last executing test programs: 6m32.762890763s ago: executing program 32 (id=1432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8925, 0x0) 4m24.519465433s ago: executing program 33 (id=2168): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 4m24.519446803s ago: executing program 34 (id=2163): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, &(0x7f0000002540)="0e", 0x1}]) 4m24.519366073s ago: executing program 35 (id=2179): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000400) inotify_init() pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4m24.519326673s ago: executing program 36 (id=2180): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x0, 0x0}, 0x10) 3m57.072648596s ago: executing program 37 (id=2370): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) 3m37.536265604s ago: executing program 0 (id=2992): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000003cc0)=""/4128, 0x1020) 3m37.477974916s ago: executing program 0 (id=2995): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m37.314180951s ago: executing program 0 (id=2999): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b8aca04}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x4040) 3m37.059946008s ago: executing program 0 (id=3004): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0x3) 3m36.628329319s ago: executing program 0 (id=3014): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 3m36.559191161s ago: executing program 0 (id=3015): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 3m21.528670368s ago: executing program 38 (id=3015): r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 1m6.447674963s ago: executing program 8 (id=7730): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) unshare(0x22020600) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 1m6.231572678s ago: executing program 8 (id=7737): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f00000000c0)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240ca1fce3ee804892565862580967cec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x401) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m6.16200229s ago: executing program 8 (id=7741): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x143, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1m6.106377142s ago: executing program 8 (id=7742): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 1m6.034233194s ago: executing program 8 (id=7743): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f00004f9000/0x1000)=nil, &(0x7f0000295000/0x1000)=nil, &(0x7f0000196000/0x1000)=nil, &(0x7f000045a000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00009ff000/0x4000)=nil, &(0x7f0000f90000/0x4000)=nil, &(0x7f00006e8000/0x3000)=nil, &(0x7f0000933000/0x1000)=nil, &(0x7f0000fe1000/0x1000)=nil, &(0x7f0000000000)="d946ccd0a13d627979e9ec68715944a9cf54c5736384cffd032735019b419291b954eb7f9fb6a7cf6cfb58fd8bf690aed38e42fa7c0e29149b189b0b7d87f66bc5b294a757b8369fb58236438a3e468428e816243acbe273a19634a81c6221155f438be85e4308a3a4ce79233f1348d9f150b652ee20a0379ef556d84e72b525a0b68762", 0x84}, 0x68) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1m5.582935036s ago: executing program 8 (id=7764): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 1m5.582747896s ago: executing program 39 (id=7764): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 50.175285963s ago: executing program 9 (id=8211): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) 50.050209287s ago: executing program 9 (id=8216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x24008845}, 0x0) 50.024021647s ago: executing program 9 (id=8217): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) 49.998723588s ago: executing program 9 (id=8218): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f0001"], 0x44}}, 0x0) 49.90508778s ago: executing program 9 (id=8222): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x101}}, {@stripe={'stripe', 0x3d, 0x61}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@minixdf}, {@nodiscard}, {@nomblk_io_submit}, {@acl}, {@nojournal_checksum}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x2000000, @desc1}}) 49.794742803s ago: executing program 9 (id=8224): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 34.313665882s ago: executing program 40 (id=8224): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 19.430243855s ago: executing program 6 (id=8587): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 19.388050176s ago: executing program 6 (id=8589): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) unshare(0x22020600) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 19.333724597s ago: executing program 6 (id=8590): write$selinux_load(0xffffffffffffffff, 0x0, 0x65) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1000006, 0x8c510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x60005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 19.23316325s ago: executing program 6 (id=8592): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000000)="a83deda2", 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 19.198332491s ago: executing program 6 (id=8593): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe000200d}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x10000000) 14.962310826s ago: executing program 6 (id=8706): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x73eb}) 14.962239006s ago: executing program 41 (id=8706): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x73eb}) 10.926006035s ago: executing program 4 (id=8781): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafa, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00'], 0x60}, 0x1, 0x0, 0x0, 0xd4}, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 10.824085368s ago: executing program 4 (id=8782): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90224fc600b0002400c0004", 0x1b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 10.73422503s ago: executing program 4 (id=8784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) 10.718267671s ago: executing program 4 (id=8785): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 10.660637792s ago: executing program 4 (id=8786): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x28, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x80000000004, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e48864"], 0xfdef) 10.117578657s ago: executing program 4 (id=8800): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) 10.078967438s ago: executing program 42 (id=8800): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) 4.051488251s ago: executing program 1 (id=8961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440088c4) 3.860242836s ago: executing program 1 (id=8963): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.520062175s ago: executing program 1 (id=8968): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4) 3.292570211s ago: executing program 1 (id=8971): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000003c0)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001900)) 3.184415334s ago: executing program 1 (id=8972): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.298749095s ago: executing program 7 (id=9017): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x11) 1.198081628s ago: executing program 7 (id=9019): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x80000000, 0xfffffffc, 0x5b50, 0xffffffff, 0xfffc}) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) 1.176580599s ago: executing program 2 (id=9022): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x7, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000004c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 1.13321628s ago: executing program 7 (id=9024): r0 = inotify_init() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.076658232s ago: executing program 5 (id=9027): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x0, 0x8, 0x4d7, 0x3, 0x4}, &(0x7f0000000080)=0x14) 992.509814ms ago: executing program 7 (id=9029): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) socket(0x2, 0xa, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 930.252025ms ago: executing program 5 (id=9030): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) 930.091465ms ago: executing program 7 (id=9031): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) flistxattr(r0, &(0x7f0000000180)=""/190, 0xbe) 899.100286ms ago: executing program 5 (id=9032): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b90800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 862.810967ms ago: executing program 5 (id=9033): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001400010000000000fbdbdf25e0000001000000000000000000000000000000000000000000000000000000010000008000070000", @ANYRESHEX=r1], 0x5c}}, 0x5018) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='4', 0xff1a}], 0x1) 790.221339ms ago: executing program 5 (id=9035): socket$kcm(0x2, 0x1, 0x84) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 657.496033ms ago: executing program 3 (id=9036): r0 = io_uring_setup(0x650d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000002) close_range(r0, 0xffffffffffffffff, 0x0) 577.327155ms ago: executing program 5 (id=9037): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000700)={0x0, 0x7, 0x9}, 0x8) 498.856527ms ago: executing program 3 (id=9038): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330281ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 447.879998ms ago: executing program 3 (id=9039): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000900)=ANY=[], 0x26, 0x800, &(0x7f0000002000)="$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") setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 284.126973ms ago: executing program 2 (id=9040): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0x4, 0xa, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x9}, 0x6328, 0x2, 0x78, 0x2, 0xfcbd, 0x7, 0x8, 0x0, 0xcbe, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 261.065954ms ago: executing program 2 (id=9041): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close(0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 245.542284ms ago: executing program 3 (id=9042): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x3, 0xfffffffc}) 199.831965ms ago: executing program 2 (id=9043): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x109900, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 151.817646ms ago: executing program 2 (id=9044): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x6}, {0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x5, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 151.699566ms ago: executing program 1 (id=9045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 151.500136ms ago: executing program 3 (id=9046): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x1, 0x0, 0x404042bbe) 140.668487ms ago: executing program 2 (id=9047): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 10.291441ms ago: executing program 7 (id=9048): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) 0s ago: executing program 3 (id=9049): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) kernel console output (not intermixed with test programs): '. [ 407.772545][T22068] program syz.9.7549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.640351][T22134] netlink: 'syz.2.7564': attribute type 21 has an invalid length. [ 408.656020][T22134] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.674920][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7564'. [ 408.725462][ T28] audit: type=1400 audit(2000000007.579:24226): avc: denied { name_bind } for pid=22139 comm="syz.2.7567" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 409.082857][ T28] audit: type=1326 audit(2000000007.929:24227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.120886][ T28] audit: type=1326 audit(2000000007.929:24229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.144795][ T28] audit: type=1326 audit(2000000007.929:24230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.196229][T22186] netlink: 'syz.8.7590': attribute type 1 has an invalid length. [ 409.212099][ T28] audit: type=1326 audit(2000000007.929:24228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.242279][ T28] audit: type=1326 audit(2000000007.959:24231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.306026][ T28] audit: type=1326 audit(2000000007.959:24232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.364489][ T28] audit: type=1326 audit(2000000007.959:24233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.398220][ T28] audit: type=1326 audit(2000000007.959:24234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22176 comm="syz.2.7586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 409.479199][T22212] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7602'. [ 409.661862][T22206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.684757][T22206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.799864][T22243] loop9: detected capacity change from 0 to 512 [ 409.812440][T22243] EXT4-fs: Ignoring removed nobh option [ 409.830902][T22243] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 409.851251][T22243] EXT4-fs (loop9): 1 truncate cleaned up [ 409.857810][T22243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.895915][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.144795][T22289] netlink: 22 bytes leftover after parsing attributes in process `syz.9.7638'. [ 410.214651][T22299] loop9: detected capacity change from 0 to 512 [ 410.228894][T22299] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 410.247997][T22299] EXT4-fs (loop9): 1 truncate cleaned up [ 410.261533][T22299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.313283][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.350164][T22318] loop2: detected capacity change from 0 to 512 [ 410.370779][T22318] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.7652: inode has both inline data and extents flags [ 410.386312][T22318] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 410.386426][T22318] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.7652: couldn't read orphan inode 15 (err -117) [ 410.395704][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 410.395732][ C0] EXT4-fs (loop2): initial error at time 2000000009: ext4_orphan_get:1397: inode 15 [ 410.395771][ C0] EXT4-fs (loop2): last error at time 2000000009: ext4_orphan_get:1397: inode 15 [ 410.435551][T22318] loop2: lost filesystem error report for type 5 error -117 [ 410.440046][T22318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.509323][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.013326][T22392] netlink: 340 bytes leftover after parsing attributes in process `syz.6.7683'. [ 411.040122][T22394] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7684'. [ 411.133551][T22402] loop2: detected capacity change from 0 to 2048 [ 411.197504][T22402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.210007][T22402] ext4 filesystem being mounted at /871/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.231083][T22402] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.7688: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 411.251384][T22418] loop8: detected capacity change from 0 to 2048 [ 411.260406][T22418] EXT4-fs: Ignoring removed oldalloc option [ 411.276415][T22418] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 411.285696][T22418] System zones: [ 411.286527][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.299123][T22418] 0-7 [ 411.302405][T22418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.344918][T22418] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.7695: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 411.405990][T22418] EXT4-fs (loop8): Remounting filesystem read-only [ 411.440746][T14793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.491123][T22452] loop2: detected capacity change from 0 to 256 [ 411.512615][T22454] team0: No ports can be present during mode change [ 411.538549][T22452] FAT-fs (loop2): Directory bread(block 64) failed [ 411.558700][T22452] FAT-fs (loop2): Directory bread(block 65) failed [ 411.577899][T22452] FAT-fs (loop2): Directory bread(block 66) failed [ 411.586014][T22452] FAT-fs (loop2): Directory bread(block 67) failed [ 411.592940][T22452] FAT-fs (loop2): Directory bread(block 68) failed [ 411.600564][T22452] FAT-fs (loop2): Directory bread(block 69) failed [ 411.626534][T22452] FAT-fs (loop2): Directory bread(block 70) failed [ 411.646735][T22452] FAT-fs (loop2): Directory bread(block 71) failed [ 411.664491][T22452] FAT-fs (loop2): Directory bread(block 72) failed [ 411.684152][T22452] FAT-fs (loop2): Directory bread(block 73) failed [ 411.699874][T22467] program syz.9.7716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.867944][T22487] netlink: 'syz.8.7724': attribute type 19 has an invalid length. [ 411.876172][T22487] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7724'. [ 411.927555][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 411.927571][ T28] audit: type=1400 audit(2000000266.784:24250): avc: denied { execute } for pid=22488 comm="syz.8.7725" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=65737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 411.994492][T22493] loop8: detected capacity change from 0 to 512 [ 412.011645][T22493] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 412.046105][T22493] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 412.056974][T22493] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 412.066477][T22493] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.7727: Failed to acquire dquot type 1 [ 412.078013][T22493] loop8: lost filesystem error report for type 5 error -5 [ 412.079107][T22493] EXT4-fs (loop8): 1 truncate cleaned up [ 412.086287][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 412.086304][ C1] EXT4-fs (loop8): last error at time 2000000266: ext4_acquire_dquot:7034 [ 412.107967][T22493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 412.130406][T22493] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 412.130405][ T28] audit: type=1400 audit(2000000266.984:24251): avc: denied { create } for pid=22492 comm="syz.8.7727" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 412.168672][T22493] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 412.199231][T22493] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.7727: Failed to acquire dquot type 1 [ 412.241269][T14793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 412.278150][T22503] loop8: detected capacity change from 0 to 256 [ 412.305002][T22503] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 412.469394][ T28] audit: type=1400 audit(2000000267.324:24252): avc: denied { append } for pid=22517 comm="syz.8.7737" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 412.493334][T22518] program syz.8.7737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.553815][T22526] sctp: [Deprecated]: syz.8.7741 (pid 22526) Use of int in max_burst socket option. [ 412.553815][T22526] Use struct sctp_assoc_value instead [ 412.836752][ T28] audit: type=1400 audit(2000000267.694:24253): avc: denied { getopt } for pid=22550 comm="syz.9.7753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 413.024667][ T28] audit: type=1400 audit(2000000267.884:24254): avc: denied { shutdown } for pid=22571 comm="syz.2.7763" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.093965][ T3439] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.129085][ T28] audit: type=1400 audit(2000000267.984:24255): avc: denied { mounton } for pid=22576 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 413.159622][T22580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7767'. [ 413.169420][T22580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7767'. [ 413.179467][ T3439] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.247765][T22588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7769'. [ 413.249026][ T3439] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.326436][ T3439] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.471316][ T3439] bridge_slave_1: left promiscuous mode [ 413.490080][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.518442][ T3439] bridge_slave_0: left allmulticast mode [ 413.536223][ T3439] bridge_slave_0: left promiscuous mode [ 413.544468][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.673759][ T3439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.703280][ T3439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.722496][ T3439] bond0 (unregistering): Released all slaves [ 413.777917][ T3439] tipc: Disabling bearer [ 413.791921][ T3439] tipc: Left network mode [ 413.844138][ T3439] hsr_slave_0: left promiscuous mode [ 413.861713][ T3439] hsr_slave_1: left promiscuous mode [ 413.873190][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.895933][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.919256][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.938722][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.962414][ T3439] veth1_macvtap: left promiscuous mode [ 413.971181][ T3439] veth0_macvtap: left promiscuous mode [ 413.979948][ T3439] veth1_vlan: left promiscuous mode [ 413.994322][ T3439] veth0_vlan: left promiscuous mode [ 414.005685][T22657] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 414.102918][ T3439] team0 (unregistering): Port device team_slave_1 removed [ 414.121491][ T3439] team0 (unregistering): Port device team_slave_0 removed [ 414.183794][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 414.231457][T22576] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.257926][T22576] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.273584][T22576] bridge_slave_0: entered allmulticast mode [ 414.283685][T22576] bridge_slave_0: entered promiscuous mode [ 414.295418][T22576] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.302713][T22576] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.310377][T22576] bridge_slave_1: entered allmulticast mode [ 414.318329][T22576] bridge_slave_1: entered promiscuous mode [ 414.345907][T22576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.366338][T22576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.393307][T22576] team0: Port device team_slave_0 added [ 414.403869][T22576] team0: Port device team_slave_1 added [ 414.432173][T22576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.441179][T22576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.472127][T22576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.494948][T22576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.530775][T22576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.561758][T22576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.604311][T22576] hsr_slave_0: entered promiscuous mode [ 414.620983][T22576] hsr_slave_1: entered promiscuous mode [ 414.630474][T22576] debugfs: 'hsr0' already exists in 'hsr' [ 414.638163][T22576] Cannot create hsr debugfs directory [ 414.645374][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 414.856012][T22711] sock: sock_set_timeout: `syz.6.7804' (pid 22711) tries to set negative timeout [ 414.896576][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 414.930511][T22718] 9p: Bad value for 'rfdno' [ 414.939370][T22576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 414.953203][T22576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.961719][T22576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 414.978247][T22576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.986863][T22576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.000592][T22576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.012372][T22576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.044648][T22576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.094930][T22576] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.102083][T22576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.109537][T22576] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.116638][T22576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.194480][T22576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.208044][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.238035][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.274575][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 415.307170][T22751] netlink: 'syz.6.7812': attribute type 12 has an invalid length. [ 415.316181][T22751] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7812'. [ 415.341118][T22576] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.358923][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.366046][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.389094][T22576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.409183][T22576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.423627][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.430904][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.664440][T22576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.839441][T22576] veth0_vlan: entered promiscuous mode [ 415.861018][T22576] veth1_vlan: entered promiscuous mode [ 415.899431][T22576] veth0_macvtap: entered promiscuous mode [ 415.929329][T22576] veth1_macvtap: entered promiscuous mode [ 415.944289][T22837] batman_adv: batadv0: Adding interface: dummy0 [ 415.951366][T22837] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.983168][T22837] batman_adv: batadv0: Interface activated: dummy0 [ 415.997963][T22576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.008903][T22576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.034103][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.055179][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.081369][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.106459][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.266779][T22872] loop3: detected capacity change from 0 to 164 [ 416.290823][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7838'. [ 416.307287][T22872] Unsupported NM flag settings (240) [ 417.131168][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7875'. [ 417.137834][T23017] loop3: detected capacity change from 0 to 128 [ 417.152788][T23018] tipc: New replicast peer: 255.255.255.255 [ 417.169597][T23018] tipc: Enabled bearer , priority 10 [ 417.169741][T23017] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 417.203417][T23017] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.252423][T22576] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.350617][T23033] program syz.3.7878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.351562][T23036] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.7881'. [ 417.454843][T23048] loop3: detected capacity change from 0 to 512 [ 417.508768][T23048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 417.524561][T23048] System zones: 0-2, 18-18, 34-34 [ 417.550081][T23048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7884: bg 0: block 248: padding at end of block bitmap is not set [ 417.608523][T23048] loop3: lost filesystem error report for type 5 error -117 [ 417.610383][T23048] __quota_error: 6 callbacks suppressed [ 417.610396][T23048] Quota error (device loop3): write_blk: dquota write failed [ 417.617793][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 417.617815][ C1] EXT4-fs (loop3): last error at time 2000000272: ext4_validate_block_bitmap:441 [ 417.646791][T23048] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 417.656878][T23048] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.7884: Failed to acquire dquot type 1 [ 417.668321][T23048] loop3: lost filesystem error report for type 5 error -117 [ 417.688777][T23076] loop2: detected capacity change from 0 to 512 [ 417.703027][T23048] EXT4-fs (loop3): 1 truncate cleaned up [ 417.714500][T23048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.734375][T23048] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.748296][T23076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.766244][T23076] ext4 filesystem being mounted at /908/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.827474][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.852842][ T6708] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 417.885464][ T6708] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 417.924604][ T6708] loop3: lost filesystem error report for type 5 error -117 [ 417.925597][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.968369][ T28] audit: type=1400 audit(2000000272.824:24262): avc: denied { lock } for pid=23099 comm="syz.2.7898" path="socket:[67123]" dev="sockfs" ino=67123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 418.030843][ T28] audit: type=1400 audit(2000000272.884:24263): avc: denied { mounton } for pid=23103 comm="syz.2.7899" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 418.269744][T23125] loop3: detected capacity change from 0 to 2048 [ 418.299156][T23136] loop2: detected capacity change from 0 to 128 [ 418.316810][T23125] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 418.348369][T23125] System zones: 0-7 [ 418.373209][T23125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.413659][T23142] loop2: detected capacity change from 0 to 128 [ 418.455118][T23125] EXT4-fs error (device loop3): ext4_ext_precache:631: inode #2: comm syz.3.7905: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 418.494328][T23125] EXT4-fs (loop3): Remounting filesystem read-only [ 418.515876][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.527693][T23148] loop2: detected capacity change from 0 to 512 [ 418.555949][T23148] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7911: bg 0: block 393: padding at end of block bitmap is not set [ 418.613343][T23148] loop2: lost filesystem error report for type 5 error -117 [ 418.613999][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 418.627775][ C1] EXT4-fs (loop2): initial error at time 2000000273: ext4_validate_block_bitmap:441 [ 418.636746][T23148] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 418.637211][ C1] EXT4-fs (loop2): last error at time 2000000273: ext4_validate_block_bitmap:441 [ 418.670977][T23148] loop2: lost filesystem error report for type 5 error -117 [ 418.671178][T23148] EXT4-fs (loop2): 2 truncates cleaned up [ 418.734984][T23148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.880349][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.003060][T23189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7923'. [ 419.333625][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7937'. [ 419.404525][T23224] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 419.926543][T23274] program syz.9.7963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.023914][T23289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=23289 comm=syz.1.7968 [ 420.127133][ T28] audit: type=1400 audit(2000000274.984:24264): avc: denied { create } for pid=23299 comm="syz.2.7973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 420.182177][ T28] audit: type=1400 audit(2000000275.014:24265): avc: denied { write } for pid=23299 comm="syz.2.7973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 420.222622][T23309] loop3: detected capacity change from 0 to 256 [ 420.239826][ T28] audit: type=1400 audit(2000000275.044:24266): avc: denied { listen } for pid=23299 comm="syz.2.7973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 420.416346][ T28] audit: type=1400 audit(2000000275.274:24267): avc: denied { read } for pid=23336 comm="syz.1.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.547664][T23347] veth0: entered promiscuous mode [ 420.573263][T23346] veth0: left promiscuous mode [ 421.412944][T23361] loop9: detected capacity change from 0 to 512 [ 421.442433][T23361] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 421.454838][T23361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 421.463465][T23361] System zones: 0-1, 15-15, 18-18, 34-34 [ 421.469914][T23361] EXT4-fs (loop9): orphan cleanup on readonly fs [ 421.476888][T23361] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 421.490329][T23361] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 421.504949][T23361] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 421.513706][T23361] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.7999: bad orphan inode 16 [ 421.534103][T23361] loop9: lost filesystem error report for type 5 error -117 [ 421.534248][T23361] ext4_test_bit(bit=15, block=18) = 1 [ 421.547031][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 421.547049][ C1] EXT4-fs (loop9): initial error at time 2000000276: ext4_orphan_get:1423 [ 421.547068][ C1] EXT4-fs (loop9): last error at time 2000000276: ext4_orphan_get:1423 [ 421.570456][T23361] is_bad_inode(inode)=0 [ 421.575083][T23361] NEXT_ORPHAN(inode)=0 [ 421.579416][T23361] max_ino=32 [ 421.583399][T23361] i_nlink=2 [ 421.587275][T23361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.603452][T23361] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 421.642398][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.120582][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8024'. [ 422.597134][T23455] netlink: 'syz.2.8043': attribute type 27 has an invalid length. [ 422.744788][T23455] batman_adv: batadv0: Interface deactivated: dummy0 [ 422.833571][T23455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.856336][T23455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.897049][T23455] tipc: Resetting bearer [ 422.916505][T23455] macvlan0: left promiscuous mode [ 422.957369][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.976765][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.003275][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.026883][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.041554][T23466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8048'. [ 423.265160][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8056'. [ 423.337968][T23495] tap0: tun_chr_ioctl cmd 1074812118 [ 423.579137][T23511] loop2: detected capacity change from 0 to 2048 [ 423.589943][T23513] bridge0: port 3(ipvlan0) entered blocking state [ 423.604796][T23513] bridge0: port 3(ipvlan0) entered disabled state [ 423.621850][T23513] ipvlan0: entered allmulticast mode [ 423.632689][T23511] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 423.653193][T23513] veth0_vlan: entered allmulticast mode [ 423.660404][T23511] System zones: 0-7 [ 423.669745][T23513] ipvlan0: left allmulticast mode [ 423.677925][T23511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.699125][T23513] veth0_vlan: left allmulticast mode [ 423.727056][T23511] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #2: comm syz.2.8065: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 423.798492][T23511] EXT4-fs (loop2): Remounting filesystem read-only [ 423.824506][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.036355][T23548] loop2: detected capacity change from 0 to 512 [ 424.065171][T23548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.261946][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.536512][T23573] loop3: detected capacity change from 0 to 512 [ 424.556057][T23573] EXT4-fs: Ignoring removed bh option [ 424.592609][T23573] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 424.609526][T23573] EXT4-fs (loop3): 1 truncate cleaned up [ 424.616125][T23573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.631467][T23573] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8092: bg 0: block 465: padding at end of block bitmap is not set [ 424.647320][T23573] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 424.662300][T23573] EXT4-fs (loop3): This should not happen!! Data will be lost [ 424.662300][T23573] [ 424.930522][T23588] 9p: Bad value for 'rfdno' [ 425.373921][ T1257] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 425.398841][ T1257] EXT4-fs (loop3): This should not happen!! Data will be lost [ 425.398841][ T1257] [ 425.407830][T23594] netlink: 748 bytes leftover after parsing attributes in process `syz.1.8101'. [ 425.420057][ T1257] EXT4-fs (loop3): Total free blocks count 0 [ 425.431934][ T1257] EXT4-fs (loop3): Free/Dirty block details [ 425.450482][ T1257] EXT4-fs (loop3): free_blocks=0 [ 425.456530][ T1257] EXT4-fs (loop3): dirty_blocks=1 [ 425.465705][ T1257] EXT4-fs (loop3): Block reservation details [ 425.478945][T22576] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 425.503279][T23608] netlink: 'syz.2.8107': attribute type 1 has an invalid length. [ 425.561139][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 425.561153][ T28] audit: type=1400 audit(2000000280.414:24275): avc: denied { mount } for pid=23615 comm="syz.9.8110" name="/" dev="autofs" ino=68870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 425.656153][T23626] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 425.702243][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8118'. [ 425.878759][T23650] loop9: detected capacity change from 0 to 512 [ 425.917496][T23650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.955789][T23660] cgroup: Unknown subsys name 'cpuset' [ 425.957300][T23650] ext4 filesystem being mounted at /1146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.987415][ T28] audit: type=1400 audit(2000000280.834:24276): avc: denied { lock } for pid=23648 comm="syz.9.8126" path="/1146/bus/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 426.016792][ T28] audit: type=1400 audit(2000000280.844:24277): avc: denied { remove_name } for pid=23648 comm="syz.9.8126" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.041573][ T28] audit: type=1400 audit(2000000280.844:24278): avc: denied { unlink } for pid=23648 comm="syz.9.8126" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 426.069815][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.146443][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8142'. [ 426.159771][T23682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8142'. [ 426.195725][T23686] loop3: detected capacity change from 0 to 128 [ 426.746360][T23725] loop2: detected capacity change from 0 to 512 [ 426.764642][T23725] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8159: inode has both inline data and extents flags [ 426.807730][T23725] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 426.808093][T23725] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8159: couldn't read orphan inode 15 (err -117) [ 426.817401][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 426.817417][ C0] EXT4-fs (loop2): initial error at time 2000000281: ext4_orphan_get:1397: inode 15 [ 426.817447][ C0] EXT4-fs (loop2): last error at time 2000000281: ext4_orphan_get:1397: inode 15 [ 426.944801][T23725] loop2: lost filesystem error report for type 5 error -117 [ 426.958083][T23725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.026201][T23742] netlink: 'syz.6.8168': attribute type 27 has an invalid length. [ 427.123002][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8169'. [ 427.142915][T23744] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8169'. [ 427.171322][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.202174][T23742] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.209608][T23742] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.330539][T23742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.350714][T23742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.366759][T23763] loop9: detected capacity change from 0 to 1024 [ 427.383795][T23763] EXT4-fs: Ignoring removed nobh option [ 427.393274][T23742] ip6erspan0: left allmulticast mode [ 427.399063][T23763] EXT4-fs: Ignoring removed i_version option [ 427.417746][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8169'. [ 427.437882][ T12] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.450066][T23763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.466989][ T12] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.520442][ T12] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.529002][ T12] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.562155][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.571335][T23785] loop3: detected capacity change from 0 to 2048 [ 427.580122][T23786] loop2: detected capacity change from 0 to 1024 [ 427.599662][T23785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.618205][T23786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.635671][T23785] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.710201][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.736459][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.773754][T23815] netlink: 'syz.3.8186': attribute type 27 has an invalid length. [ 427.830757][T23815] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.837984][T23815] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.899193][T23815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.920268][T23815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.970179][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.983082][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.002655][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.021258][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.070370][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8198'. [ 428.096111][T23847] netlink: 200 bytes leftover after parsing attributes in process `syz.3.8199'. [ 428.129401][T23850] loop3: detected capacity change from 0 to 256 [ 428.145460][T23850] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 428.154321][T23850] FAT-fs (loop3): Filesystem has been set read-only [ 428.166818][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 428.176035][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8202'. [ 428.185670][T23854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8202'. [ 428.240421][ T28] audit: type=1400 audit(2000000283.094:24279): avc: denied { append } for pid=23859 comm="syz.2.8205" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 428.373031][T23871] netlink: 'syz.1.8209': attribute type 27 has an invalid length. [ 428.381248][T23870] loop3: detected capacity change from 0 to 1024 [ 428.388480][T23870] EXT4-fs: Ignoring removed orlov option [ 428.397858][T23870] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 428.408537][T23870] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 428.416884][T23870] EXT4-fs (loop3): orphan cleanup on readonly fs [ 428.423943][T23870] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.8219: Invalid inode table block 0 in block_group 0 [ 428.437342][T23870] loop3: lost filesystem error report for type 5 error -117 [ 428.440535][T23870] EXT4-fs (loop3): Remounting filesystem read-only [ 428.441707][T23871] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.447942][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 428.467983][ C0] EXT4-fs (loop3): initial error at time 2000000283: __ext4_get_inode_loc:4885 [ 428.477062][ C0] EXT4-fs (loop3): last error at time 2000000283: __ext4_get_inode_loc:4885 [ 428.487173][T23870] Quota error (device loop3): write_blk: dquota write failed [ 428.494667][T23870] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 428.504901][T23870] EXT4-fs (loop3): 1 truncate cleaned up [ 428.513624][T23870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.529823][T23870] EXT4-fs (loop3): shut down requested (1) [ 428.548678][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.605694][T23871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.621286][T23871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.656245][T23871] tipc: Resetting bearer [ 428.703864][T23871] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 428.706653][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8218'. [ 428.711266][T23871] ipvlan2: left allmulticast mode [ 428.725397][T23871] batadv_slave_1: left allmulticast mode [ 428.733169][ T39] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.762000][ T39] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.785705][ T39] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.803352][T23901] loop9: detected capacity change from 0 to 4096 [ 428.810064][ T39] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.816642][T23901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 428.835116][T23901] EXT4-fs (loop9): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 428.856199][T23901] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.881294][ T8619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.981987][T23918] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8229'. [ 429.091853][T23939] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8234'. [ 429.140931][T23765] IPVS: starting estimator thread 0... [ 429.224411][T23950] loop3: detected capacity change from 0 to 512 [ 429.233903][T23950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 429.234175][T23944] IPVS: using max 2400 ests per chain, 120000 per kthread [ 429.256464][T23950] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.8238: bad orphan inode 131083 [ 429.267130][T23950] loop3: lost filesystem error report for type 5 error -117 [ 429.267898][T23950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.301683][ T28] audit: type=1326 audit(2000000284.154:24280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.3.8238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10d7acdd9 code=0x7ffc0000 [ 429.328821][ T28] audit: type=1326 audit(2000000284.154:24281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.3.8238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10d7acdd9 code=0x7ffc0000 [ 429.354098][ T28] audit: type=1326 audit(2000000284.154:24282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23949 comm="syz.3.8238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10d7acdd9 code=0x7ffc0000 [ 429.407239][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.657370][T23969] loop3: detected capacity change from 0 to 512 [ 429.684591][T23969] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.8244: inode has both inline data and extents flags [ 429.704034][T23969] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 429.704989][T23969] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.8244: couldn't read orphan inode 15 (err -117) [ 429.714262][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 429.714284][ C1] EXT4-fs (loop3): initial error at time 2000000284: ext4_orphan_get:1397: inode 15 [ 429.714314][ C1] EXT4-fs (loop3): last error at time 2000000284: ext4_orphan_get:1397: inode 15 [ 429.751458][T23969] loop3: lost filesystem error report for type 5 error -117 [ 429.755906][T23969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.900786][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.568168][T24015] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.575471][T24015] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.582770][T24015] bridge_slave_0: entered allmulticast mode [ 444.590073][T24015] bridge_slave_0: entered promiscuous mode [ 444.596940][T24015] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.604280][T24015] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.611521][T24015] bridge_slave_1: entered allmulticast mode [ 444.618435][T24015] bridge_slave_1: entered promiscuous mode [ 444.638954][T24015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.649435][T24015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.668484][T24015] team0: Port device team_slave_0 added [ 444.676040][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.686362][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.698370][T24015] team0: Port device team_slave_1 added [ 444.711744][T24015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.718735][T24015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.745242][T24015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.757809][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.768214][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.779478][T24015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.786490][T24015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.812673][T24015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.828101][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.838582][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.859824][T24015] hsr_slave_0: entered promiscuous mode [ 444.866003][T24015] hsr_slave_1: entered promiscuous mode [ 444.873843][T24015] debugfs: 'hsr0' already exists in 'hsr' [ 444.893558][T24015] Cannot create hsr debugfs directory [ 444.912485][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.939609][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.952426][T24044] netlink: 'syz.1.8261': attribute type 10 has an invalid length. [ 444.960413][T24044] __nla_validate_parse: 2 callbacks suppressed [ 444.960427][T24044] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8261'. [ 444.979128][T24044] tipc: Disabling bearer [ 445.091823][ T12] bridge_slave_0: left allmulticast mode [ 445.104796][ T12] bridge_slave_0: left promiscuous mode [ 445.112923][T24062] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 445.125129][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.197504][ T12] batman_adv: batadv0: Removing interface: vlan2 [ 445.326468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.336912][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.346318][ T12] bond0 (unregistering): Released all slaves [ 445.354231][ T12] bond1 (unregistering): Released all slaves [ 445.408241][ T12] tipc: Disabling bearer [ 445.418364][ T12] tipc: Disabling bearer [ 445.423933][ T12] tipc: Left network mode [ 445.499300][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.507104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.514820][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.522385][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.531322][ T12] hsr0: left allmulticast mode [ 445.536460][ T12] veth1_macvtap: left promiscuous mode [ 445.542035][ T12] veth0_macvtap: left promiscuous mode [ 445.547634][ T12] veth1_vlan: left promiscuous mode [ 445.553002][ T12] veth0_vlan: left promiscuous mode [ 445.605909][ T12] team0 (unregistering): Port device team_slave_1 removed [ 445.615926][ T12] team0 (unregistering): Port device team_slave_0 removed [ 445.649763][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 445.753029][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 445.767234][T24118] loop3: detected capacity change from 0 to 128 [ 445.776399][T24118] vfat: Unknown parameter 'xœìÜÏO[ÀñÓ”¶Êâå‘÷’nÞËKt3êZi $Æ&’J?“¦ÚtlI§ÁÔÑ•[ãàÆaÉŽ¨ülÜéÆ;6&.da¬ét†–2Ph¡Eø~2‡¹÷Lïȹ†Í[/æ2––ÑKâ+ñ‰ˆl‰ ‹_\>gë·ã4z&ç¾}üçÆí;×ÉädJ©©ÄÌ…¸RjhôÝ£'§ÛZ¿l ßÛüÿ²ñçÆ_›?gd-•µT¾PRºš-|.鳦¡æ³VNSjÚ4tËPÙ¼ekí…Z{Æ' [ 445.955258][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 445.973211][ T12] IPVS: stop unused estimator thread 0... [ 445.983751][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 445.983765][ T28] audit: type=1400 audit(2000000300.834:24305): avc: denied { name_bind } for pid=24143 comm="syz.3.8282" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 446.087532][T24157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8286'. [ 446.631184][T24015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 446.658171][T24015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.667382][T24015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 446.678855][T24015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.698487][T24015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 446.720974][T24015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.729217][T24015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 446.746780][T24015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.836940][T24015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.876376][T24015] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.898013][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.905107][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.934435][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.941556][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.139477][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 447.177182][T24298] 9p: Bad value for 'rfdno' [ 447.279466][T24305] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 447.296290][T24015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.386523][ T28] audit: type=1400 audit(2000000302.244:24306): avc: denied { read } for pid=24319 comm="syz.2.8321" lport=35832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.411202][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8323'. [ 447.429658][T24338] loop3: detected capacity change from 0 to 1024 [ 447.439614][T24337] netlink: 'syz.1.8323': attribute type 30 has an invalid length. [ 447.470132][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.483087][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.493896][T24338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.517541][ T30] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.531437][ T6708] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.569830][T24338] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 447.654269][T24338] EXT4-fs (loop3): Remounting filesystem read-only [ 447.677562][T24338] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 447.721163][T24015] veth0_vlan: entered promiscuous mode [ 447.740618][ T28] audit: type=1400 audit(2000000302.594:24307): avc: denied { rename } for pid=24336 comm="syz.3.8324" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 447.764273][T24015] veth1_vlan: entered promiscuous mode [ 447.795454][T24015] veth0_macvtap: entered promiscuous mode [ 447.802026][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.815381][T24015] veth1_macvtap: entered promiscuous mode [ 447.830652][T24015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.861554][T24015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.902131][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.923139][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.948837][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.976994][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.085678][T24413] netlink: 'syz.5.8254': attribute type 27 has an invalid length. [ 448.109144][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8340'. [ 448.136831][T24416] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 448.163759][T24416] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 448.181092][T24413] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.188354][T24413] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.242373][T24413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.265164][T24413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.334717][T24434] batman_adv: batadv0: Adding interface: macsec2 [ 448.363432][T24434] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 448.413503][T24434] batman_adv: batadv0: Interface activated: macsec2 [ 448.440153][ T39] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.464174][ T39] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.522229][T24449] bond0: entered promiscuous mode [ 448.540545][T24449] bond_slave_0: entered promiscuous mode [ 448.567388][T24449] bond_slave_1: entered promiscuous mode [ 448.590110][T24449] batadv0: entered promiscuous mode [ 448.598716][T24449] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 448.609193][T24449] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 448.619805][T24449] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 448.629439][ T39] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.669656][ T39] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.688136][T24474] loop5: detected capacity change from 0 to 128 [ 448.735021][T24474] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 448.758114][ T28] audit: type=1400 audit(2000000303.614:24308): avc: denied { mounton } for pid=24473 comm="syz.5.8350" path="/2/bus/bus" dev="loop5" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 448.808019][T24015] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 448.821871][ T28] audit: type=1400 audit(2000000303.664:24309): avc: denied { unmount } for pid=24015 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 448.853125][T24015] FAT-fs (loop5): Filesystem has been set read-only [ 449.039966][T24519] cgroup: fork rejected by pids controller in /syz5 [ 449.697847][T24582] loop2: detected capacity change from 0 to 256 [ 449.720901][T24582] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.145300][T24593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8378'. [ 450.193928][T24597] loop3: detected capacity change from 0 to 128 [ 450.213213][T24599] sctp: [Deprecated]: syz.2.8381 (pid 24599) Use of int in max_burst socket option deprecated. [ 450.213213][T24599] Use struct sctp_assoc_value instead [ 450.275559][T24602] loop3: detected capacity change from 0 to 512 [ 450.285859][T24602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.312940][T24602] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.351301][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.425901][T24612] loop3: detected capacity change from 0 to 512 [ 450.433697][T24612] EXT4-fs: dax option not supported [ 450.471816][T24612] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8385'. [ 450.762721][T24629] erspan0: left promiscuous mode [ 450.775385][T24629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.784608][T24629] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.793768][T24629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.814328][T24629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.822640][T24629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.832468][T24629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.842903][T24629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.855236][T24629] veth1_vlan: left promiscuous mode [ 450.860999][T24629] veth0_vlan: left promiscuous mode [ 450.866742][T24629] veth0_vlan: entered promiscuous mode [ 450.874336][T24629] veth1_vlan: entered promiscuous mode [ 450.889804][T24629] erspan0: entered promiscuous mode [ 450.899308][T24629] 8021q: adding VLAN 0 to HW filter on device eth0 [ 450.912713][T24629] 8021q: adding VLAN 0 to HW filter on device eth1 [ 450.927501][T24629] 8021q: adding VLAN 0 to HW filter on device eth2 [ 450.931799][T24588] syz.1.8376 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 450.946155][T24588] CPU: 0 UID: 0 PID: 24588 Comm: syz.1.8376 Not tainted syzkaller #0 PREEMPT(full) [ 450.946212][T24588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.946222][T24588] Call Trace: [ 450.946293][T24588] [ 450.946302][T24588] __dump_stack+0x1d/0x30 [ 450.946326][T24588] dump_stack_lvl+0x95/0xd0 [ 450.946346][T24588] dump_stack+0x15/0x1b [ 450.946363][T24588] dump_header+0x80/0x240 [ 450.946380][T24588] oom_kill_process+0x295/0x350 [ 450.946528][T24588] out_of_memory+0x97d/0xb80 [ 450.946558][T24588] try_charge_memcg+0x62f/0xa10 [ 450.946586][T24588] charge_memcg+0x6d/0x120 [ 450.946610][T24588] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 450.946645][T24588] __swap_cache_prepare_and_add+0x69/0x4a0 [ 450.946666][T24588] ? alloc_pages_mpol+0x217/0x260 [ 450.946760][T24588] swap_cache_alloc_folio+0xa2/0x120 [ 450.946781][T24588] swap_cluster_readahead+0x35c/0x3c0 [ 450.946815][T24588] swapin_readahead+0xde/0x840 [ 450.946836][T24588] ? css_rstat_updated+0xbb/0x280 [ 450.946858][T24588] ? hrtimer_active+0xe4/0x110 [ 450.946949][T24588] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 450.946976][T24588] ? __rcu_read_unlock+0x4e/0x70 [ 450.947029][T24588] ? swap_cache_get_folio+0x1e0/0x1f0 [ 450.947114][T24588] do_swap_page+0x31e/0x2180 [ 450.947149][T24588] ? __rcu_read_lock+0x36/0x50 [ 450.947243][T24588] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 450.947261][T24588] handle_mm_fault+0xb2e/0x2e70 [ 450.947282][T24588] ? vma_start_read+0x1c7/0x2c0 [ 450.947372][T24588] do_user_addr_fault+0x62f/0x1050 [ 450.947409][T24588] ? arch_exit_work+0x30/0x40 [ 450.947430][T24588] ? irqentry_exit+0x40/0x5b0 [ 450.947511][T24588] ? trace_page_fault_user+0x1f/0xa0 [ 450.947554][T24588] exc_page_fault+0x62/0xa0 [ 450.947579][T24588] asm_exc_page_fault+0x26/0x30 [ 450.947697][T24588] RIP: 0033:0x7ffbd3d71bd0 [ 450.947760][T24588] Code: 49 89 f5 41 54 55 53 48 89 fb 48 83 ec 18 4c 8b 76 38 4c 03 76 18 80 3d 0f 3b ed 00 00 8b 6e 04 4c 89 34 24 0f 85 73 02 00 00 <80> 7b 60 00 8b 53 50 89 e8 0f 85 1b 04 00 00 85 d2 0f 85 0e 04 00 [ 450.947777][T24588] RSP: 002b:00007fffc3001fc0 EFLAGS: 00010206 [ 450.947870][T24588] RAX: 00007ffbd38ff008 RBX: 00007ffbd4c45720 RCX: ffffffff8597342c [ 450.947884][T24588] RDX: 0000000000001b60 RSI: ffffffff812f084b RDI: 00007ffbd38ff008 [ 450.947899][T24588] RBP: 000000000000036c R08: 00007ffbd4100000 R09: 00007ffbd4116038 [ 450.947913][T24588] R10: 0000000000000001 R11: 0000000000000004 R12: 00007ffbd3cff000 [ 450.947926][T24588] R13: 00007ffbd4116038 R14: 00007ffbd38ff008 R15: 0000000000000001 [ 450.947944][T24588] ? xa_load+0xac/0xe0 [ 450.948005][T24588] ? sched_clock+0xb/0x60 [ 450.948029][T24588] [ 450.948102][T24588] memory: usage 304084kB, limit 307200kB, failcnt 13010 [ 450.959041][T24629] 8021q: adding VLAN 0 to HW filter on device eth3 [ 450.970516][T24588] memory+swap: usage 298204kB, limit 9007199254740988kB, failcnt 0 [ 450.991138][T24629] veth0_to_team: entered promiscuous mode [ 450.992624][T24588] kmem: usage 273120kB, limit 9007199254740988kB, failcnt 0 [ 451.007957][T24629] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 451.010419][T24588] Memory cgroup stats for /syz1: [ 451.248332][T24588] cache 0 [ 451.258761][T24588] rss 4096 [ 451.261881][T24588] shmem 0 [ 451.262967][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.264936][T24588] mapped_file 0 [ 451.271934][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.275410][T24588] dirty 0 [ 451.308845][T24588] writeback 0 [ 451.322742][ T28] audit: type=1400 audit(2000000306.164:24310): avc: denied { connect } for pid=24633 comm="syz.2.8395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 451.343027][T24588] workingset_refault_anon 2233 [ 451.348775][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.355982][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.357613][T24588] workingset_refault_file 0 [ 451.388989][ T28] audit: type=1400 audit(2000000306.164:24311): avc: denied { shutdown } for pid=24633 comm="syz.2.8395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 451.414853][T24588] swap 1433600 [ 451.429804][T24588] swapcached 39759872 [ 451.443803][T24588] pgpgin 389192 [ 451.465567][ T3401] team_slave_0: entered promiscuous mode [ 451.471253][ T3401] team_slave_1: entered promiscuous mode [ 451.485742][T24588] pgpgout 389191 [ 451.493889][T24588] pgfault 379624 [ 451.497787][T24588] pgmajfault 291 [ 451.502554][ T1257] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.511106][T24588] inactive_anon 0 [ 451.515129][T24588] active_anon 0 [ 451.518634][ T1257] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.527265][T24588] inactive_file 0 [ 451.532580][T24588] active_file 0 [ 451.536245][T24588] unevictable 0 [ 451.540047][T24588] hierarchical_memory_limit 314572800 [ 451.547504][T24588] hierarchical_memsw_limit 9223372036854771712 [ 451.553870][ T1257] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.570782][ T1257] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.579549][T24588] total_cache 0 [ 451.583098][T24588] total_rss 4096 [ 451.588757][T24588] total_shmem 0 [ 451.595555][T24588] total_mapped_file 0 [ 451.604067][T24588] total_dirty 0 [ 451.608300][T24588] total_writeback 0 [ 451.614370][ T3401] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 451.616650][T24588] total_workingset_refault_anon 2233 [ 451.629013][T24588] total_workingset_refault_file 0 [ 451.657100][T24588] total_swap 1433600 [ 451.661269][T24588] total_swapcached 39759872 [ 451.666189][T24588] total_pgpgin 389192 [ 451.670961][T24588] total_pgpgout 389191 [ 451.675263][T24588] total_pgfault 379624 [ 451.679826][T24588] total_pgmajfault 291 [ 451.683932][T24588] total_inactive_anon 0 [ 451.688771][T24588] total_active_anon 0 [ 451.692969][T24588] total_inactive_file 0 [ 451.698089][T24588] total_active_file 0 [ 451.702174][T24588] total_unevictable 0 [ 451.706849][T24588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2727,pid=10848,uid=0 [ 451.722083][T24588] Memory cgroup out of memory: Killed process 10848 (syz.1.2727) total-vm:96084kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 451.834588][ T68] bridge_slave_1: left allmulticast mode [ 451.843600][ T68] bridge_slave_1: left promiscuous mode [ 451.851207][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.860232][ T68] bridge_slave_0: left allmulticast mode [ 451.867177][ T68] bridge_slave_0: left promiscuous mode [ 451.878258][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.885780][ T8783] Process accounting resumed [ 451.937405][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.946991][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.960408][ T68] bond0 (unregistering): Released all slaves [ 451.993104][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 452.004242][ T68] hsr_slave_0: left promiscuous mode [ 452.009919][ T68] hsr_slave_1: left promiscuous mode [ 452.016199][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.029209][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.072943][ T68] team0 (unregistering): Port device team_slave_1 removed [ 452.086620][ T68] team0 (unregistering): Port device team_slave_0 removed [ 452.217797][T24653] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.225935][T24653] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.233208][T24653] bridge_slave_0: entered allmulticast mode [ 452.239821][T24653] bridge_slave_0: entered promiscuous mode [ 452.250140][T24653] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.258225][T24653] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.266416][T24653] bridge_slave_1: entered allmulticast mode [ 452.272962][T24653] bridge_slave_1: entered promiscuous mode [ 452.301551][T24653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.312273][T24653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.324618][ T10] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 452.343355][T24653] team0: Port device team_slave_0 added [ 452.350250][T24653] team0: Port device team_slave_1 added [ 452.368408][T24653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.380196][T24653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.408007][T24653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.419324][T24653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.426959][T24653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.458987][T24653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.489934][ T290] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 452.532251][T24653] hsr_slave_0: entered promiscuous mode [ 452.544702][T24653] hsr_slave_1: entered promiscuous mode [ 452.563270][T24653] debugfs: 'hsr0' already exists in 'hsr' [ 452.571369][T24653] Cannot create hsr debugfs directory [ 452.578241][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 452.827065][ T28] audit: type=1400 audit(2000000307.674:24312): avc: denied { mounton } for pid=24759 comm="syz.6.8423" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.992925][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 453.292052][T24653] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.304546][T24653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.326730][T24653] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 453.338447][T24653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.346522][T24653] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.356066][T24653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.384355][T24653] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 453.398850][T24653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.464279][T24830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8441'. [ 453.488315][T24830] netlink: 'syz.3.8441': attribute type 12 has an invalid length. [ 453.522890][T24830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8441'. [ 453.544231][ T1257] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 453.557516][ T1257] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 453.587195][ T28] audit: type=1400 audit(2000000308.444:24313): avc: denied { getopt } for pid=24840 comm="syz.3.8444" lport=47610 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 453.647409][T24653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.679927][T24653] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.694352][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.701445][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.723433][T24852] 9p: Could not find request transport: 0x0000000000000004 [ 453.741925][T24859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8446'. [ 453.757574][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.764720][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.802269][T24653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.830255][T24653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.833030][T24868] 9p: Bad value for 'rfdno' [ 453.970587][T24886] macsec1: entered promiscuous mode [ 453.981245][T24886] batadv_slave_1: entered promiscuous mode [ 453.984295][ T35] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 453.990728][T24886] macsec1: entered allmulticast mode [ 454.012181][T24886] batadv_slave_1: entered allmulticast mode [ 454.026297][T24886] batadv_slave_1: left allmulticast mode [ 454.032128][T24886] batadv_slave_1: left promiscuous mode [ 454.040338][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8459'. [ 454.123681][T24906] veth0_to_bond: Caught tx_queue_len zero misconfig [ 454.202644][T24653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.328405][T24939] loop2: detected capacity change from 0 to 512 [ 454.347835][T24939] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 454.380228][T24945] netlink: 'syz.1.8470': attribute type 64 has an invalid length. [ 454.402529][T24939] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.8469: bad orphan inode 131083 [ 454.413966][T24945] netlink: 'syz.1.8470': attribute type 64 has an invalid length. [ 454.444419][T24939] loop2: lost filesystem error report for type 5 error -117 [ 454.445120][T24939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.522807][T24653] veth0_vlan: entered promiscuous mode [ 454.529078][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.538975][T24964] netlink: 'syz.1.8475': attribute type 2 has an invalid length. [ 454.552806][T24653] veth1_vlan: entered promiscuous mode [ 454.589903][T24653] veth0_macvtap: entered promiscuous mode [ 454.598441][T24653] veth1_macvtap: entered promiscuous mode [ 454.610126][T24653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.624751][T24653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.636042][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.645033][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.653749][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.662461][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.680951][ T28] audit: type=1326 audit(2000000309.534:24314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.2.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 454.707139][ T28] audit: type=1326 audit(2000000309.544:24315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.2.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 454.731466][ T28] audit: type=1326 audit(2000000309.544:24316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.2.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 454.770972][ T28] audit: type=1326 audit(2000000309.544:24317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.2.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 454.794973][ T28] audit: type=1326 audit(2000000309.544:24318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.2.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 454.819397][ T28] audit: type=1326 audit(2000000309.544:24319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24976 comm="syz.2.8481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00a5cfcdd9 code=0x7ffc0000 [ 454.857076][T24985] syzkaller1: entered promiscuous mode [ 454.862666][T24985] syzkaller1: entered allmulticast mode [ 454.891667][T24989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8484'. [ 454.950296][T24995] netlink: 'syz.5.8487': attribute type 11 has an invalid length. [ 455.436756][T25016] loop5: detected capacity change from 0 to 4096 [ 455.468337][T25016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.529675][T25024] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8497'. [ 455.590715][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.929140][T25046] loop2: detected capacity change from 0 to 512 [ 455.961489][T25046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.990001][T25046] ext4 filesystem being mounted at /1037/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.046266][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.338602][T25056] 9p: Could not find request transport: 0x0000000000000004 [ 456.488871][T25061] loop2: detected capacity change from 0 to 1024 [ 456.513754][T25061] EXT4-fs: Ignoring removed bh option [ 456.537362][T25061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.577393][T25069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8513'. [ 456.593419][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.619911][T25071] loop5: detected capacity change from 0 to 1024 [ 456.644388][T25069] bond1: entered promiscuous mode [ 456.660305][T25069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.668543][T25071] EXT4-fs: Ignoring removed bh option [ 456.705569][T25071] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 456.710646][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 456.710659][ T28] audit: type=1400 audit(2000000311.564:24335): avc: denied { create } for pid=25074 comm="syz.2.8515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 456.742208][ T28] audit: type=1400 audit(2000000311.584:24336): avc: denied { setopt } for pid=25074 comm="syz.2.8515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 456.763727][T25069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.780351][T25071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.789631][T25069] bond2: entered promiscuous mode [ 456.803291][T25069] bond1: (slave bond2): Enslaving as an active interface with an up link [ 456.832927][ T28] audit: type=1400 audit(2000000311.684:24337): avc: denied { map } for pid=25070 comm="syz.5.8514" path="/11/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 456.991446][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.170669][T25121] netlink: 'syz.6.8535': attribute type 27 has an invalid length. [ 457.265487][T25121] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.272741][T25121] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.279807][ T28] audit: type=1326 audit(2000000312.124:24338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25132 comm="syz.1.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 457.308086][ T28] audit: type=1326 audit(2000000312.124:24339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25132 comm="syz.1.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 457.336775][T25121] team_slave_0: left promiscuous mode [ 457.355982][T25121] team_slave_1: left promiscuous mode [ 457.359430][ T28] audit: type=1326 audit(2000000312.134:24340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25132 comm="syz.1.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 457.407037][ T28] audit: type=1326 audit(2000000312.134:24341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25132 comm="syz.1.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 457.480321][ T28] audit: type=1326 audit(2000000312.164:24342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25132 comm="syz.1.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 457.504563][ T28] audit: type=1326 audit(2000000312.164:24343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25132 comm="syz.1.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 457.528957][T25121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.540744][ T28] audit: type=1326 audit(2000000312.164:24344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25132 comm="syz.1.8540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 457.567259][T25121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.626455][T25121] bond1: left promiscuous mode [ 457.631519][T25121] bond2: left promiscuous mode [ 457.810180][ T1257] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.825968][ T1257] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.858801][T25160] erspan0: left promiscuous mode [ 457.889527][T25160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.899547][T25160] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.911079][T25160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.946188][T25160] veth0_to_team: left promiscuous mode [ 457.963163][T25160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.983409][T25160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.006373][T25160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.034085][T25160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.056233][T25160] veth1_vlan: left promiscuous mode [ 458.074475][T25160] veth0_vlan: left promiscuous mode [ 458.080171][T25160] veth0_vlan: entered promiscuous mode [ 458.095680][T25160] veth1_vlan: entered promiscuous mode [ 458.119478][T25160] erspan0: entered promiscuous mode [ 458.134907][T25160] 8021q: adding VLAN 0 to HW filter on device eth0 [ 458.147921][T25160] 8021q: adding VLAN 0 to HW filter on device eth1 [ 458.159049][T25160] 8021q: adding VLAN 0 to HW filter on device eth2 [ 458.175437][T25160] 8021q: adding VLAN 0 to HW filter on device eth3 [ 458.193623][T25160] veth0_to_team: entered promiscuous mode [ 458.202080][T25160] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 458.240703][T25160] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 458.265155][T25160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.282683][T25160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.293529][ T1257] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.318972][ T3398] team_slave_0: entered promiscuous mode [ 458.324727][ T3398] team_slave_1: entered promiscuous mode [ 458.336019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.343126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.352496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.359594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.390291][ T1257] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.464411][ T3398] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 458.594286][ T3398] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 458.645734][T25198] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 458.994469][ T39] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 459.092650][T25235] loop5: detected capacity change from 0 to 512 [ 459.138878][T25235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.222594][T25235] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.320626][T25252] netlink: 'syz.6.8589': attribute type 3 has an invalid length. [ 459.373251][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.582726][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8595'. [ 459.624651][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8595'. [ 459.685795][T25263] ------------[ cut here ]------------ [ 459.691325][T25263] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.5.8591/25263 [ 459.701171][T25263] Modules linked in: [ 459.705056][T25263] CPU: 1 UID: 0 PID: 25263 Comm: syz.5.8591 Not tainted syzkaller #0 PREEMPT(full) [ 459.714421][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.724565][T25263] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 459.730198][T25263] Code: 8b 05 c1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 459.750076][T25263] RSP: 0018:ffffc90005c4bdd8 EFLAGS: 00010093 [ 459.756217][T25263] RAX: ffffffff813b1682 RBX: ffff8881039da200 RCX: ffff8881039da200 [ 459.764176][T25263] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 459.772570][T25263] RBP: 0000000000000080 R08: ffff8881039dacf8 R09: 0000000000000000 [ 459.780613][T25263] R10: ffffc90005c4bdf0 R11: 0001c90005c4bdf0 R12: ffff8881039da200 [ 459.788645][T25263] R13: ffff8881039daa28 R14: ffff888104f59f90 R15: 0000000000000080 [ 459.796620][T25263] FS: 0000000000000000(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000 [ 459.805565][T25263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.812135][T25263] CR2: 0000001b3011dff8 CR3: 000000011b162000 CR4: 00000000003506f0 [ 459.820153][T25263] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.828112][T25263] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 459.836078][T25263] Call Trace: [ 459.839345][T25263] [ 459.842333][T25263] do_exit+0xc13/0x1530 [ 459.846563][T25263] ? switch_fpu_return+0xe7/0x1b0 [ 459.851601][T25263] __x64_sys_exit+0x1f/0x20 [ 459.856154][T25263] x64_sys_call+0x301d/0x3020 [ 459.860819][T25263] do_syscall_64+0x12c/0x3b0 [ 459.865399][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.871385][T25263] RIP: 0033:0x7fbdcc2dcdd9 [ 459.875817][T25263] Code: Unable to access opcode bytes at 0x7fbdcc2dcdaf. [ 459.882962][T25263] RSP: 002b:00007fbdcad0cfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 459.891480][T25263] RAX: ffffffffffffffda RBX: 00007fbdcc556090 RCX: 00007fbdcc2dcdd9 [ 459.899456][T25263] RDX: 00007fbdcad0d9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.907426][T25263] RBP: 00007fbdcc372d69 R08: 0000000000000000 R09: 0000000000000000 [ 459.915389][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.923349][T25263] R13: 00007fbdcc556128 R14: 00007fbdcc556090 R15: 00007fff22e923e8 [ 459.931343][T25263] [ 459.934414][T25263] ---[ end trace 0000000000000000 ]--- [ 460.077155][ T68] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 460.115020][ T68] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 460.125498][T25285] loop2: detected capacity change from 0 to 1024 [ 460.187798][T25285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.213308][T25285] EXT4-fs (loop2): shut down requested (2) [ 460.258704][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.792947][T25355] netlink: 'syz.5.8620': attribute type 10 has an invalid length. [ 461.034275][T23745] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 461.389040][T25411] loop5: detected capacity change from 0 to 128 [ 462.135105][T25477] loop3: detected capacity change from 0 to 256 [ 462.162787][T25477] FAT-fs (loop3): Directory bread(block 64) failed [ 462.170695][T25477] FAT-fs (loop3): Directory bread(block 65) failed [ 462.177773][T25477] FAT-fs (loop3): Directory bread(block 66) failed [ 462.189932][T25477] FAT-fs (loop3): Directory bread(block 67) failed [ 462.196897][T25477] FAT-fs (loop3): Directory bread(block 68) failed [ 462.203640][T25477] FAT-fs (loop3): Directory bread(block 69) failed [ 462.210704][T25477] FAT-fs (loop3): Directory bread(block 70) failed [ 462.217529][T25477] FAT-fs (loop3): Directory bread(block 71) failed [ 462.224254][T25477] FAT-fs (loop3): Directory bread(block 72) failed [ 462.230969][T25477] FAT-fs (loop3): Directory bread(block 73) failed [ 462.899032][T25497] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 463.179106][ T3371] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 463.192512][ T3371] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 463.267271][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8684'. [ 463.295591][T25523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8684'. [ 463.521726][T25551] loop2: detected capacity change from 0 to 512 [ 463.537000][T25551] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.549794][T25551] EXT4-fs (loop2): 1 truncate cleaned up [ 463.556204][T25551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.578479][T25551] EXT4-fs (loop2): shut down requested (0) [ 463.609656][T25551] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 463.629052][T25551] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 463.638334][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 463.638346][ T28] audit: type=1400 audit(2000000318.494:24391): avc: denied { setattr } for pid=25550 comm="syz.2.8697" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.677687][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.691888][ T39] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.766776][ T39] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.837732][ T39] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.891877][ T39] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.916360][T25572] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.923518][T25572] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.924122][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 463.931043][T25572] bridge_slave_0: entered allmulticast mode [ 463.945032][T25572] bridge_slave_0: entered promiscuous mode [ 463.951627][T25572] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.958758][T25572] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.966052][T25572] bridge_slave_1: entered allmulticast mode [ 463.972505][T25572] bridge_slave_1: entered promiscuous mode [ 463.988596][T25572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.999276][T25572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.018062][T25572] team0: Port device team_slave_0 added [ 464.024842][T25572] team0: Port device team_slave_1 added [ 464.038898][T25572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.045994][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.072472][T25572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.083828][T25572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.090931][T25572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.117038][T25572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.144751][T25572] hsr_slave_0: entered promiscuous mode [ 464.150911][T25572] hsr_slave_1: entered promiscuous mode [ 464.156888][T25572] debugfs: 'hsr0' already exists in 'hsr' [ 464.162628][T25572] Cannot create hsr debugfs directory [ 464.434838][T25572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.443728][T25572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.451548][T25572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.460860][T25572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.469799][T25572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.478936][T25572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.487444][T25572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.496367][T25572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.540122][ T28] audit: type=1326 audit(2000000319.394:24392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25648 comm="syz.5.8716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdcc2dcdd9 code=0x0 [ 464.579893][ T39] bridge_slave_1: left allmulticast mode [ 464.585909][ T39] bridge_slave_1: left promiscuous mode [ 464.591609][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.600119][ T39] bridge_slave_0: left allmulticast mode [ 464.606071][ T39] bridge_slave_0: left promiscuous mode [ 464.612075][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.735649][ T39] bond0 (unregistering): left promiscuous mode [ 464.741963][ T39] bond_slave_0: left promiscuous mode [ 464.747858][ T39] bond_slave_1: left promiscuous mode [ 464.753913][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.763079][ T39] bond_slave_0: left allmulticast mode [ 464.764701][T25670] netlink: 376 bytes leftover after parsing attributes in process `syz.2.8717'. [ 464.778284][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.787806][ T39] bond_slave_1: left allmulticast mode [ 464.793956][ T39] bond0 (unregistering): Released all slaves [ 464.802118][ T39] bond1 (unregistering): (slave bond2): Releasing backup interface [ 464.810416][ T39] bond1 (unregistering): Released all slaves [ 464.818851][ T39] bond2 (unregistering): Released all slaves [ 464.827489][T25668] netlink: 'syz.2.8717': attribute type 29 has an invalid length. [ 464.836002][T25669] netlink: 'syz.2.8717': attribute type 29 has an invalid length. [ 464.848592][ T39] tipc: Disabling bearer [ 464.854209][ T39] tipc: Left network mode [ 464.873659][ T39] batadv0: left promiscuous mode [ 464.880991][ T39] hsr_slave_0: left promiscuous mode [ 464.887447][ T39] hsr_slave_1: left promiscuous mode [ 464.893393][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.901767][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.910920][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.918791][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.929655][ T39] veth0_to_team: left promiscuous mode [ 464.935604][ T39] veth1_vlan: left promiscuous mode [ 464.941122][ T39] veth0_vlan: left promiscuous mode [ 464.976800][ T39] pim6reg (unregistering): left allmulticast mode [ 465.019344][ T39] team0 (unregistering): Port device team_slave_1 removed [ 465.030779][ T39] team0 (unregistering): Port device team_slave_0 removed [ 465.074991][T25675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8718'. [ 465.107261][T25572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.128814][T25572] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.147050][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.154153][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.174759][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.181862][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.317069][ T39] IPVS: stop unused estimator thread 0... [ 465.353344][T25572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.459238][ T28] audit: type=1326 audit(2000000320.314:24393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.483511][ T28] audit: type=1326 audit(2000000320.314:24394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.508170][ T28] audit: type=1326 audit(2000000320.314:24395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.576043][ T28] audit: type=1326 audit(2000000320.314:24396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.624842][ T28] audit: type=1326 audit(2000000320.314:24397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.695340][ T28] audit: type=1326 audit(2000000320.314:24398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.700556][T25572] veth0_vlan: entered promiscuous mode [ 465.752068][T25572] veth1_vlan: entered promiscuous mode [ 465.767566][ T28] audit: type=1326 audit(2000000320.314:24399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.785642][T25572] veth0_macvtap: entered promiscuous mode [ 465.823460][T25572] veth1_macvtap: entered promiscuous mode [ 465.840639][ T28] audit: type=1326 audit(2000000320.314:24400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz.1.8726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd3e9cdd9 code=0x7ffc0000 [ 465.845422][T25572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.888455][T25572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.917353][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.927791][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.939843][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.951938][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.012868][T25824] loop4: detected capacity change from 0 to 128 [ 466.516059][T25882] loop5: detected capacity change from 0 to 512 [ 466.549357][T25882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.568223][T25896] pim6reg: entered allmulticast mode [ 466.593642][T25882] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.683838][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.693244][T25910] loop4: detected capacity change from 0 to 512 [ 466.710958][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 466.721729][T25910] EXT4-fs: Ignoring removed nobh option [ 466.742746][T25910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 466.768265][T25910] EXT4-fs (loop4): 1 truncate cleaned up [ 466.775011][T25910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.824384][T25572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.910140][T25934] loop4: detected capacity change from 0 to 512 [ 466.939815][T25934] EXT4-fs (loop4): 1 truncate cleaned up [ 466.958043][T25934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.013179][T25942] loop5: detected capacity change from 0 to 1024 [ 467.069485][T25942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.095782][T25572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.102491][T25942] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.141577][T25942] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.8764: lblock 3 mapped to illegal pblock 3 (length 3) [ 467.150000][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 467.162908][T25942] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 467.176103][T25942] EXT4-fs (loop5): This should not happen!! Data will be lost [ 467.176103][T25942] [ 467.189801][T25942] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.8764: lblock 0 mapped to illegal pblock 0 (length 1) [ 467.207062][T25942] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 467.236148][T25942] EXT4-fs (loop5): This should not happen!! Data will be lost [ 467.236148][T25942] [ 467.305857][T25960] loop2: detected capacity change from 0 to 4096 [ 467.320359][T25965] loop4: detected capacity change from 0 to 1024 [ 467.337667][ T1257] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 467.338526][T25965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.376606][T25960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.398721][ T1257] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 467.419602][T25965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.456281][ T1257] EXT4-fs (loop5): This should not happen!! Data will be lost [ 467.456281][ T1257] [ 467.500138][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.528360][T25978] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8772'. [ 467.537917][T25978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8772'. [ 467.547212][T24653] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 467.559726][T25572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.566721][T25978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8772'. [ 467.597132][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 467.693888][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 467.849299][T26018] netlink: 'syz.4.8782': attribute type 4 has an invalid length. [ 467.869951][T26018] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8782'. [ 467.956141][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 468.088543][T26036] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8787'. [ 468.120171][T26038] loop3: detected capacity change from 0 to 128 [ 468.133504][T26038] FAT-fs (loop3): Directory bread(block 414) failed [ 468.141421][T26038] FAT-fs (loop3): Directory bread(block 415) failed [ 468.148787][T26038] FAT-fs (loop3): Directory bread(block 416) failed [ 468.156689][T26038] FAT-fs (loop3): Directory bread(block 417) failed [ 468.163382][T26038] FAT-fs (loop3): Directory bread(block 418) failed [ 468.170409][T26038] FAT-fs (loop3): Directory bread(block 419) failed [ 468.177907][T26038] FAT-fs (loop3): Directory bread(block 420) failed [ 468.184875][T26038] FAT-fs (loop3): Directory bread(block 421) failed [ 468.192701][T26038] FAT-fs (loop3): Directory bread(block 414) failed [ 468.199625][T26038] FAT-fs (loop3): Directory bread(block 415) failed [ 468.202191][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8790'. [ 468.237722][T26046] loop3: detected capacity change from 0 to 512 [ 468.248955][T26046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.277112][T26046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.290187][T26046] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.312717][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.743438][ T290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.801177][ T290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.864154][ T290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.899549][ T290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.984802][T26067] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.991967][T26067] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.999410][T26067] bridge_slave_0: entered allmulticast mode [ 469.006031][T26067] bridge_slave_0: entered promiscuous mode [ 469.012811][T26067] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.019946][T26067] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.027374][T26067] bridge_slave_1: entered allmulticast mode [ 469.033910][T26067] bridge_slave_1: entered promiscuous mode [ 469.058248][ T290] bridge_slave_1: left allmulticast mode [ 469.064234][ T290] bridge_slave_1: left promiscuous mode [ 469.069987][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.078027][ T290] bridge_slave_0: left allmulticast mode [ 469.083772][ T290] bridge_slave_0: left promiscuous mode [ 469.089638][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.147561][ T290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.157543][ T290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.166942][ T290] bond0 (unregistering): Released all slaves [ 469.175941][T26067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.186555][T26067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.208811][T26067] team0: Port device team_slave_0 added [ 469.216232][ T290] hsr_slave_0: left promiscuous mode [ 469.222084][ T290] hsr_slave_1: left promiscuous mode [ 469.228129][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.235599][ T290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.243214][ T290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.250703][ T290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.260610][ T290] veth1_macvtap: left promiscuous mode [ 469.266285][ T290] veth0_macvtap: left promiscuous mode [ 469.271833][ T290] veth1_vlan: left promiscuous mode [ 469.277394][ T290] veth0_vlan: left promiscuous mode [ 469.337517][ T290] team0 (unregistering): Port device team_slave_1 removed [ 469.347250][ T290] team0 (unregistering): Port device team_slave_0 removed [ 469.382100][T26067] team0: Port device team_slave_1 added [ 469.407056][T26067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.414919][T26067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.447108][T26067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.459886][T26067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.467503][T26067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.494465][T26067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.525890][T26067] hsr_slave_0: entered promiscuous mode [ 469.538181][T26067] hsr_slave_1: entered promiscuous mode [ 469.544475][T26067] debugfs: 'hsr0' already exists in 'hsr' [ 469.550328][T26067] Cannot create hsr debugfs directory [ 469.733095][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 469.733109][ T28] audit: type=1326 audit(2000000324.584:24403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26132 comm="syz.3.8818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff10d7acdd9 code=0x0 [ 469.792478][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 470.123381][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 470.387794][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 470.412231][T26193] __nla_validate_parse: 1 callbacks suppressed [ 470.412245][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8830'. [ 470.416492][T26067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.426176][T26193] netlink: 'syz.1.8830': attribute type 30 has an invalid length. [ 470.442540][T26193] netlink: 'syz.1.8830': attribute type 29 has an invalid length. [ 470.446060][T26067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.450863][T26193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8830'. [ 470.472373][T26067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.481336][T26067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.491431][T26067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 470.509348][T26067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.523521][T26067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 470.540951][T26067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.633729][T26067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.668108][T26067] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.712230][T26067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.733795][T26067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.764127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.771254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.792320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.799570][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.845035][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 470.976228][T26237] loop5: detected capacity change from 0 to 512 [ 470.994913][T26237] EXT4-fs: Ignoring removed nobh option [ 471.009161][T26237] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 471.041509][T26237] EXT4-fs (loop5): 1 truncate cleaned up [ 471.068837][T26237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.156907][T26067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.202334][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.241618][T26270] loop5: detected capacity change from 0 to 512 [ 471.272557][T26270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.298799][T26270] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.387004][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.414539][T26067] veth0_vlan: entered promiscuous mode [ 471.441006][T26067] veth1_vlan: entered promiscuous mode [ 471.482699][T26304] loop5: detected capacity change from 0 to 128 [ 471.491522][T26067] veth0_macvtap: entered promiscuous mode [ 471.506077][T26067] veth1_macvtap: entered promiscuous mode [ 471.535198][T26067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.558343][T26067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.590015][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.606449][ T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.703776][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.731036][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.892034][ T28] audit: type=1400 audit(2000000326.744:24404): avc: denied { setopt } for pid=26348 comm="syz.3.8856" lport=35932 faddr=fe80::36 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 471.928429][ T28] audit: type=1400 audit(2000000326.744:24405): avc: denied { connect } for pid=26348 comm="syz.3.8856" lport=35932 faddr=fe80::36 fport=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 471.975664][ T28] audit: type=1400 audit(2000000326.744:24406): avc: denied { name_connect } for pid=26348 comm="syz.3.8856" dest=20004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 472.098779][T26377] loop3: detected capacity change from 0 to 512 [ 472.141370][T26377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.160318][T26384] tun1: tun_chr_ioctl cmd 1074025677 [ 472.168505][T26384] tun1: linktype set to 768 [ 472.175041][T26384] tun1: tun_chr_ioctl cmd 1074025675 [ 472.182334][ T28] audit: type=1400 audit(2000000327.034:24407): avc: denied { create } for pid=26376 comm="syz.3.8863" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 472.189340][T26384] tun1: persist disabled [ 472.218284][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.322444][T26409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26409 comm=syz.3.8871 [ 472.456881][T26425] tun0: tun_chr_ioctl cmd 1074025675 [ 472.479372][T26425] tun0: persist enabled [ 472.491407][T26425] tun0: tun_chr_ioctl cmd 1074025675 [ 472.503953][T26425] tun0: persist disabled [ 472.587146][T26448] batadv_slave_0: entered promiscuous mode [ 472.617425][T26447] batadv_slave_0: left promiscuous mode [ 472.807536][T26474] loop5: detected capacity change from 0 to 256 [ 472.997544][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8893'. [ 473.452175][T26552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8909'. [ 473.482535][T26557] xt_hashlimit: size too large, truncated to 1048576 [ 473.502135][T26560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8910'. [ 473.584861][T26572] loop2: detected capacity change from 0 to 512 [ 473.614317][T26572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 473.638597][T26572] EXT4-fs (loop2): 1 truncate cleaned up [ 473.651731][T26572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.778736][T11838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.793104][T26589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.806650][T26589] team0: Port device bond0 added [ 473.831017][T26597] bridge0: port 3(team0) entered blocking state [ 473.879722][T26597] bridge0: port 3(team0) entered disabled state [ 473.886216][T26597] team0: entered allmulticast mode [ 473.891636][T26597] team_slave_0: entered allmulticast mode [ 473.899999][T26597] team_slave_1: entered allmulticast mode [ 473.906054][T26597] bond0: entered allmulticast mode [ 473.920338][T26597] bond_slave_0: entered allmulticast mode [ 473.926496][T26597] bond_slave_1: entered allmulticast mode [ 473.934892][T26597] team0: entered promiscuous mode [ 473.940127][T26597] team_slave_0: entered promiscuous mode [ 473.945834][T26597] team_slave_1: entered promiscuous mode [ 473.956230][T26597] bond0: entered promiscuous mode [ 473.961491][T26597] bond_slave_0: entered promiscuous mode [ 473.967401][T26597] bond_slave_1: entered promiscuous mode [ 473.975559][T26597] bridge0: port 3(team0) entered blocking state [ 473.981969][T26597] bridge0: port 3(team0) entered forwarding state [ 473.990818][T26603] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 474.067449][T26619] veth1_to_bond: entered allmulticast mode [ 474.086792][T26619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8930'. [ 474.135342][T26619] veth1_to_bond (unregistering): left allmulticast mode [ 474.148349][T26619] bond0: (slave c@0Ù): Releasing backup interface [ 474.162397][T26615] loop5: detected capacity change from 0 to 8192 [ 474.493352][T26669] loop5: detected capacity change from 0 to 512 [ 474.517302][T26669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.545306][T26677] netlink: 'syz.3.8955': attribute type 2 has an invalid length. [ 474.572099][T26682] loop3: detected capacity change from 0 to 1024 [ 474.597198][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.622815][T26682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 474.647826][T26682] System zones: 0-1, 3-8 [ 474.661488][T26682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 474.677009][T26682] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.879580][ T28] audit: type=1400 audit(2000000329.734:24408): avc: denied { mounton } for pid=26706 comm="syz.7.8964" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 474.946363][T26696] netlink: 'syz.5.8958': attribute type 3 has an invalid length. [ 475.048707][T26712] loop2: detected capacity change from 0 to 128 [ 475.137801][T26715] bio_check_eod: 12837 callbacks suppressed [ 475.137819][T26715] syz.2.8966: attempt to access beyond end of device [ 475.137819][T26715] loop2: rw=3, sector=161, nr_sectors = 7 limit=128 [ 475.162862][T26715] syz.2.8966: attempt to access beyond end of device [ 475.162862][T26715] loop2: rw=2051, sector=168, nr_sectors = 1 limit=128 [ 475.440395][ T28] audit: type=1400 audit(2000000330.294:24409): avc: denied { ioctl } for pid=26721 comm="syz.1.8971" path="socket:[77992]" dev="sockfs" ino=77992 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 475.827291][ T290] kworker/u8:5: attempt to access beyond end of device [ 475.827291][ T290] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 475.845967][ T30] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 475.864751][ T290] kworker/u8:5: attempt to access beyond end of device [ 475.864751][ T290] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 475.891193][ T290] kworker/u8:5: attempt to access beyond end of device [ 475.891193][ T290] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 475.905071][ T290] kworker/u8:5: attempt to access beyond end of device [ 475.905071][ T290] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 475.918873][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 475.931712][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 475.931712][ T30] [ 475.945701][ T290] kworker/u8:5: attempt to access beyond end of device [ 475.945701][ T290] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 475.959815][ T290] kworker/u8:5: attempt to access beyond end of device [ 475.959815][ T290] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 475.968056][ T39] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 475.973757][ T290] kworker/u8:5: attempt to access beyond end of device [ 475.973757][ T290] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 476.003429][ T290] kworker/u8:5: attempt to access beyond end of device [ 476.003429][ T290] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 476.026077][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 476.047357][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 476.047357][ T39] [ 476.064707][T22576] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 476.173244][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 476.576980][T26768] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8991'. [ 476.748408][T26778] hugetlbfs: syz.5.8995 (26778): Using mlock ulimits for SHM_HUGETLB is obsolete [ 476.939154][ T28] audit: type=1400 audit(2000000331.794:24410): avc: denied { write } for pid=26786 comm="syz.7.8998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 477.013483][ T28] audit: type=1400 audit(2000000331.864:24411): avc: denied { ioctl } for pid=26788 comm="syz.7.9000" path="socket:[78117]" dev="sockfs" ino=78117 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 477.053192][T26791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9001'. [ 477.123481][ T28] audit: type=1400 audit(2000000331.974:24412): avc: denied { bind } for pid=26796 comm="syz.3.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 477.180185][ T28] audit: type=1400 audit(2000000332.004:24413): avc: denied { connect } for pid=26796 comm="syz.3.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 477.313567][T26813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9012'. [ 477.383979][T26818] loop5: detected capacity change from 0 to 764 [ 477.401590][T26822] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9016'. [ 477.417756][T26818] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 477.431244][T26818] Symlink component flag not implemented [ 477.446114][T26818] Symlink component flag not implemented (7) [ 477.832800][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9033'. [ 477.842779][T26853] loop7: detected capacity change from 0 to 8192 [ 477.870279][T26853] buffer_io_error: 12837 callbacks suppressed [ 477.870293][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 477.906338][T26863] loop5: detected capacity change from 0 to 512 [ 477.917402][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 477.926935][ T3371] IPVS: starting estimator thread 0... [ 477.937863][T26861] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 477.945964][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 477.947142][T26863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.954970][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 477.989534][T26863] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.998646][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 478.008501][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 478.016912][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 478.024044][T26865] IPVS: using max 2304 ests per chain, 115200 per kthread [ 478.025485][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 478.041127][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 478.049372][T26853] Buffer I/O error on dev loop7, logical block 57847, async page read [ 478.106864][T24653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.246762][T26880] loop3: detected capacity change from 0 to 1024 [ 478.278420][T26880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 478.294184][T26880] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.343430][T26880] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9039: bg 0: block 112: padding at end of block bitmap is not set [ 478.441221][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 478.562252][T26897] loop3: detected capacity change from 0 to 512 [ 478.605882][T26897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.628724][T26897] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.703465][T22576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.720270][T24056] ================================================================== [ 478.728409][T24056] BUG: KCSAN: data-race in __d_drop / fast_dput [ 478.734656][T24056] [ 478.736975][T24056] write to 0xffff88811b689910 of 8 bytes by task 2979 on cpu 0: [ 478.744591][T24056] __d_drop+0x14d/0x240 [ 478.748742][T24056] __dentry_kill+0x125/0x4d0 [ 478.753325][T24056] finish_dput+0x2b/0x200 [ 478.757644][T24056] dput+0x52/0x60 [ 478.761265][T24056] step_into_slowpath+0x38c/0x4c0 [ 478.766277][T24056] path_lookupat+0x330/0x500 [ 478.770857][T24056] filename_lookup+0x32a/0x390 [ 478.775659][T24056] do_readlinkat+0x74/0x2f0 [ 478.780174][T24056] __x64_sys_readlink+0x47/0x60 [ 478.785023][T24056] x64_sys_call+0x2b51/0x3020 [ 478.789694][T24056] do_syscall_64+0x12c/0x3b0 [ 478.794274][T24056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.800161][T24056] [ 478.802475][T24056] read to 0xffff88811b689910 of 8 bytes by task 24056 on cpu 1: [ 478.810095][T24056] fast_dput+0x5f/0x2c0 [ 478.814250][T24056] dput+0x24/0x60 [ 478.817871][T24056] filename_unlinkat+0x217/0x410 [ 478.822800][T24056] __se_sys_unlink+0x2b/0xe0 [ 478.827382][T24056] __x64_sys_unlink+0x1f/0x30 [ 478.832053][T24056] x64_sys_call+0x2eb6/0x3020 [ 478.836736][T24056] do_syscall_64+0x12c/0x3b0 [ 478.841398][T24056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.847315][T24056] [ 478.849624][T24056] value changed: 0xffff888237afafc8 -> 0x0000000000000000 [ 478.856801][T24056] [ 478.859107][T24056] Reported by Kernel Concurrency Sanitizer on: [ 478.865246][T24056] CPU: 1 UID: 0 PID: 24056 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 478.875747][T24056] Tainted: [W]=WARN [ 478.879533][T24056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.889580][T24056] ==================================================================