 [ 76.428438][ T7131] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.473278][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1500'. [ 76.482555][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1500'. [ 76.491819][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1500'. [ 76.500167][ T7131] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 76.500968][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1500'. [ 76.508929][ T7131] FAT-fs (loop0): Filesystem has been set read-only [ 76.525088][ T7131] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 76.533182][ T7131] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 76.547362][ T28] audit: type=1400 audit(2000000021.276:486): avc: denied { getopt } for pid=7134 comm="syz.5.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.603000][ T7139] loop5: detected capacity change from 0 to 512 [ 76.615853][ T7139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.625866][ T7139] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1503: invalid indirect mapped block 4294967295 (level 1) [ 76.639900][ T7139] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.640196][ T7139] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1503: invalid indirect mapped block 4294967295 (level 1) [ 76.649386][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 76.649411][ C0] EXT4-fs (loop5): initial error at time 2000000021: ext4_free_branches:1023: inode 11 [ 76.649440][ C0] EXT4-fs (loop5): last error at time 2000000021: ext4_free_branches:1023: inode 11 [ 76.688909][ T7139] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.689184][ T7139] EXT4-fs (loop5): 2 truncates cleaned up [ 76.704596][ T7139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.729686][ T5004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.815187][ T7147] loop0: detected capacity change from 0 to 2048 [ 76.828792][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.841642][ T7147] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.859760][ T28] audit: type=1400 audit(2000000021.586:487): avc: denied { setattr } for pid=7146 comm="syz.0.1506" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.905240][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.953906][ T7155] xt_hashlimit: size too large, truncated to 1048576 [ 76.974625][ T28] audit: type=1400 audit(2000000021.696:488): avc: denied { relabelfrom } for pid=7156 comm="syz.0.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 77.000749][ T28] audit: type=1400 audit(2000000021.696:489): avc: denied { relabelto } for pid=7156 comm="syz.0.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 77.056587][ T7167] syz.0.1514 uses obsolete (PF_INET,SOCK_PACKET) [ 77.220586][ T7178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=7178 comm=syz.0.1518 [ 77.348699][ T28] audit: type=1400 audit(2000000022.076:490): avc: denied { ioctl } for pid=7181 comm="syz.0.1520" path="socket:[16906]" dev="sockfs" ino=16906 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.389533][ T7184] bridge0: port 3(syz_tun) entered blocking state [ 77.396290][ T7184] bridge0: port 3(syz_tun) entered disabled state [ 77.402925][ T7184] syz_tun: entered allmulticast mode [ 77.409060][ T7184] syz_tun: entered promiscuous mode [ 77.414533][ T7184] bridge0: port 3(syz_tun) entered blocking state [ 77.421090][ T7184] bridge0: port 3(syz_tun) entered forwarding state [ 77.909794][ T7195] loop5: detected capacity change from 0 to 512 [ 77.990002][ T7199] loop3: detected capacity change from 0 to 128 [ 78.064668][ T28] audit: type=1400 audit(2000000022.786:491): avc: denied { getopt } for pid=7198 comm="syz.3.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.461022][ T7228] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.481380][ T7231] loop0: detected capacity change from 0 to 1024 [ 78.515979][ T7234] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 78.527141][ T7231] EXT4-fs: Ignoring removed bh option [ 78.544965][ T7234] isofs_fill_super: get root inode failed [ 78.600847][ T7239] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.607445][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.659723][ T7239] SELinux: failed to load policy [ 78.767318][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.908544][ T7267] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.925652][ T7267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.959752][ T7267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.984034][ T7267] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.020216][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.185758][ T7297] set_capacity_and_notify: 3 callbacks suppressed [ 79.185772][ T7297] loop3: detected capacity change from 0 to 512 [ 79.187634][ T7299] loop1: detected capacity change from 0 to 1024 [ 79.205364][ T7297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.231138][ T7299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.266728][ T7297] EXT4-fs (loop3): 1 truncate cleaned up [ 79.272858][ T7297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.307166][ T7299] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 79.344879][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.418154][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.548019][ T7329] xt_l2tp: unknown flags: 10 [ 79.620234][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 79.782966][ T7353] loop1: detected capacity change from 0 to 256 [ 79.797764][ T7353] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.905540][ T7364] loop0: detected capacity change from 0 to 128 [ 80.094720][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 80.106445][ T7381] gtp0: entered promiscuous mode [ 80.111654][ T7381] gtp0: entered allmulticast mode [ 80.459523][ T7403] loop1: detected capacity change from 0 to 512 [ 80.469640][ T7403] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.485668][ T7403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.517268][ T7403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.530264][ T7403] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.578274][ T43] Bluetooth: hci0: sending frame failed (-49) [ 80.578306][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.584552][ T3669] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 80.738704][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 80.738748][ T28] audit: type=1400 audit(2000000025.466:495): avc: denied { setopt } for pid=7432 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.754514][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1632'. [ 80.814027][ T7440] tipc: Started in network mode [ 80.820303][ T7440] tipc: Node identity ac14140f, cluster identity 4711 [ 80.827421][ T7440] tipc: Enabled bearer , priority 10 [ 80.872390][ T7448] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1639'. [ 80.898927][ T28] audit: type=1400 audit(2000000025.626:496): avc: denied { execute } for pid=7449 comm="syz.3.1641" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 81.004561][ T7458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1644'. [ 81.106800][ T7461] netlink: 'syz.0.1646': attribute type 16 has an invalid length. [ 81.118561][ T7461] netlink: 'syz.0.1646': attribute type 17 has an invalid length. [ 81.140585][ T7461] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.174844][ T7476] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 81.322933][ T28] audit: type=1326 audit(2000000026.046:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd96c799 code=0x7ffc0000 [ 81.352946][ T28] audit: type=1326 audit(2000000026.046:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd96c799 code=0x7ffc0000 [ 81.381945][ T28] audit: type=1326 audit(2000000026.046:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fdacd96c799 code=0x7ffc0000 [ 81.405372][ T28] audit: type=1326 audit(2000000026.046:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd96c799 code=0x7ffc0000 [ 81.428762][ T28] audit: type=1326 audit(2000000026.046:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.3.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacd96c799 code=0x7ffc0000 [ 81.470179][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 81.571865][ T7504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1661'. [ 81.580700][ T28] audit: type=1400 audit(2000000026.296:502): avc: denied { bind } for pid=7503 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.632591][ T28] audit: type=1400 audit(2000000026.316:503): avc: denied { mount } for pid=7505 comm="syz.3.1662" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 81.660468][ T28] audit: type=1400 audit(2000000026.326:504): avc: denied { read } for pid=7503 comm="syz.1.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.065798][ T3491] tipc: Node number set to 2886997007 [ 82.479464][ T7537] loop1: detected capacity change from 0 to 256 [ 82.661409][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 82.676620][ T7552] sctp: [Deprecated]: syz.0.1678 (pid 7552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.676620][ T7552] Use struct sctp_sack_info instead [ 83.923568][ T7649] loop3: detected capacity change from 0 to 512 [ 83.939016][ T7649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.951753][ T7649] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.975295][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.993044][ T7654] Invalid argument reading file caps for ./file0 [ 89.051570][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 89.051586][ T28] audit: type=1400 audit(2000000033.776:515): avc: denied { sys_module } for pid=7660 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 89.147462][ T7660] chnl_net:caif_netlink_parms(): no params data found [ 89.181533][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.188883][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.196703][ T7660] bridge_slave_0: entered allmulticast mode [ 89.202963][ T7660] bridge_slave_0: entered promiscuous mode [ 89.209796][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.217955][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.225076][ T7660] bridge_slave_1: entered allmulticast mode [ 89.231502][ T7660] bridge_slave_1: entered promiscuous mode [ 89.245127][ T3425] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.262124][ T7660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.272416][ T7660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.292003][ T7660] team0: Port device team_slave_0 added [ 89.298674][ T7660] team0: Port device team_slave_1 added [ 89.312902][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.319871][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.346015][ T7660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.357531][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.364574][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.390614][ T7660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.416701][ T3425] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.430271][ T7660] hsr_slave_0: entered promiscuous mode [ 89.436726][ T7660] hsr_slave_1: entered promiscuous mode [ 89.442495][ T7660] debugfs: 'hsr0' already exists in 'hsr' [ 89.448328][ T7660] Cannot create hsr debugfs directory [ 89.471582][ T3425] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.507782][ T28] audit: type=1326 audit(2000000034.236:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 89.534878][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1724'. [ 89.540127][ T7683] loop3: detected capacity change from 0 to 8192 [ 89.544998][ T3368] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.560108][ T3425] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.575841][ T3368] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.591381][ T28] audit: type=1326 audit(2000000034.236:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 89.672467][ T28] audit: type=1326 audit(2000000034.266:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 89.708201][ T7660] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.715047][ T28] audit: type=1326 audit(2000000034.266:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 89.738568][ T28] audit: type=1326 audit(2000000034.266:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 89.764354][ T7660] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.778281][ T7660] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.796552][ T7660] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.876054][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.883196][ T7660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.890626][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.897792][ T7660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.966927][ T3425] bridge_slave_1: left allmulticast mode [ 89.972694][ T3425] bridge_slave_1: left promiscuous mode [ 89.980515][ T3425] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.989419][ T3425] bridge_slave_0: left allmulticast mode [ 89.995270][ T3425] bridge_slave_0: left promiscuous mode [ 90.001249][ T3425] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.127852][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.190217][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.203287][ T3425] bond0 (unregistering): Released all slaves [ 90.253754][ T247] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.265051][ T247] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.309767][ T3425] tipc: Disabling bearer [ 90.323744][ T3425] tipc: Left network mode [ 90.340674][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 90.356926][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.366426][ T7728] Invalid argument reading file caps for ./file0 [ 90.381429][ T3425] hsr_slave_0: left promiscuous mode [ 90.395094][ T3425] hsr_slave_1: left promiscuous mode [ 90.420941][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.464643][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.492936][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.501210][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.515141][ T3425] veth1_macvtap: left promiscuous mode [ 90.540289][ T3425] veth0_macvtap: left promiscuous mode [ 90.546246][ T3425] veth1_vlan: left promiscuous mode [ 90.558245][ T3425] veth0_vlan: left promiscuous mode [ 90.669093][ T3425] team0 (unregistering): Port device team_slave_1 removed [ 90.689895][ T3425] team0 (unregistering): Port device team_slave_0 removed [ 90.778206][ T7660] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.803494][ T7770] SELinux: failed to load policy [ 90.818541][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.825674][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.849482][ T7660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.860595][ T7660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.873635][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.880725][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.931454][ T28] audit: type=1400 audit(2000000035.656:521): avc: denied { create } for pid=7783 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.973162][ T7660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.005917][ T28] audit: type=1400 audit(2000000035.686:522): avc: denied { write } for pid=7783 comm="syz.0.1753" path="socket:[18996]" dev="sockfs" ino=18996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.174941][ T7816] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 91.302621][ T7660] veth0_vlan: entered promiscuous mode [ 91.328717][ T7660] veth1_vlan: entered promiscuous mode [ 91.359037][ T7660] veth0_macvtap: entered promiscuous mode [ 91.399277][ T7660] veth1_macvtap: entered promiscuous mode [ 91.423951][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.457166][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.480697][ T7843] loop0: detected capacity change from 0 to 128 [ 91.494395][ T3425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.499406][ T7844] sctp: [Deprecated]: syz.5.1764 (pid 7844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.499406][ T7844] Use struct sctp_sack_info instead [ 91.517984][ T3425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.546696][ T3425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.556077][ T7843] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.568883][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.579849][ T7843] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.623330][ T28] audit: type=1400 audit(2000000036.346:523): avc: denied { mounton } for pid=7660 comm="syz-executor" path="/root/syzkaller.pckzlY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 91.683938][ T28] audit: type=1400 audit(2000000036.386:524): avc: denied { mount } for pid=7660 comm="syz-executor" name="/" dev="gadgetfs" ino=3904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.734725][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.829421][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.854410][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.857366][ T7863] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 91.867189][ T7863] syzkaller0: ignored: set checksum disabled [ 91.880624][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 91.890460][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 91.932060][ T7863] syzkaller0: tun_chr_ioctl cmd 35111 [ 91.987154][ T7864] infiniband syz2: set down [ 91.995190][ T3405] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.024574][ T7864] infiniband syz2: added ip6_vti0 [ 92.054877][ T7864] RDS/IB: syz2: added [ 92.074202][ T7864] smc: adding ib device syz2 with port count 1 [ 92.096295][ T7864] smc: ib device syz2 port 1 has no pnetid [ 92.121202][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.127951][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.195763][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.249308][ T7897] loop1: detected capacity change from 0 to 512 [ 92.267709][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.273103][ T7897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.298351][ T7897] EXT4-fs (loop1): 1 truncate cleaned up [ 92.312823][ T7897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.325354][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.367682][ T7901] loop3: detected capacity change from 0 to 512 [ 92.377676][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.385804][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.398150][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.431771][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.436087][ T7901] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1779: Unimplemented hash flags: 0x0001 [ 92.450062][ T7901] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1779: Corrupt directory, running e2fsck is recommended [ 92.463295][ T7901] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.1779: path /393/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 92.485176][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.570592][ T7907] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.584378][ T7908] netlink: 'syz.1.1781': attribute type 16 has an invalid length. [ 92.596160][ T7908] netlink: 'syz.1.1781': attribute type 17 has an invalid length. [ 92.636474][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.655266][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 92.670292][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.677487][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.716843][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 92.725453][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.736249][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.804055][ T7911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.812297][ T7911] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.822663][ T7911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.841104][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1785'. [ 92.842126][ T47] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.860026][ T47] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.887406][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.896500][ T47] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.051273][ T7932] netlink: 'syz.3.1791': attribute type 3 has an invalid length. [ 93.166554][ T7943] all (unregistering): Released all slaves [ 93.252501][ T7956] loop0: detected capacity change from 0 to 512 [ 93.307695][ T7956] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1801: bg 0: block 248: padding at end of block bitmap is not set [ 93.323238][ T7956] loop0: lost filesystem error report for type 5 error -117 [ 93.323637][ T7956] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1801: Failed to acquire dquot type 1 [ 93.330985][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 93.331008][ C1] EXT4-fs (loop0): last error at time 2000000038: ext4_validate_block_bitmap:441 [ 93.360211][ T7967] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 93.368235][ T7956] loop0: lost filesystem error report for type 5 error -117 [ 93.386509][ T7956] EXT4-fs (loop0): 1 truncate cleaned up [ 93.449133][ T7956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.482906][ T7956] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.496187][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 93.602073][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.715332][ T7988] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.839982][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 93.850103][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 94.099751][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 94.099766][ T28] audit: type=1326 audit(2000000038.826:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.6.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5cb6c799 code=0x7ffc0000 [ 94.158647][ T28] audit: type=1326 audit(2000000038.826:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.6.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f9b5cb6c799 code=0x7ffc0000 [ 94.182211][ T28] audit: type=1326 audit(2000000038.826:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.6.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5cb6c799 code=0x7ffc0000 [ 94.205792][ T28] audit: type=1326 audit(2000000038.826:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.6.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5cb6c799 code=0x7ffc0000 [ 94.230716][ T28] audit: type=1326 audit(2000000038.826:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.6.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5cb6c799 code=0x7ffc0000 [ 94.256372][ T28] audit: type=1326 audit(2000000038.826:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.6.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9b5cb6c799 code=0x7ffc0000 [ 94.280001][ T28] audit: type=1326 audit(2000000038.826:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.6.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9b5cb6c799 code=0x7ffc0000 [ 94.329785][ T28] audit: type=1326 audit(2000000038.886:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afd5dc799 code=0x7ffc0000 [ 94.355291][ T28] audit: type=1326 audit(2000000038.886:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afd5dc799 code=0x7ffc0000 [ 94.379192][ T28] audit: type=1326 audit(2000000038.886:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.1.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afd5dc799 code=0x7ffc0000 [ 94.429979][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1829'. [ 94.456939][ T8032] netlink: 'syz.6.1829': attribute type 29 has an invalid length. [ 94.530601][ T8037] loop1: detected capacity change from 0 to 1024 [ 94.547559][ T8037] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.563417][ T8046] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 94.571758][ T8037] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 94.582488][ T8037] EXT4-fs (loop1): invalid journal inode [ 94.588230][ T8037] EXT4-fs (loop1): can't get journal size [ 94.595403][ T8037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.622483][ T8053] ipvlan2: entered promiscuous mode [ 94.630431][ T8053] ipvlan2: entered allmulticast mode [ 94.630586][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.636312][ T8053] gretap0: entered allmulticast mode [ 94.676850][ T8053] team0: Device ipvlan2 failed to register rx_handler [ 94.988355][ T8111] unsupported nla_type 210 [ 95.141023][ T8143] ip6_vti0 speed is unknown, defaulting to 1000 [ 95.450179][ T8213] netlink: 'syz.0.1868': attribute type 4 has an invalid length. [ 95.568420][ T8221] netlink: 'syz.6.1874': attribute type 21 has an invalid length. [ 95.585520][ T8221] __nla_validate_parse: 1 callbacks suppressed [ 95.585537][ T8221] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1874'. [ 95.917134][ T8241] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.096043][ T8248] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.167926][ T8254] loop0: detected capacity change from 0 to 512 [ 96.182154][ T8254] EXT4-fs (loop0): 1 truncate cleaned up [ 96.204888][ T8254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.231781][ T8254] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1885: invalid indirect mapped block 4294901760 (level 0) [ 96.270675][ T8254] EXT4-fs (loop0): Remounting filesystem read-only [ 96.300880][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.398966][ T8272] loop0: detected capacity change from 0 to 2048 [ 96.405622][ T8272] EXT4-fs: Ignoring removed i_version option [ 96.432699][ T8275] syzkaller1: entered promiscuous mode [ 96.438852][ T8275] syzkaller1: entered allmulticast mode [ 96.450773][ T8272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.464455][ T8272] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.547882][ T8290] ip6_vti0 speed is unknown, defaulting to 1000 [ 96.596756][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.861301][ T8313] loop1: detected capacity change from 0 to 256 [ 96.891523][ T8313] SELinux: failed to load policy [ 97.160608][ T8336] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 97.228195][ T8347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.238594][ T8347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.424386][ T8357] pimreg: entered allmulticast mode [ 97.433593][ T8357] pimreg: left allmulticast mode [ 98.242994][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 98.282277][ T8412] bond1: Invalid ad_actor_system MAC address. [ 98.299368][ T8412] bond1: option ad_actor_system: invalid value (4294967295) [ 98.326302][ T8412] bond1 (unregistering): Released all slaves [ 98.339412][ T8417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.460264][ T8417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.562698][ T8417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.631654][ T8417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.713720][ T8191] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.730273][ T8191] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.760433][ T8191] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.787956][ T8191] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.994005][ T8443] loop3: detected capacity change from 0 to 128 [ 99.026456][ T8443] EXT4-fs: Ignoring removed nobh option [ 99.050259][ T8443] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.105470][ T8443] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.137214][ T8447] netlink: 'syz.6.1963': attribute type 29 has an invalid length. [ 99.179310][ T8447] netlink: 'syz.6.1963': attribute type 29 has an invalid length. [ 99.188582][ T8447] netlink: 'syz.6.1963': attribute type 29 has an invalid length. [ 99.197739][ T8447] netlink: 'syz.6.1963': attribute type 29 has an invalid length. [ 99.251290][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 99.251311][ T28] audit: type=1400 audit(2000000043.976:682): avc: denied { watch } for pid=8442 comm="syz.3.1962" path="/432/mnt" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.336947][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.538853][ T8463] loop1: detected capacity change from 0 to 128 [ 99.624837][ T28] audit: type=1326 audit(2000000044.346:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.662965][ T28] audit: type=1326 audit(2000000044.346:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.719493][ T28] audit: type=1326 audit(2000000044.346:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.756517][ T28] audit: type=1326 audit(2000000044.346:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.758030][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 99.780324][ T28] audit: type=1326 audit(2000000044.376:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.812659][ T28] audit: type=1326 audit(2000000044.376:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.837608][ T28] audit: type=1326 audit(2000000044.446:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.861552][ T8477] team0: Port device team_slave_0 removed [ 99.863122][ T28] audit: type=1326 audit(2000000044.446:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.891925][ T28] audit: type=1326 audit(2000000044.446:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.5.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2140bdc799 code=0x7ffc0000 [ 99.981996][ T8487] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.014812][ T8494] netlink: 'syz.5.1981': attribute type 16 has an invalid length. [ 100.025961][ T8493] loop1: detected capacity change from 0 to 512 [ 100.032914][ T8494] netlink: 'syz.5.1981': attribute type 17 has an invalid length. [ 100.053265][ T8493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.086349][ T8493] EXT4-fs (loop1): 1 truncate cleaned up [ 100.100492][ T8493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.130288][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.137653][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.240761][ T8506] Invalid argument reading file caps for ./file0 [ 100.306929][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.318523][ T8494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.351960][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.384619][ T8513] loop6: detected capacity change from 0 to 164 [ 100.413699][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.437032][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.437053][ T8513] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 100.472378][ T8513] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 100.486897][ T8497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.502431][ T8513] Symlink component flag not implemented [ 100.508516][ T8513] Symlink component flag not implemented [ 100.514789][ T8513] Symlink component flag not implemented (7) [ 100.534450][ T8513] Symlink component flag not implemented (116) [ 100.545730][ T3425] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.555042][ T3425] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.568707][ T3391] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.581201][ T3425] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.595271][ T3391] syz2: Port: 1 Link ACTIVE [ 100.600064][ T3425] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.634133][ T3391] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.651259][ T8520] loop1: detected capacity change from 0 to 1024 [ 100.686290][ T8520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.767140][ T8529] loop6: detected capacity change from 0 to 128 [ 100.777846][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.872909][ T8537] random: crng reseeded on system resumption [ 101.001920][ T8554] loop3: detected capacity change from 0 to 512 [ 101.039385][ T8554] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.072846][ T8554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.103779][ T8554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.116889][ T8562] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 101.118067][ T8554] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.177351][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2017'. [ 101.187988][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2017'. [ 101.209559][ T8573] netlink: 'syz.1.2018': attribute type 3 has an invalid length. [ 101.248746][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.308587][ T8580] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2023'. [ 101.393977][ T8585] loop3: detected capacity change from 0 to 8192 [ 101.467187][ T8593] SET target dimension over the limit! [ 101.659017][ T8618] loop0: detected capacity change from 0 to 256 [ 101.684861][ T8618] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.707233][ T8614] loop6: detected capacity change from 0 to 8192 [ 101.746583][ T8624] batadv_slave_1: entered promiscuous mode [ 101.756280][ T8622] loop1: detected capacity change from 0 to 764 [ 101.797549][ T8623] batadv_slave_1: left promiscuous mode [ 101.878537][ T8629] loop1: detected capacity change from 0 to 512 [ 101.943851][ T8191] ================================================================== [ 101.951987][ T8191] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 101.959304][ T8191] [ 101.961628][ T8191] write to 0xffff88813b9600f0 of 4 bytes by task 8199 on cpu 1: [ 101.969252][ T8191] touch_atime+0x1d7/0x330 [ 101.973681][ T8191] shmem_file_read_iter+0x477/0x540 [ 101.978984][ T8191] lo_rw_aio+0x67d/0x730 [ 101.983245][ T8191] loop_process_work+0x56c/0xac0 [ 101.988198][ T8191] loop_workfn+0x31/0x40 [ 101.992498][ T8191] process_scheduled_works+0x513/0xa10 [ 101.997962][ T8191] worker_thread+0x58a/0x780 [ 102.002581][ T8191] kthread+0x22a/0x280 [ 102.006723][ T8191] ret_from_fork+0x150/0x360 [ 102.011326][ T8191] ret_from_fork_asm+0x1a/0x30 [ 102.016275][ T8191] [ 102.018592][ T8191] read to 0xffff88813b9600f0 of 4 bytes by task 8191 on cpu 0: [ 102.026124][ T8191] atime_needs_update+0x25f/0x3e0 [ 102.031169][ T8191] touch_atime+0x4a/0x330 [ 102.035507][ T8191] shmem_file_read_iter+0x477/0x540 [ 102.040725][ T8191] lo_rw_aio+0x67d/0x730 [ 102.044985][ T8191] loop_process_work+0x56c/0xac0 [ 102.049930][ T8191] loop_rootcg_workfn+0x22/0x30 [ 102.054787][ T8191] process_scheduled_works+0x513/0xa10 [ 102.060432][ T8191] worker_thread+0x58a/0x780 [ 102.065062][ T8191] kthread+0x22a/0x280 [ 102.069142][ T8191] ret_from_fork+0x150/0x360 [ 102.073746][ T8191] ret_from_fork_asm+0x1a/0x30 [ 102.078516][ T8191] [ 102.080834][ T8191] value changed: 0x27c06500 -> 0x27fc94b9 [ 102.086534][ T8191] [ 102.088842][ T8191] Reported by Kernel Concurrency Sanitizer on: [ 102.094986][ T8191] CPU: 0 UID: 0 PID: 8191 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 102.104434][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.114567][ T8191] Workqueue: loop1 loop_rootcg_workfn [ 102.119947][ T8191] ================================================================== [ 102.216226][ T8629] EXT4-fs (loop1): 1 orphan inode deleted [ 102.222819][ T8629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.236003][ T3425] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 102.247450][ T8629] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.273753][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.