last executing test programs: 1m5.827064868s ago: executing program 0 (id=878): unshare(0x40200) r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) unshare(0x40400) 1m4.98884899s ago: executing program 0 (id=893): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0xbff4, 0x100000002}) 1m4.766113824s ago: executing program 0 (id=898): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) unlinkat(r2, &(0x7f0000000340)='./bus\x00', 0x200) 1m4.622437162s ago: executing program 0 (id=903): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@jqfmt_vfsold}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m4.404582166s ago: executing program 0 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1m4.093153745s ago: executing program 0 (id=916): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400)=r2, 0x12) 1m4.055826987s ago: executing program 32 (id=916): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400)=r2, 0x12) 17.796065547s ago: executing program 1 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 17.75175563s ago: executing program 1 (id=2121): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x73}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 17.671048065s ago: executing program 1 (id=2126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x634]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 17.406765052s ago: executing program 1 (id=2136): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x105142, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) 17.1018771s ago: executing program 1 (id=2140): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 16.547927044s ago: executing program 1 (id=2146): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) io_setup(0x101, &(0x7f0000000340)=0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x82, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2016}) 16.547790984s ago: executing program 33 (id=2146): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) io_setup(0x101, &(0x7f0000000340)=0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x82, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2016}) 2.014521326s ago: executing program 2 (id=2544): perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x607fa, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x120, 0xffff, 0x33f8, 0x1, 0x3, 0x20007, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r2, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 1.432785392s ago: executing program 6 (id=2552): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) 1.375966936s ago: executing program 6 (id=2553): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20582, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05, 0x0, 0x14, 0x2, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 1.328035659s ago: executing program 4 (id=2555): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_tgsigqueueinfo(r0, r1, 0x21, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 1.327454649s ago: executing program 4 (id=2556): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 1.104035813s ago: executing program 2 (id=2557): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 990.493399ms ago: executing program 2 (id=2558): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) io_setup(0x3ff, &(0x7f0000000500)) 927.670943ms ago: executing program 3 (id=2559): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x4, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 869.245507ms ago: executing program 3 (id=2560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x300, 0x3}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x0) 774.421913ms ago: executing program 3 (id=2562): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) lseek(r2, 0x3, 0x0) 756.047474ms ago: executing program 3 (id=2563): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 705.286327ms ago: executing program 2 (id=2565): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$kcm(0x22, 0x2, 0x21) unshare(0x28000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0x0, 0x10000}, 0x0, 0x0) 686.832278ms ago: executing program 3 (id=2566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = dup(r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008821}, 0x6000801) 552.899496ms ago: executing program 5 (id=2568): setreuid(0xee00, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000006c0)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 480.209781ms ago: executing program 5 (id=2569): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x121042, 0x0) write$P9_RVERSION(r1, &(0x7f0000000780)=ANY=[], 0x15) splice(r0, 0x0, r4, 0x0, 0x50f5d137, 0xd) 450.244693ms ago: executing program 6 (id=2570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 449.949803ms ago: executing program 4 (id=2571): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) 410.317845ms ago: executing program 6 (id=2572): r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 358.754008ms ago: executing program 5 (id=2573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 354.909828ms ago: executing program 5 (id=2574): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x10}) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 307.069402ms ago: executing program 6 (id=2575): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x298, 0x128, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x200, 0x230, 0x230, 0x200, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xe0, 0x128, 0x0, {0x1000000}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x3}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) syz_io_uring_setup(0x4025, &(0x7f0000000300)={0x0, 0x1a8, 0x2, 0x1, 0x10a}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000a80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@quota}, {@init_itable}, {@errors_remount}]}, 0x5, 0x569, &(0x7f0000000b00)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf35844", 0xe1}], 0x1) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 290.181833ms ago: executing program 5 (id=2576): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc002}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 277.555963ms ago: executing program 4 (id=2577): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x6037}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x48, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 207.425947ms ago: executing program 3 (id=2578): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x14) 194.984948ms ago: executing program 5 (id=2579): syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="050f38000610100aa3410000000ff09700303f00000710"]}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 187.012388ms ago: executing program 2 (id=2580): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 157.249071ms ago: executing program 4 (id=2581): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYBLOB='\a'], 0x78) 87.539905ms ago: executing program 2 (id=2582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 19.711159ms ago: executing program 4 (id=2583): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x100) 0s ago: executing program 6 (id=2584): socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$isdn(0x22, 0x2, 0x2) r2 = dup3(r1, r0, 0x0) bind$isdn_base(r2, &(0x7f0000000000)={0x22, 0x9, 0x6, 0xe, 0x3e}, 0x6) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000. [ 60.413129][ T5485] __nla_validate_parse: 2 callbacks suppressed [ 60.413198][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 60.944863][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 60.994383][ T5523] loop0: detected capacity change from 0 to 128 [ 61.185578][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.206895][ T5533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.237020][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.247695][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 61.273865][ T5478] syz.4.810 (5478) used greatest stack depth: 7232 bytes left [ 61.328320][ T5514] chnl_net:caif_netlink_parms(): no params data found [ 61.351116][ T5540] loop3: detected capacity change from 0 to 512 [ 61.359672][ T5540] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.369697][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.380053][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 61.396906][ T5540] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 61.415246][ T5540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 61.424472][ T5540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.434652][ T5540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.834: bg 0: block 361: padding at end of block bitmap is not set [ 61.454650][ T5540] EXT4-fs (loop3): Remounting filesystem read-only [ 61.463591][ T5540] EXT4-fs (loop3): 1 truncate cleaned up [ 61.469689][ T5540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 61.482831][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.493166][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 61.576456][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 61.633519][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.640760][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.649291][ T5514] bridge_slave_0: entered allmulticast mode [ 61.655771][ T5514] bridge_slave_0: entered promiscuous mode [ 61.664992][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.675331][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 61.687931][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.695038][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.702559][ T5514] bridge_slave_1: entered allmulticast mode [ 61.709186][ T5514] bridge_slave_1: entered promiscuous mode [ 61.729689][ T5514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.741897][ T5514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.764045][ T5514] team0: Port device team_slave_0 added [ 61.773176][ T5514] team0: Port device team_slave_1 added [ 61.810935][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.817970][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.843982][ T5514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.861294][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.868351][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.895162][ T5514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.936867][ T5569] loop1: detected capacity change from 0 to 128 [ 61.974511][ T5514] hsr_slave_0: entered promiscuous mode [ 62.003318][ T5514] hsr_slave_1: entered promiscuous mode [ 62.020847][ T5514] debugfs: 'hsr0' already exists in 'hsr' [ 62.026673][ T5514] Cannot create hsr debugfs directory [ 62.032433][ T37] bridge_slave_1: left allmulticast mode [ 62.038240][ T37] bridge_slave_1: left promiscuous mode [ 62.044023][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.054815][ T37] bridge_slave_0: left allmulticast mode [ 62.060516][ T37] bridge_slave_0: left promiscuous mode [ 62.066273][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.239430][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.250520][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.261981][ T37] bond0 (unregistering): Released all slaves [ 62.272521][ T37] bond1 (unregistering): Released all slaves [ 62.358196][ T37] hsr_slave_0: left promiscuous mode [ 62.374636][ T37] hsr_slave_1: left promiscuous mode [ 62.380476][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.387938][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.403104][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.410597][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.421859][ T37] veth1_macvtap: left promiscuous mode [ 62.427438][ T37] veth0_macvtap: left promiscuous mode [ 62.438073][ T37] veth1_vlan: left promiscuous mode [ 62.443468][ T37] veth0_vlan: left promiscuous mode [ 62.529728][ T37] team0 (unregistering): Port device team_slave_1 removed [ 62.544881][ T37] team0 (unregistering): Port device team_slave_0 removed [ 62.768293][ T5642] loop1: detected capacity change from 0 to 2048 [ 62.794428][ T5642] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.818199][ T5642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.832409][ T5650] netlink: 'syz.4.860': attribute type 4 has an invalid length. [ 62.875349][ T5642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.856: bg 0: block 234: padding at end of block bitmap is not set [ 62.914121][ T5642] EXT4-fs (loop1): Remounting filesystem read-only [ 62.921362][ T5642] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 62.944711][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.960564][ T5514] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.992728][ T5514] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.005409][ T5514] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.033442][ T5514] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.170589][ T5514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.200665][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 63.219426][ T5514] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.242286][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.249509][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.297004][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.304197][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.357282][ T5514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.367735][ T5514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.413287][ T5717] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.442610][ T5717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.565738][ T5514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.641890][ T5739] loop1: detected capacity change from 0 to 512 [ 63.671787][ T5739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.695444][ T5739] EXT4-fs (loop1): 1 truncate cleaned up [ 63.702890][ T5739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.796784][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.847403][ T5514] veth0_vlan: entered promiscuous mode [ 63.863765][ T5514] veth1_vlan: entered promiscuous mode [ 63.881708][ T5514] veth0_macvtap: entered promiscuous mode [ 63.889954][ T5514] veth1_macvtap: entered promiscuous mode [ 63.901961][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.914442][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.925882][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.954946][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.963813][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.977790][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.073040][ T5767] loop2: detected capacity change from 0 to 128 [ 64.381860][ T5782] loop0: detected capacity change from 0 to 512 [ 64.429036][ T5782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.445548][ T5782] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.475117][ T5792] loop2: detected capacity change from 0 to 512 [ 64.484636][ T5792] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.529963][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.563582][ T5796] loop2: detected capacity change from 0 to 512 [ 64.573672][ T5796] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.587925][ T5796] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.900: bad orphan inode 131083 [ 64.616842][ T5796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.665906][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.740083][ T5805] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.788381][ T5805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.833401][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 64.833418][ T29] audit: type=1400 audit(1770428293.230:688): avc: denied { mounton } for pid=5804 comm="syz.0.903" path="/185/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.895197][ T3313] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 34: comm syz-executor: path /185/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 64.916933][ T29] audit: type=1400 audit(1770428293.230:689): avc: denied { unmount } for pid=5514 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 64.940104][ T3313] EXT4-fs (loop0): Remounting filesystem read-only [ 64.950410][ T29] audit: type=1400 audit(1770428293.350:690): avc: denied { rmdir } for pid=3313 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.973182][ T29] audit: type=1400 audit(1770428293.350:691): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.039264][ T5824] netlink: 104 bytes leftover after parsing attributes in process `syz.4.911'. [ 65.068703][ T29] audit: type=1400 audit(1770428293.440:692): avc: denied { nlmsg_read } for pid=5822 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.129234][ T5830] set_capacity_and_notify: 2 callbacks suppressed [ 65.129272][ T5830] loop3: detected capacity change from 0 to 512 [ 65.171552][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.187529][ T5835] netlink: 'syz.1.914': attribute type 6 has an invalid length. [ 65.199671][ T5830] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.211121][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.266093][ T5840] tipc: Started in network mode [ 65.271007][ T5840] tipc: Node identity ac1414aa, cluster identity 4711 [ 65.317132][ T5840] tipc: Enabled bearer , priority 10 [ 65.423345][ T5854] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 65.429840][ T5854] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 65.480265][ T5860] loop1: detected capacity change from 0 to 512 [ 65.488663][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.497506][ T29] audit: type=1326 audit(1770428293.880:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246f2aaeb9 code=0x7ffc0000 [ 65.521024][ T29] audit: type=1326 audit(1770428293.880:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246f2aaeb9 code=0x7ffc0000 [ 65.537919][ T5862] loop2: detected capacity change from 0 to 1024 [ 65.544670][ T29] audit: type=1326 audit(1770428293.880:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f246f2aaeb9 code=0x7ffc0000 [ 65.574039][ T29] audit: type=1326 audit(1770428293.880:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f246f2aac22 code=0x7ffc0000 [ 65.597201][ T29] audit: type=1326 audit(1770428293.880:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f246f26b78e code=0x7ffc0000 [ 65.656443][ T5860] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.665757][ T5860] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 65.675651][ T5862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.713218][ T5862] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.742376][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 65.754901][ T5860] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 65.772615][ T37] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 65.788719][ T5860] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.800221][ T5860] System zones: 0-2, 18-18, 34-35 [ 65.806247][ T5860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.824330][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 65.836917][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.836917][ T37] [ 65.849110][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.877466][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.877829][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.893644][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.919905][ T5844] bridge_slave_0: entered allmulticast mode [ 65.927077][ T5844] bridge_slave_0: entered promiscuous mode [ 65.934189][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.935606][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.941461][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.955088][ T5844] bridge_slave_1: entered allmulticast mode [ 65.964866][ T5844] bridge_slave_1: entered promiscuous mode [ 65.986898][ T5883] netlink: 'syz.3.928': attribute type 6 has an invalid length. [ 66.029326][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.042347][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.086362][ T5844] team0: Port device team_slave_0 added [ 66.094965][ T5886] delete_channel: no stack [ 66.103037][ T5844] team0: Port device team_slave_1 added [ 66.145563][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.152547][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.178523][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.197004][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.204008][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.230050][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.273446][ T5898] loop1: detected capacity change from 0 to 512 [ 66.281917][ T5844] hsr_slave_0: entered promiscuous mode [ 66.288839][ T5844] hsr_slave_1: entered promiscuous mode [ 66.295036][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 66.300806][ T5844] Cannot create hsr debugfs directory [ 66.307926][ T5898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.328464][ T5898] EXT4-fs (loop1): 1 truncate cleaned up [ 66.334549][ T3399] tipc: Node number set to 2886997162 [ 66.340759][ T5898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.440721][ T5844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.461718][ T5844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.470840][ T5844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.480254][ T5844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.521255][ T5916] xt_hashlimit: size too large, truncated to 1048576 [ 66.567145][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.589926][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.650706][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.657920][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.696911][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.704042][ T5212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.750337][ T5923] netlink: 'syz.4.941': attribute type 6 has an invalid length. [ 66.789565][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 66.824704][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.992436][ T5844] veth0_vlan: entered promiscuous mode [ 67.007008][ T5844] veth1_vlan: entered promiscuous mode [ 67.031526][ T5844] veth0_macvtap: entered promiscuous mode [ 67.055502][ T5844] veth1_macvtap: entered promiscuous mode [ 67.077909][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.089713][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.109314][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144138][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.165971][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.186605][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.340625][ T5898] syz.1.933 (5898) used greatest stack depth: 7040 bytes left [ 67.367019][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.491892][ T5981] tipc: Started in network mode [ 67.496876][ T5981] tipc: Node identity ac1414aa, cluster identity 4711 [ 67.508892][ T5981] tipc: Enabled bearer , priority 10 [ 67.512088][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 67.533112][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.586160][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.593379][ T5984] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 67.606069][ T5984] bond0: (slave gre1): Error -95 calling set_mac_address [ 67.741848][ T6014] netlink: 35 bytes leftover after parsing attributes in process `syz.5.975'. [ 67.750963][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.975'. [ 67.799855][ T6020] tipc: Started in network mode [ 67.804859][ T6020] tipc: Node identity ac1414aa, cluster identity 4711 [ 67.811714][ T6020] tipc: Enabling of bearer rejected, failed to enable media [ 67.878801][ T6033] loop3: detected capacity change from 0 to 256 [ 67.891686][ T6033] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.984909][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.098715][ T6052] loop2: detected capacity change from 0 to 1024 [ 68.147228][ T6052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.171495][ T6054] netlink: 'syz.4.990': attribute type 3 has an invalid length. [ 68.179332][ T6054] netlink: 'syz.4.990': attribute type 4 has an invalid length. [ 68.187168][ T6054] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.990'. [ 68.201641][ T6052] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.989: inode #3479939154: comm syz.2.989: iget: illegal inode # [ 68.237856][ T6052] EXT4-fs (loop2): Remounting filesystem read-only [ 68.271393][ T6052] EXT4-fs warning (device loop2): ext4_xattr_block_set:2200: inode #19: comm syz.2.989: dec ref error=-30 [ 68.325403][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.373508][ T6065] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.995'. [ 68.390631][ T6067] loop2: detected capacity change from 0 to 512 [ 68.415333][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.434668][ T6067] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.504458][ T3407] tipc: Node number set to 2886997162 [ 68.526830][ T6079] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.994: corrupted inode contents [ 68.553663][ T6079] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.994: mark_inode_dirty error [ 68.578201][ T6079] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.994: corrupted inode contents [ 68.590769][ T6079] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #18: comm syz.2.994: mark_inode_dirty error [ 68.603089][ T6079] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #18: comm syz.2.994: mark inode dirty (error -117) [ 68.617875][ T6079] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 68.706608][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.401291][ T6158] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1021'. [ 69.411586][ T6158] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1021'. [ 69.616588][ T6183] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1031'. [ 69.728500][ T6193] loop2: detected capacity change from 0 to 512 [ 69.738468][ T6193] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.763871][ T6193] EXT4-fs (loop2): 1 truncate cleaned up [ 69.770223][ T6193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.800036][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.841633][ T6201] batadv_slave_1: entered promiscuous mode [ 69.849806][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 69.877911][ T6201] batadv_slave_1 (unregistering): left promiscuous mode [ 69.890431][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.027461][ T6216] syzkaller0: entered promiscuous mode [ 70.033150][ T6216] syzkaller0: entered allmulticast mode [ 70.078356][ T6223] syz_tun: entered promiscuous mode [ 70.174108][ T6233] netlink: 'syz.3.1054': attribute type 21 has an invalid length. [ 70.362131][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 70.362151][ T29] audit: type=1400 audit(1770428298.760:798): avc: denied { write } for pid=6246 comm="syz.2.1061" path="socket:[13095]" dev="sockfs" ino=13095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 70.407587][ T6255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.455705][ T6255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.475123][ T29] audit: type=1400 audit(1770428298.880:799): avc: denied { bind } for pid=6257 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.553432][ T6266] loop5: detected capacity change from 0 to 2048 [ 70.571186][ T6255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.644801][ T6274] loop5: detected capacity change from 0 to 512 [ 70.657805][ T6255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.682009][ T6274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.768059][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.811952][ T5212] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.839657][ T6278] netem: incorrect gi model size [ 70.848357][ T5212] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.872090][ T5212] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.891490][ T5212] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.956084][ T6283] loop5: detected capacity change from 0 to 512 [ 70.963316][ T6283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.973306][ T6283] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1074: iget: bad i_size value: 38620345925642 [ 70.986272][ T6283] EXT4-fs (loop5): Remounting filesystem read-only [ 71.121245][ T6294] loop3: detected capacity change from 0 to 128 [ 71.135634][ T29] audit: type=1400 audit(1770428299.540:800): avc: denied { map } for pid=6291 comm="syz.5.1078" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.224747][ T6296] netlink: 'syz.3.1081': attribute type 6 has an invalid length. [ 71.232639][ T6296] netlink: 'syz.3.1081': attribute type 5 has an invalid length. [ 71.272118][ T6296] netlink: 'syz.3.1081': attribute type 6 has an invalid length. [ 71.280067][ T6296] netlink: 'syz.3.1081': attribute type 5 has an invalid length. [ 71.298108][ T6298] ip6gre1: entered promiscuous mode [ 71.303458][ T6298] ip6gre1: entered allmulticast mode [ 71.468028][ T29] audit: type=1326 audit(1770428299.870:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 71.513358][ T29] audit: type=1326 audit(1770428299.900:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 71.536917][ T29] audit: type=1326 audit(1770428299.900:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 71.560246][ T29] audit: type=1326 audit(1770428299.900:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 71.583622][ T29] audit: type=1326 audit(1770428299.900:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 71.606991][ T29] audit: type=1326 audit(1770428299.900:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 71.630346][ T29] audit: type=1326 audit(1770428299.900:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 71.795493][ T6346] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.795493][ T6346] program syz.1.1093 not setting count and/or reply_len properly [ 72.291139][ T6366] loop3: detected capacity change from 0 to 512 [ 72.315118][ T6366] EXT4-fs: Ignoring removed i_version option [ 72.354814][ T6366] EXT4-fs (loop3): 1 truncate cleaned up [ 72.806644][ T6391] __nla_validate_parse: 6 callbacks suppressed [ 72.806680][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 72.884763][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 72.980406][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1117'. [ 73.010146][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1117'. [ 73.086544][ T6404] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1116'. [ 73.164771][ T6411] syzkaller1: entered promiscuous mode [ 73.170338][ T6411] syzkaller1: entered allmulticast mode [ 73.267778][ T6418] SELinux: failed to load policy [ 73.326042][ T6425] loop3: detected capacity change from 0 to 128 [ 73.339611][ T6425] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.374790][ T6425] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.456244][ T6437] loop1: detected capacity change from 0 to 128 [ 73.530410][ T6437] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.665690][ T6444] SELinux: failed to load policy [ 73.799296][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 74.204016][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1151'. [ 74.219006][ T6487] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1150'. [ 74.391042][ T6497] loop7: detected capacity change from 0 to 16384 [ 74.554383][ T6498] loop7: detected capacity change from 16384 to 0 [ 74.992566][ T6529] sctp: [Deprecated]: syz.5.1166 (pid 6529) Use of int in max_burst socket option deprecated. [ 74.992566][ T6529] Use struct sctp_assoc_value instead [ 75.473177][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 75.473195][ T29] audit: type=1400 audit(1770428303.870:861): avc: denied { associate } for pid=6578 comm="syz.1.1188" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.651232][ T6597] netlink: 'syz.1.1197': attribute type 19 has an invalid length. [ 75.659375][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 75.671899][ T6597] netlink: 'syz.1.1197': attribute type 19 has an invalid length. [ 75.671896][ T6338] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.672083][ T6338] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.679770][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 75.706572][ T6338] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.715601][ T6338] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.741090][ T6599] loop1: detected capacity change from 0 to 128 [ 75.753339][ T6599] EXT4-fs mount: 6 callbacks suppressed [ 75.753354][ T6599] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.771958][ T6599] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.839292][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.869355][ T6603] loop5: detected capacity change from 0 to 8192 [ 76.060448][ T6619] loop5: detected capacity change from 0 to 2048 [ 76.078100][ T6619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.116515][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 76.128167][ T6626] sg_read: process 560 (syz.1.1209) changed security contexts after opening file descriptor, this is not allowed. [ 76.141629][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.211674][ T29] audit: type=1400 audit(1770428304.610:862): avc: denied { setopt } for pid=6630 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.231600][ T29] audit: type=1400 audit(1770428304.610:863): avc: denied { listen } for pid=6630 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.276462][ T6635] netlink: 'syz.4.1214': attribute type 7 has an invalid length. [ 76.284472][ T6635] netlink: 'syz.4.1214': attribute type 7 has an invalid length. [ 76.337456][ T6642] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 76.346568][ T29] audit: type=1400 audit(1770428304.750:864): avc: denied { mount } for pid=6639 comm="syz.4.1216" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 76.650984][ T6684] loop5: detected capacity change from 0 to 512 [ 76.651170][ T29] audit: type=1400 audit(1770428305.050:865): avc: denied { kexec_image_load } for pid=6685 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 76.664729][ T6684] EXT4-fs: Mount option(s) incompatible with ext2 [ 76.779634][ T29] audit: type=1400 audit(1770428305.180:866): avc: denied { shutdown } for pid=6693 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.799512][ T29] audit: type=1400 audit(1770428305.180:867): avc: denied { mounton } for pid=6693 comm="syz.3.1240" path="/258/file0" dev="tmpfs" ino=1351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 76.847202][ T6698] loop3: detected capacity change from 0 to 128 [ 76.923916][ T6710] loop5: detected capacity change from 0 to 512 [ 76.940685][ T6710] EXT4-fs (loop5): orphan cleanup on readonly fs [ 76.947151][ T6710] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 76.973207][ T6710] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 76.999384][ T6710] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1248: attempt to clear invalid blocks 2 len 1 [ 77.013503][ T6714] netlink: 'syz.3.1249': attribute type 26 has an invalid length. [ 77.022861][ T6714] netlink: 'syz.3.1249': attribute type 26 has an invalid length. [ 77.032110][ T6710] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1248: invalid indirect mapped block 1819239214 (level 0) [ 77.054940][ T6710] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1248: invalid indirect mapped block 1819239214 (level 1) [ 77.095082][ T6710] EXT4-fs (loop5): 1 truncate cleaned up [ 77.121451][ T6710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.147622][ T6710] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 77.150218][ T29] audit: type=1400 audit(1770428305.540:868): avc: denied { remount } for pid=6709 comm="syz.5.1248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.188587][ T6710] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 77.212092][ T6710] EXT4-fs: user quota file already specified [ 77.252710][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.321760][ T6730] netlink: 'syz.5.1258': attribute type 6 has an invalid length. [ 77.334197][ T6730] netlink: 'syz.5.1258': attribute type 6 has an invalid length. [ 77.334324][ T6336] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.351615][ T6336] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.361664][ T6336] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.384140][ T6336] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.103395][ T29] audit: type=1400 audit(1770428306.503:869): avc: denied { getopt } for pid=6771 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.191450][ T29] audit: type=1326 audit(1770428306.583:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 78.351755][ T6796] Invalid ELF header magic: != ELF [ 78.435970][ T6803] xt_hashlimit: max too large, truncated to 1048576 [ 78.707092][ T6831] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 78.716368][ T6831] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 78.727618][ T6831] __nla_validate_parse: 14 callbacks suppressed [ 78.727648][ T6831] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1301'. [ 78.891617][ T6846] tls_set_device_offload_rx: netdev not found [ 78.975447][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1313'. [ 78.984399][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1313'. [ 79.007936][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1313'. [ 79.016992][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1313'. [ 79.117559][ T6875] netlink: 'syz.5.1321': attribute type 1 has an invalid length. [ 79.142350][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.156193][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 79.165322][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1323'. [ 79.174681][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 79.184750][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1323'. [ 79.199795][ T6875] bond1: (slave geneve2): making interface the new active one [ 79.215307][ T6875] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 79.515460][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1336'. [ 79.610871][ T6892] loop2: detected capacity change from 0 to 512 [ 79.618340][ T6892] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 79.629760][ T6916] netlink: 'syz.5.1340': attribute type 9 has an invalid length. [ 79.723238][ T6921] delete_channel: no stack [ 79.756503][ T6925] loop3: detected capacity change from 0 to 1024 [ 79.777853][ T6925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 79.790804][ T6925] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 79.795980][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.819956][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.828386][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 79.976807][ T6951] loop2: detected capacity change from 0 to 256 [ 80.006096][ T6953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6953 comm=syz.5.1354 [ 80.135431][ T6964] veth0: entered promiscuous mode [ 80.141893][ T6964] veth0: left promiscuous mode [ 81.030650][ T6999] loop2: detected capacity change from 0 to 512 [ 81.048205][ T6999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.066937][ T6999] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.084020][ T6999] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1374: corrupted inode contents [ 81.109756][ T6999] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1374: mark_inode_dirty error [ 81.125024][ T6999] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1374: corrupted inode contents [ 81.137875][ T7007] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1374: corrupted inode contents [ 81.152613][ T7007] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1374: mark_inode_dirty error [ 81.164476][ T7007] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1374: corrupted inode contents [ 81.177904][ T7007] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1374: mark_inode_dirty error [ 81.189575][ T7007] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1374: corrupted inode contents [ 81.201735][ T7007] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1374: mark_inode_dirty error [ 81.213695][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 81.213712][ T29] audit: type=1400 audit(1770428309.623:943): avc: denied { create } for pid=6998 comm="syz.2.1374" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 81.215943][ T6999] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1374: corrupted inode contents [ 81.314434][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.545826][ T7025] SELinux: failed to load policy [ 82.092271][ T29] audit: type=1400 audit(1770428310.493:944): avc: denied { create } for pid=7063 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.302953][ T7092] loop1: detected capacity change from 0 to 1024 [ 82.334680][ T7092] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.360850][ T7092] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.369396][ T7092] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.376027][ T7092] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.1413: Bad quota inum: 2, type: 0 [ 82.391549][ T7092] EXT4-fs (loop1): Remounting filesystem read-only [ 82.398178][ T7092] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 82.413030][ T7092] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 82.416217][ T7101] xt_hashlimit: size too large, truncated to 1048576 [ 82.435912][ T7092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.466184][ T7092] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.564794][ T7113] loop1: detected capacity change from 0 to 512 [ 82.569140][ T29] audit: type=1400 audit(1770428310.973:945): avc: denied { setopt } for pid=7110 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.574878][ T7113] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.644893][ T7113] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1420: bad orphan inode 131083 [ 82.656378][ T7113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.726965][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.766601][ T29] audit: type=1400 audit(1770428311.163:946): avc: denied { create } for pid=7129 comm="syz.1.1428" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.807608][ T7132] loop3: detected capacity change from 0 to 512 [ 82.817447][ T7132] journal_path: Non-blockdev passed as './bus' [ 82.823665][ T7132] EXT4-fs: error: could not find journal device path [ 82.852981][ T29] audit: type=1400 audit(1770428311.193:947): avc: denied { write } for pid=7129 comm="syz.1.1428" name="file0" dev="tmpfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.875450][ T29] audit: type=1400 audit(1770428311.193:948): avc: denied { open } for pid=7129 comm="syz.1.1428" path="/278/file0" dev="tmpfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.898546][ T29] audit: type=1400 audit(1770428311.193:949): avc: denied { ioctl } for pid=7129 comm="syz.1.1428" path="/278/file0" dev="tmpfs" ino=1462 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.130364][ T29] audit: type=1400 audit(1770428311.523:950): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.163537][ T29] audit: type=1400 audit(1770428311.563:951): avc: denied { append } for pid=7164 comm="syz.5.1443" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.187286][ T29] audit: type=1400 audit(1770428311.563:952): avc: denied { map } for pid=7164 comm="syz.5.1443" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.552235][ T7189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.567259][ T7189] bond2: (slave batadv1): Opening slave failed [ 83.742761][ T7199] loop3: detected capacity change from 0 to 512 [ 83.764262][ T7199] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.792545][ T7199] EXT4-fs (loop3): 1 truncate cleaned up [ 83.809054][ T7199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.852315][ T7204] loop2: detected capacity change from 0 to 512 [ 83.894661][ T7204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.909604][ T7204] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.955189][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.148306][ T36] IPVS: starting estimator thread 0... [ 84.225465][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.234635][ T7233] IPVS: using max 2256 ests per chain, 112800 per kthread [ 84.245013][ T7240] validate_nla: 3 callbacks suppressed [ 84.245032][ T7240] netlink: 'syz.1.1470': attribute type 15 has an invalid length. [ 84.392744][ T7267] syzkaller0: entered promiscuous mode [ 84.398409][ T7267] syzkaller0: entered allmulticast mode [ 84.483475][ T7279] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 84.853592][ T7311] loop3: detected capacity change from 0 to 1024 [ 84.885724][ T7311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.901974][ T7311] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.917864][ T7311] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1499: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.971560][ T7311] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 84.983973][ T7311] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.983973][ T7311] [ 85.018183][ T6338] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 5) [ 85.030893][ T7320] loop5: detected capacity change from 0 to 512 [ 85.043101][ T6338] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 85.055521][ T6338] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.055521][ T6338] [ 85.069899][ T7320] EXT4-fs: Mount option(s) incompatible with ext2 [ 85.080972][ T6338] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:28: lblock 8 mapped to illegal pblock 8 (length 8) [ 85.106942][ T6338] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 85.119380][ T6338] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.119380][ T6338] [ 85.130554][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.447261][ T7361] loop2: detected capacity change from 0 to 512 [ 85.476363][ T7361] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1521: bg 0: block 393: padding at end of block bitmap is not set [ 85.513322][ T7361] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 85.529303][ T7361] EXT4-fs (loop2): 2 truncates cleaned up [ 85.555465][ T7361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.675835][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.128364][ T7381] SELinux: failed to load policy [ 86.585674][ T7400] __nla_validate_parse: 6 callbacks suppressed [ 86.585689][ T7400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1537'. [ 87.045167][ T7429] loop2: detected capacity change from 0 to 128 [ 87.120462][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 87.272141][ T7435] loop2: detected capacity change from 0 to 1024 [ 87.279272][ T7435] EXT4-fs: inline encryption not supported [ 87.315959][ T7435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.340653][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 87.340667][ T29] audit: type=1400 audit(1770428315.743:964): avc: denied { unlink } for pid=7434 comm="syz.2.1551" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.432670][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.517432][ T7441] netlink: 'syz.2.1553': attribute type 18 has an invalid length. [ 87.525443][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 87.547885][ T6306] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.557535][ T7441] netlink: 'syz.2.1553': attribute type 18 has an invalid length. [ 87.565410][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 87.574717][ T6306] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.593745][ T6306] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.596690][ T29] audit: type=1326 audit(1770428315.993:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.625895][ T29] audit: type=1326 audit(1770428315.993:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.634358][ T6306] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.720666][ T29] audit: type=1326 audit(1770428316.063:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.744007][ T29] audit: type=1326 audit(1770428316.063:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.767463][ T29] audit: type=1326 audit(1770428316.063:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.790955][ T29] audit: type=1326 audit(1770428316.073:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.814346][ T29] audit: type=1326 audit(1770428316.073:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.837696][ T29] audit: type=1326 audit(1770428316.073:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 87.909818][ T29] audit: type=1400 audit(1770428316.313:973): avc: denied { create } for pid=7454 comm="syz.1.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.474623][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1576'. [ 88.483667][ T7538] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1576'. [ 89.556073][ T7653] loop5: detected capacity change from 0 to 256 [ 89.564674][ T7653] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 89.920494][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 89.939691][ T7729] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1612'. [ 90.055753][ T7747] loop1: detected capacity change from 0 to 128 [ 90.165780][ T55] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 90.174022][ T55] FAT-fs (loop1): Filesystem has been set read-only [ 90.221878][ T55] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 90.392534][ T7805] netlink: 'syz.4.1629': attribute type 3 has an invalid length. [ 90.400493][ T7805] netlink: 'syz.4.1629': attribute type 1 has an invalid length. [ 90.408291][ T7805] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1629'. [ 90.858766][ T7825] sctp: [Deprecated]: syz.4.1637 (pid 7825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.858766][ T7825] Use struct sctp_sack_info instead [ 90.977105][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 90.989230][ T7844] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 91.519497][ T7894] loop1: detected capacity change from 0 to 512 [ 91.529811][ T7894] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.541653][ T7894] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 91.551991][ T7894] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1668: Corrupt directory, running e2fsck is recommended [ 91.566197][ T7894] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 91.574734][ T7894] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.1668: corrupted in-inode xattr: e_name out of bounds [ 91.588959][ T7894] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1668: couldn't read orphan inode 15 (err -117) [ 91.601567][ T7894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.618255][ T7894] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.629977][ T7894] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 91.640169][ T7894] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1668: Corrupt directory, running e2fsck is recommended [ 91.655246][ T7894] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.666832][ T7894] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 91.676950][ T7894] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1668: Corrupt directory, running e2fsck is recommended [ 91.698393][ T7894] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.710022][ T7894] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 91.720159][ T7894] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1668: Corrupt directory, running e2fsck is recommended [ 91.736653][ T7894] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.748438][ T7894] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1668: path /331/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 91.770070][ T7894] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 8: comm syz.1.1668: path /331/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 91.806823][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.141050][ T7915] loop2: detected capacity change from 0 to 32768 [ 92.169262][ T7923] random: crng reseeded on system resumption [ 92.184906][ T3304] loop2: p1 p3 < > [ 92.207673][ T7915] loop2: p1 p3 < > [ 92.348469][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 92.348541][ T29] audit: type=1326 audit(1770428320.753:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.424447][ T29] audit: type=1326 audit(1770428320.793:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.447974][ T29] audit: type=1326 audit(1770428320.793:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.471416][ T29] audit: type=1326 audit(1770428320.793:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.494967][ T29] audit: type=1326 audit(1770428320.793:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.518462][ T29] audit: type=1326 audit(1770428320.793:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.542121][ T29] audit: type=1326 audit(1770428320.793:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.565695][ T29] audit: type=1326 audit(1770428320.793:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7933 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 92.611122][ T7941] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.614979][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 92.619775][ T7941] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 92.636860][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 92.653958][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 92.666043][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 92.688023][ T7947] bond3: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 92.700009][ T7952] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 92.712165][ T7952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.043419][ T7972] loop1: detected capacity change from 0 to 512 [ 93.053278][ T7972] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.064867][ T7972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 93.072817][ T7972] System zones: 1-12 [ 93.077655][ T7972] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.085160][ T7972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1699: bg 0: block 361: padding at end of block bitmap is not set [ 93.110528][ T7972] EXT4-fs (loop1): Remounting filesystem read-only [ 93.117228][ T7972] EXT4-fs (loop1): 1 truncate cleaned up [ 93.123458][ T7972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 93.565113][ T7990] loop3: detected capacity change from 0 to 2048 [ 93.604847][ T7990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.640327][ T7999] netlink: 'syz.4.1710': attribute type 21 has an invalid length. [ 93.697721][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 93.792381][ T7989] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 93.807486][ T7989] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 6 with error 28 [ 93.819853][ T7989] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.819853][ T7989] [ 93.829643][ T7989] EXT4-fs (loop3): Total free blocks count 0 [ 93.835766][ T7989] EXT4-fs (loop3): Free/Dirty block details [ 93.841700][ T7989] EXT4-fs (loop3): free_blocks=2415919504 [ 93.847539][ T7989] EXT4-fs (loop3): dirty_blocks=16 [ 93.852776][ T7989] EXT4-fs (loop3): Block reservation details [ 93.858835][ T7989] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 93.914919][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.939903][ T8020] loop2: detected capacity change from 0 to 1024 [ 93.964337][ T8020] EXT4-fs: Ignoring removed orlov option [ 93.985220][ T8020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.002178][ T8012] SELinux: failed to load policy [ 94.007459][ T8026] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 94.058141][ T8026] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 94.079946][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.175321][ T8042] loop3: detected capacity change from 0 to 128 [ 94.222292][ T8042] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.237618][ T8042] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.250243][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 94.304339][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.435936][ T8068] bridge_slave_0: left allmulticast mode [ 94.441636][ T8068] bridge_slave_0: left promiscuous mode [ 94.447390][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.482484][ T8068] bridge_slave_1: left allmulticast mode [ 94.488251][ T8068] bridge_slave_1: left promiscuous mode [ 94.493916][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.516041][ T8068] bond0: (slave bond_slave_0): Releasing backup interface [ 94.528026][ T8068] bond0: (slave bond_slave_1): Releasing backup interface [ 94.539152][ T3370] kernel write not supported for file bpf-prog (pid: 3370 comm: kworker/1:2) [ 94.556007][ T8068] team0: Port device team_slave_0 removed [ 94.564034][ T8068] team0: Port device team_slave_1 removed [ 94.590375][ T8068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.617524][ T8068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.629934][ T8068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.735718][ T8093] openvswitch: netlink: Missing key (keys=40, expected=80) [ 94.989167][ T8100] loop1: detected capacity change from 0 to 256 [ 95.132141][ T8109] loop5: detected capacity change from 0 to 1024 [ 95.144123][ T8109] EXT4-fs: Ignoring removed bh option [ 95.167725][ T8109] EXT4-fs (loop5): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 95.215744][ T8113] sd 0:0:1:0: device reset [ 95.257346][ T8109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.386452][ T8109] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1757: Allocating blocks 497-513 which overlap fs metadata [ 95.444820][ T8109] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1757: Allocating blocks 497-513 which overlap fs metadata [ 95.489290][ T8108] EXT4-fs (loop5): pa ffff8881079d8700: logic 48, phys. 177, len 21 [ 95.497444][ T8108] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 95.533261][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.892154][ T3470] kernel write not supported for file bpf-map (pid: 3470 comm: kworker/1:5) [ 96.395730][ T8201] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 96.403657][ T8201] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 96.523907][ T8211] loop1: detected capacity change from 0 to 512 [ 96.555350][ T8211] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.587971][ T8211] EXT4-fs (loop1): 1 truncate cleaned up [ 96.597423][ T8221] loop2: detected capacity change from 0 to 128 [ 96.605057][ T8211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.632855][ T8221] EXT4-fs: Ignoring removed nobh option [ 96.675763][ T8221] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.703332][ T8221] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.729852][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.767713][ T5514] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.031160][ T8244] loop3: detected capacity change from 0 to 8192 [ 97.045295][ T8244] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.120296][ T8251] FAT-fs (loop3): error, clusters badly computed (1494 != 18) [ 97.120299][ T8249] FAT-fs (loop3): error, clusters badly computed (1590 != 1589) [ 97.120326][ T8249] FAT-fs (loop3): Filesystem has been set read-only [ 97.137037][ T8251] FAT-fs (loop3): error, clusters badly computed (1496 != 19) [ 97.146994][ T8249] FAT-fs (loop3): error, clusters badly computed (1592 != 1590) [ 97.160370][ T8249] FAT-fs (loop3): error, clusters badly computed (1593 != 1591) [ 97.170361][ T8249] FAT-fs (loop3): error, clusters badly computed (1594 != 1592) [ 97.180375][ T8249] FAT-fs (loop3): error, clusters badly computed (1595 != 1593) [ 97.190383][ T8249] FAT-fs (loop3): error, clusters badly computed (1596 != 1594) [ 97.200225][ T8249] FAT-fs (loop3): error, clusters badly computed (1597 != 1595) [ 97.210456][ T8249] FAT-fs (loop3): error, clusters badly computed (1598 != 1596) [ 97.330736][ T8254] loop2: detected capacity change from 0 to 4096 [ 97.376919][ T8254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.497840][ T8260] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 97.510951][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.613134][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 97.613197][ T29] audit: type=1326 audit(1770428326.013:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 97.655103][ T29] audit: type=1326 audit(1770428326.053:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 97.678585][ T29] audit: type=1326 audit(1770428326.053:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 97.702194][ T29] audit: type=1326 audit(1770428326.053:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 97.725720][ T29] audit: type=1326 audit(1770428326.053:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 97.750086][ T29] audit: type=1326 audit(1770428326.053:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 97.773771][ T29] audit: type=1326 audit(1770428326.053:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.5.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ec9faeb9 code=0x7ffc0000 [ 98.106397][ T8288] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1828'. [ 98.308360][ T8298] loop1: detected capacity change from 0 to 512 [ 98.344679][ T8298] EXT4-fs: Ignoring removed nobh option [ 98.350365][ T8298] EXT4-fs: Ignoring removed bh option [ 98.447858][ T8298] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 98.469100][ T8298] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1832: invalid indirect mapped block 256 (level 1) [ 98.487554][ T8294] loop2: detected capacity change from 0 to 32768 [ 98.547137][ T8294] loop2: p1 p3 < > [ 98.630098][ T8298] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1832: invalid indirect mapped block 2683928664 (level 1) [ 98.676617][ T8304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1835'. [ 98.723645][ T8298] EXT4-fs (loop1): 1 truncate cleaned up [ 98.740175][ T29] audit: type=1400 audit(1770428327.143:1163): avc: denied { getopt } for pid=8305 comm="syz.4.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.792640][ T8298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.814703][ T29] audit: type=1400 audit(1770428327.173:1164): avc: denied { ioctl } for pid=8307 comm="syz.2.1836" path="socket:[20486]" dev="sockfs" ino=20486 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.858947][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 98.871346][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.935230][ T8298] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1832: invalid indirect mapped block 65536 (level 1) [ 99.028186][ T8298] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1832: invalid indirect mapped block 4294967295 (level 0) [ 99.151485][ T8332] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1847'. [ 99.246539][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.256132][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 99.265171][ T8338] netlink: 'syz.4.1849': attribute type 7 has an invalid length. [ 99.273173][ T8338] netlink: 'syz.4.1849': attribute type 8 has an invalid length. [ 99.281151][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 99.304838][ T29] audit: type=1326 audit(1770428327.713:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.3.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 99.654573][ T8360] loop1: detected capacity change from 0 to 1024 [ 99.743205][ T8360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.978748][ T8360] EXT4-fs (loop1): shut down requested (1) [ 100.028513][ T8402] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 100.134428][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 100.143377][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 100.152410][ T8408] netlink: 'syz.3.1880': attribute type 7 has an invalid length. [ 100.199179][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 100.208199][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 100.217182][ T8408] netlink: 'syz.3.1880': attribute type 7 has an invalid length. [ 100.231548][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.244371][ T8411] netlink: 'syz.5.1882': attribute type 2 has an invalid length. [ 100.252154][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1882'. [ 100.398802][ T8421] loop5: detected capacity change from 0 to 128 [ 100.425133][ T8421] syz.5.1889: attempt to access beyond end of device [ 100.425133][ T8421] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 100.455230][ T8421] syz.5.1889: attempt to access beyond end of device [ 100.455230][ T8421] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 100.469143][ T8421] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 100.505902][ T8432] loop3: detected capacity change from 0 to 128 [ 100.525568][ T8429] syz.5.1889: attempt to access beyond end of device [ 100.525568][ T8429] loop5: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 100.561389][ T8432] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.674309][ T8449] loop3: detected capacity change from 0 to 512 [ 100.739028][ T8449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.792250][ T8449] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.956705][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.138324][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.737783][ T8502] loop3: detected capacity change from 0 to 4096 [ 101.785057][ T8502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.839905][ T8507] syz_tun: entered allmulticast mode [ 101.870163][ T8507] syz_tun: left allmulticast mode [ 101.888718][ T8509] loop1: detected capacity change from 0 to 512 [ 101.985595][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.099573][ T8512] syz.1.1924: attempt to access beyond end of device [ 102.099573][ T8512] loop1: rw=0, sector=432, nr_sectors = 128 limit=512 [ 102.242290][ T8524] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 102.256272][ T6306] kworker/u8:9: attempt to access beyond end of device [ 102.256272][ T6306] loop1: rw=1, sector=560, nr_sectors = 2176 limit=512 [ 102.256354][ T8526] smc: net device bond0 applied user defined pnetid SYZ2 [ 102.256848][ T8526] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1931'. [ 102.297623][ T6306] kworker/u8:9: attempt to access beyond end of device [ 102.297623][ T6306] loop1: rw=1, sector=2736, nr_sectors = 2056 limit=512 [ 102.354852][ T8526] smc: removing net device bond0 with user defined pnetid SYZ2 [ 102.373873][ T6306] kworker/u8:9: attempt to access beyond end of device [ 102.373873][ T6306] loop1: rw=1, sector=4792, nr_sectors = 2048 limit=512 [ 102.391716][ T8526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.400388][ T6306] kworker/u8:9: attempt to access beyond end of device [ 102.400388][ T6306] loop1: rw=1, sector=6840, nr_sectors = 2048 limit=512 [ 102.429799][ T6306] kworker/u8:9: attempt to access beyond end of device [ 102.429799][ T6306] loop1: rw=1, sector=8888, nr_sectors = 2056 limit=512 [ 102.435123][ T8526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.455141][ T6306] kworker/u8:9: attempt to access beyond end of device [ 102.455141][ T6306] loop1: rw=1, sector=10944, nr_sectors = 2184 limit=512 [ 102.495423][ T8526] bond0 (unregistering): Released all slaves [ 103.184455][ T5879] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.190702][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 103.247029][ T8555] loop1: detected capacity change from 0 to 1764 [ 103.394886][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 103.394928][ T29] audit: type=1400 audit(1770428587.792:1202): avc: denied { create } for pid=8562 comm="syz.1.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.464482][ T29] audit: type=1400 audit(1770428587.822:1203): avc: denied { write } for pid=8562 comm="syz.1.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.629628][ T8588] netlink: 46 bytes leftover after parsing attributes in process `syz.4.1956'. [ 103.730858][ T8599] veth1_to_bridge: entered allmulticast mode [ 103.744493][ T8599] veth1_to_bridge: left allmulticast mode [ 103.846174][ T29] audit: type=1400 audit(1770428588.242:1204): avc: denied { write } for pid=8604 comm="syz.5.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.880687][ T29] audit: type=1400 audit(1770428588.272:1205): avc: denied { connect } for pid=8604 comm="syz.5.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.914543][ T29] audit: type=1326 audit(1770428588.322:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8608 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 103.938097][ T29] audit: type=1326 audit(1770428588.322:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8608 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 104.052566][ T29] audit: type=1326 audit(1770428588.372:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8608 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 104.075995][ T29] audit: type=1326 audit(1770428588.372:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8608 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 104.099445][ T29] audit: type=1326 audit(1770428588.372:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8608 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 104.122938][ T29] audit: type=1326 audit(1770428588.382:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8608 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 104.274076][ T8630] Invalid ELF header len 1 [ 104.507334][ T8641] ALSA: seq fatal error: cannot create timer (-16) [ 104.590911][ T8643] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1981'. [ 105.256062][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 105.265075][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'. [ 105.303284][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 105.312324][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'. [ 105.424976][ T8692] loop1: detected capacity change from 0 to 512 [ 105.581795][ T8702] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 106.891455][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.898874][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.018659][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.072410][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.156316][ T8809] FAT-fs (loop11): unable to read boot sector [ 107.181721][ T6338] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.190930][ T6338] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.236040][ T6338] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.245072][ T6338] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.285718][ T6338] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.294724][ T6338] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.352480][ T6338] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.361471][ T6338] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.481726][ T8822] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 107.544854][ T8829] netlink: 'syz.3.2023': attribute type 22 has an invalid length. [ 107.552733][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 107.618109][ T8834] loop5: detected capacity change from 0 to 128 [ 107.628345][ T8829] netlink: 'syz.3.2023': attribute type 22 has an invalid length. [ 107.636306][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 107.660508][ T8834] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 107.692935][ T8834] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.728845][ T8834] ext2 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.825146][ T5844] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.908284][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'. [ 108.328705][ T8811] IPVS: starting estimator thread 0... [ 108.333857][ T8893] loop5: detected capacity change from 0 to 512 [ 108.342954][ T8893] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2051: corrupted in-inode xattr: invalid ea_ino [ 108.357596][ T8893] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2051: couldn't read orphan inode 15 (err -117) [ 108.371246][ T8893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.408396][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.434400][ T8894] IPVS: using max 2256 ests per chain, 112800 per kthread [ 108.446949][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2053'. [ 108.775891][ T8794] Process accounting resumed [ 108.893150][ T8930] loop3: detected capacity change from 0 to 4096 [ 108.904038][ T8930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.202953][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.347973][ T6314] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.358775][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 109.358791][ T29] audit: type=1400 audit(1770428593.772:1250): avc: denied { attach_queue } for pid=8941 comm="syz.2.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.394638][ T6314] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.405931][ T6314] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.421710][ T6314] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.456427][ T29] audit: type=1326 audit(1770428593.862:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 109.479900][ T29] audit: type=1326 audit(1770428593.862:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 109.529121][ T8961] loop3: detected capacity change from 0 to 1024 [ 109.605406][ T29] audit: type=1326 audit(1770428593.862:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 109.628923][ T29] audit: type=1326 audit(1770428593.862:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 109.652479][ T29] audit: type=1326 audit(1770428593.862:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 109.675985][ T29] audit: type=1326 audit(1770428593.912:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 109.699453][ T29] audit: type=1326 audit(1770428593.912:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02dd35ac22 code=0x7ffc0000 [ 109.722928][ T29] audit: type=1326 audit(1770428593.912:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f02dd35acb7 code=0x7ffc0000 [ 109.746613][ T29] audit: type=1326 audit(1770428593.912:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f02dd317c51 code=0x7ffc0000 [ 109.944972][ T8977] loop3: detected capacity change from 0 to 1024 [ 109.977365][ T8977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.004422][ T8985] netlink: 'syz.5.2086': attribute type 39 has an invalid length. [ 110.050442][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.059628][ T8985] hsr_slave_1 (unregistering): left promiscuous mode [ 110.236052][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2092'. [ 110.262113][ T9001] loop5: detected capacity change from 0 to 512 [ 110.269286][ T9001] EXT4-fs: Ignoring removed bh option [ 110.275005][ T9001] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 110.284777][ T9001] EXT4-fs (loop5): 1 truncate cleaned up [ 110.290955][ T9001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.378200][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.414182][ T9011] loop5: detected capacity change from 0 to 512 [ 110.456409][ T9011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.488783][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2097'. [ 110.631727][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.698894][ T9025] loop2: detected capacity change from 0 to 128 [ 110.781207][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.788423][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.821987][ T9029] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 110.919774][ T9027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.961331][ T9027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.037283][ T8798] IPVS: starting estimator thread 0... [ 111.124292][ T9034] IPVS: using max 2352 ests per chain, 117600 per kthread [ 111.136930][ T6311] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.145915][ T6311] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.230648][ T6314] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.239710][ T6314] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.252745][ T6314] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.261905][ T6314] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.271120][ T6314] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.280064][ T6314] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.558244][ T9063] tipc: Enabling of bearer rejected, failed to enable media [ 111.690748][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 111.763605][ T9081] netlink: 'syz.3.2125': attribute type 4 has an invalid length. [ 111.771443][ T9081] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2125'. [ 111.822338][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 111.866709][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 111.945812][ T9098] loop1: detected capacity change from 0 to 512 [ 111.952851][ T9098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.102298][ T9098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.184590][ T9098] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.218678][ T9112] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 112.230327][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 112.243900][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 112.295458][ T9117] netlink: 'syz.3.2141': attribute type 4 has an invalid length. [ 112.384573][ T3860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.026322][ T37] bridge_slave_1: left allmulticast mode [ 113.032048][ T37] bridge_slave_1: left promiscuous mode [ 113.037853][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.063056][ T37] bridge_slave_0: left allmulticast mode [ 113.068810][ T37] bridge_slave_0: left promiscuous mode [ 113.074648][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.147828][ T9168] loop2: detected capacity change from 0 to 512 [ 113.172703][ T9168] EXT4-fs: Ignoring removed nobh option [ 113.226592][ T9168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.242822][ T37] bond0 (unregistering): Released all slaves [ 113.260338][ T9168] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.302561][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.315628][ T9132] chnl_net:caif_netlink_parms(): no params data found [ 113.343614][ T37] tipc: Disabling bearer [ 113.349012][ T37] tipc: Left network mode [ 113.393692][ T37] hsr_slave_0: left promiscuous mode [ 113.399935][ T37] hsr_slave_1: left promiscuous mode [ 113.406237][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.468911][ T37] team0 (unregistering): Port device team_slave_1 removed [ 113.479506][ T37] team0 (unregistering): Port device team_slave_0 removed [ 113.532127][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.539283][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.564525][ T9132] bridge_slave_0: entered allmulticast mode [ 113.583305][ T9132] bridge_slave_0: entered promiscuous mode [ 113.617683][ T9207] loop3: detected capacity change from 0 to 8192 [ 113.619165][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.631210][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.638782][ T9132] bridge_slave_1: entered allmulticast mode [ 113.645975][ T9132] bridge_slave_1: entered promiscuous mode [ 113.671867][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.694711][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.730477][ T9132] team0: Port device team_slave_0 added [ 113.754129][ T9132] team0: Port device team_slave_1 added [ 113.782418][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.789480][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.815522][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.826159][ T6311] tipc: Subscription rejected, illegal request [ 113.838107][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.845129][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.871151][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.912308][ T9230] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 113.929924][ T9132] hsr_slave_0: entered promiscuous mode [ 113.939489][ T9132] hsr_slave_1: entered promiscuous mode [ 113.962996][ T9132] debugfs: 'hsr0' already exists in 'hsr' [ 113.968866][ T9132] Cannot create hsr debugfs directory [ 114.064064][ T9246] loop3: detected capacity change from 0 to 256 [ 114.090685][ T9246] FAT-fs (loop3): Directory bread(block 64) failed [ 114.097593][ T9246] FAT-fs (loop3): Directory bread(block 65) failed [ 114.104495][ T9246] FAT-fs (loop3): Directory bread(block 66) failed [ 114.111217][ T9246] FAT-fs (loop3): Directory bread(block 67) failed [ 114.117973][ T9246] FAT-fs (loop3): Directory bread(block 68) failed [ 114.124701][ T9246] FAT-fs (loop3): Directory bread(block 69) failed [ 114.131280][ T9246] FAT-fs (loop3): Directory bread(block 70) failed [ 114.138472][ T9246] FAT-fs (loop3): Directory bread(block 71) failed [ 114.145105][ T9246] FAT-fs (loop3): Directory bread(block 72) failed [ 114.151835][ T9246] FAT-fs (loop3): Directory bread(block 73) failed [ 114.168298][ T9132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.183796][ T9246] bio_check_eod: 2 callbacks suppressed [ 114.183813][ T9246] syz.3.2176: attempt to access beyond end of device [ 114.183813][ T9246] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 114.206986][ T9132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.216927][ T9132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.226919][ T9132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.333050][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.365842][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 114.402116][ T9132] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.415473][ T9282] veth1_to_bond: entered allmulticast mode [ 114.423895][ T9282] veth1_to_bond: left allmulticast mode [ 114.438251][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.445566][ T6314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.466857][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.473976][ T6314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.572122][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 114.572136][ T29] audit: type=1326 audit(1770428598.972:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 114.658646][ T29] audit: type=1326 audit(1770428599.012:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 114.682139][ T29] audit: type=1326 audit(1770428599.022:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 114.705754][ T29] audit: type=1326 audit(1770428599.022:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 114.729590][ T29] audit: type=1326 audit(1770428599.042:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 114.753041][ T29] audit: type=1326 audit(1770428599.042:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 114.776552][ T29] audit: type=1326 audit(1770428599.042:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9295 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 114.872152][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.142966][ T9132] veth0_vlan: entered promiscuous mode [ 115.153331][ T9132] veth1_vlan: entered promiscuous mode [ 115.179588][ T9132] veth0_macvtap: entered promiscuous mode [ 115.196496][ T9132] veth1_macvtap: entered promiscuous mode [ 115.221033][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.243635][ T9132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.263439][ T9349] batadv_slave_1: entered promiscuous mode [ 115.272338][ T6314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.283629][ T9347] batadv_slave_1: left promiscuous mode [ 115.300521][ T29] audit: type=1400 audit(1770428599.702:1312): avc: denied { mount } for pid=9132 comm="syz-executor" name="/" dev="gadgetfs" ino=3804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 115.304941][ T6314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.338521][ T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.376698][ T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.425908][ T9362] sctp: [Deprecated]: syz.5.2202 (pid 9362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.425908][ T9362] Use struct sctp_sack_info instead [ 115.465032][ T29] audit: type=1326 audit(1770428599.862:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.4.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 115.488602][ T29] audit: type=1326 audit(1770428599.862:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9363 comm="syz.4.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3e6aaeb9 code=0x7ffc0000 [ 115.526110][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.584852][ T9370] netlink: 'syz.5.2204': attribute type 1 has an invalid length. [ 115.915671][ T9388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9388 comm=syz.5.2212 [ 116.102778][ T9399] loop6: detected capacity change from 0 to 512 [ 116.277023][ T9406] syz.6.2216: attempt to access beyond end of device [ 116.277023][ T9406] loop6: rw=0, sector=432, nr_sectors = 128 limit=512 [ 116.407032][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.407032][ T52] loop6: rw=1, sector=560, nr_sectors = 2104 limit=512 [ 116.444854][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.444854][ T52] loop6: rw=1, sector=2664, nr_sectors = 2048 limit=512 [ 116.471657][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.471657][ T52] loop6: rw=1, sector=4712, nr_sectors = 2064 limit=512 [ 116.505326][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.505326][ T52] loop6: rw=1, sector=6776, nr_sectors = 2048 limit=512 [ 116.523135][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.523135][ T52] loop6: rw=1, sector=8824, nr_sectors = 2056 limit=512 [ 116.540368][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.540368][ T52] loop6: rw=1, sector=10880, nr_sectors = 2064 limit=512 [ 116.557453][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.557453][ T52] loop6: rw=1, sector=12944, nr_sectors = 2408 limit=512 [ 116.573630][ T52] kworker/u8:3: attempt to access beyond end of device [ 116.573630][ T52] loop6: rw=1, sector=15352, nr_sectors = 1112 limit=512 [ 116.623216][ T6338] Bluetooth: hci1: Frame reassembly failed (-84) [ 117.092203][ T9428] netlink: 'syz.4.2226': attribute type 1 has an invalid length. [ 117.100161][ T9428] netlink: 'syz.4.2226': attribute type 4 has an invalid length. [ 117.107972][ T9428] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.2226'. [ 117.305944][ T9435] netlink: 'syz.4.2228': attribute type 1 has an invalid length. [ 117.331675][ T9435] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.341934][ T9435] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 117.353764][ T9435] bond1: (slave vxcan3): making interface the new active one [ 117.361830][ T9435] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 117.607676][ T9457] SELinux: failed to load policy [ 118.061208][ T9491] loop5: detected capacity change from 0 to 2048 [ 118.068226][ T9491] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.086408][ T9491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.110678][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.325952][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2263'. [ 118.334969][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2263'. [ 118.432612][ T9526] loop5: detected capacity change from 0 to 512 [ 118.447277][ T9526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.460064][ T9526] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.534298][ T5879] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.558395][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.564180][ T9530] loop2: detected capacity change from 0 to 1024 [ 118.578501][ T9530] EXT4-fs: Ignoring removed orlov option [ 118.600040][ T9530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.643502][ T5514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.694292][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 118.694912][ T9415] Bluetooth: hci1: command 0x1003 tx timeout [ 118.918494][ T9553] loop5: detected capacity change from 0 to 1024 [ 119.049282][ T9562] loop5: detected capacity change from 0 to 256 [ 119.056797][ T9562] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.075873][ T9562] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.105534][ T9564] loop5: detected capacity change from 0 to 256 [ 119.142268][ T9401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.347284][ T9591] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2294'. [ 119.552284][ T9614] loop3: detected capacity change from 0 to 128 [ 119.566992][ T9614] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.583105][ T9614] ext4 filesystem being mounted at /476/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.631425][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.960315][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 119.960334][ T29] audit: type=1326 audit(1770428604.362:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 119.990961][ T29] audit: type=1326 audit(1770428604.362:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.014736][ T29] audit: type=1326 audit(1770428604.362:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.038335][ T29] audit: type=1326 audit(1770428604.362:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.061737][ T29] audit: type=1326 audit(1770428604.362:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.085493][ T29] audit: type=1326 audit(1770428604.362:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.109013][ T29] audit: type=1326 audit(1770428604.362:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.132649][ T29] audit: type=1326 audit(1770428604.372:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.156261][ T29] audit: type=1326 audit(1770428604.372:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.179699][ T29] audit: type=1326 audit(1770428604.372:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9627 comm="syz.3.2310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 120.612732][ T9675] loop3: detected capacity change from 0 to 512 [ 120.634226][ T9675] EXT4-fs: Ignoring removed bh option [ 120.649979][ T9675] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 120.674679][ T9675] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 120.696699][ T9675] EXT4-fs (loop3): failed to open journal device unknown-block(8,224) -6 [ 120.711290][ T9681] loop5: detected capacity change from 0 to 1024 [ 120.734107][ T9681] EXT4-fs: Ignoring removed orlov option [ 120.757244][ T9681] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 120.808291][ T9681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.962883][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.239721][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2352'. [ 121.656296][ T9760] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2363'. [ 121.703696][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2364'. [ 121.823889][ T9763] loop5: detected capacity change from 0 to 8192 [ 122.132954][ T9792] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2375'. [ 122.156401][ T9789] syzkaller1: entered promiscuous mode [ 122.162016][ T9789] syzkaller1: entered allmulticast mode [ 122.308836][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 122.508980][ T9816] 9p: Bad value for 'rfdno' [ 122.921887][ T6314] tipc: Subscription rejected, illegal request [ 123.045720][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 123.193627][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 123.617838][ T9897] gretap1: entered promiscuous mode [ 123.627332][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2423'. [ 123.890022][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 124.103666][ T9947] loop3: detected capacity change from 0 to 1024 [ 124.116222][ T9947] EXT4-fs: inline encryption not supported [ 124.157283][ T9947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.204673][ T9962] netlink: 'syz.5.2450': attribute type 1 has an invalid length. [ 124.256463][ T9962] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.296208][ T9971] bond4: (slave gretap1): making interface the new active one [ 124.311661][ T9971] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 124.342813][ T9943] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2444: Allocating blocks 385-513 which overlap fs metadata [ 124.387789][ T9943] EXT4-fs (loop3): pa ffff888107966460: logic 16, phys. 129, len 24 [ 124.395989][ T9943] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 124.410927][ T9943] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 124.423475][ T9943] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.423475][ T9943] [ 124.433285][ T9943] EXT4-fs (loop3): Total free blocks count 0 [ 124.439376][ T9943] EXT4-fs (loop3): Free/Dirty block details [ 124.445458][ T9943] EXT4-fs (loop3): free_blocks=128 [ 124.450606][ T9943] EXT4-fs (loop3): dirty_blocks=0 [ 124.455835][ T9943] EXT4-fs (loop3): Block reservation details [ 124.461884][ T9943] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 124.482356][ T9981] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2457'. [ 124.591609][ T9998] loop3: detected capacity change from 0 to 128 [ 124.668596][T10007] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 124.686052][ T8804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 124.705262][ T8804] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.707429][T10007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.738719][T10007] bond2: (slave gretap1): making interface the new active one [ 124.747326][T10007] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 124.884853][T10027] geneve2: entered promiscuous mode [ 124.896230][ T6311] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.918397][ T6311] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.927928][ T6311] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.936428][ T6311] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.973868][T10011] hid-generic 0000:0000:0000.0001: pid 10011 passed too short report [ 125.037927][T10036] all: renamed from veth1_to_bond [ 125.158136][T10048] loop3: detected capacity change from 0 to 512 [ 125.169971][T10048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 125.184387][T10048] System zones: 1-12 [ 125.190116][T10048] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.2486: corrupted in-inode xattr: e_value size too large [ 125.204591][T10048] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2486: couldn't read orphan inode 15 (err -117) [ 125.217133][T10048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.316566][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.377004][T10060] netlink: 'syz.6.2490': attribute type 27 has an invalid length. [ 125.412582][T10060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.453338][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2493'. [ 125.462403][T10066] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.789628][T10092] loop3: detected capacity change from 0 to 128 [ 125.804488][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 125.804506][ T29] audit: type=1326 audit(1770428866.211:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.3.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 125.835929][ T29] audit: type=1326 audit(1770428866.241:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.3.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 125.859590][ T29] audit: type=1326 audit(1770428866.241:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.3.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 125.883225][ T29] audit: type=1326 audit(1770428866.241:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10090 comm="syz.3.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6390faaeb9 code=0x7ffc0000 [ 126.391105][T10144] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.2520'. [ 126.401903][T10144] netlink: zone id is out of range [ 126.407784][T10144] netlink: zone id is out of range [ 126.413945][T10144] netlink: zone id is out of range [ 126.420214][T10144] netlink: del zone limit has 8 unknown bytes [ 126.472159][ T29] audit: type=1400 audit(1770428866.871:1388): avc: denied { create } for pid=10149 comm="syz.2.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 126.501887][T10146] netlink: 'syz.5.2521': attribute type 10 has an invalid length. [ 126.510596][ T29] audit: type=1326 audit(1770428866.901:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 126.534156][ T29] audit: type=1326 audit(1770428866.901:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 126.557791][ T29] audit: type=1326 audit(1770428866.901:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 126.581502][ T29] audit: type=1326 audit(1770428866.901:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 126.605184][ T29] audit: type=1326 audit(1770428866.901:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.2.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dd35aeb9 code=0x7ffc0000 [ 126.620497][T10154] xt_hashlimit: size too large, truncated to 1048576 [ 126.640940][T10146] bond0: (slave bond_slave_0): Releasing backup interface [ 126.926310][T10197] netlink: 'syz.2.2530': attribute type 8 has an invalid length. [ 126.934181][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2530'. [ 127.161890][T10232] netlink: 'syz.4.2537': attribute type 27 has an invalid length. [ 127.207856][T10232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.267161][T10243] loop3: detected capacity change from 0 to 1024 [ 127.286604][T10243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.305347][T10243] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.330079][T10243] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.2543: lblock 3 mapped to illegal pblock 3 (length 3) [ 127.345960][T10243] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 127.358356][T10243] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.358356][T10243] [ 127.371195][T10243] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2543: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.385710][T10243] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2543: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.400640][T10243] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2543: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.415366][T10243] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2543: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.430465][T10243] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: block 3: comm syz.3.2543: lblock 3 mapped to illegal pblock 3 (length 1) [ 127.445705][T10250] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.2543: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 127.464656][T10250] EXT4-fs error (device loop3) in ext4_setattr:6035: Corrupt filesystem [ 127.522328][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.761145][T10263] loop6: detected capacity change from 0 to 512 [ 127.768287][T10263] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.388580][T10286] loop2: detected capacity change from 0 to 8192 [ 128.406604][T10286] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.522065][T10292] uprobe: syz.5.2561:10292 failed to unregister, leaking uprobe [ 128.718015][T10304] netlink: 'syz.3.2566': attribute type 27 has an invalid length. [ 128.738649][T10306] usb usb1: check_ctrlrecip: process 10306 (syz.5.2567) requesting ep 01 but needs 81 [ 128.748613][T10306] usb usb1: usbfs: process 10306 (syz.5.2567) did not claim interface 0 before use [ 128.871696][T10304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.936523][T10304] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.969559][T10304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.084514][T10325] loop6: detected capacity change from 0 to 1024 [ 129.123022][T10302] delete_channel: no stack [ 129.128533][T10325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.182142][T10335] netlink: 'syz.5.2579': attribute type 29 has an invalid length. [ 129.208473][T10325] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2575: error while reading EA inode 32 err=-116 [ 129.226103][T10335] netlink: 'syz.5.2579': attribute type 29 has an invalid length. [ 129.253918][T10325] EXT4-fs (loop6): Remounting filesystem read-only [ 129.260655][T10325] EXT4-fs warning (device loop6): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.6.2575: cleanup dec ref error -30 [ 129.277064][T10325] EXT4-fs warning (device loop6): ext4_xattr_block_set:2200: inode #19: comm syz.6.2575: dec ref error=-30 [ 129.284701][T10335] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2579'. [ 129.327477][ T9132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.353389][ T9132] ================================================================== [ 129.361547][ T9132] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 129.369151][ T9132] [ 129.371502][ T9132] read-write to 0xffff888237d26468 of 1 bytes by task 10298 on cpu 1: [ 129.379687][ T9132] folio_add_lru+0xa4/0x1e0 [ 129.384241][ T9132] shmem_get_folio_gfp+0x7b0/0xd60 [ 129.389409][ T9132] shmem_write_begin+0xfc/0x1f0 [ 129.394314][ T9132] generic_perform_write+0x183/0x490 [ 129.399643][ T9132] shmem_file_write_iter+0xc5/0xf0 [ 129.404806][ T9132] __kernel_write_iter+0x319/0x590 [ 129.409947][ T9132] dump_user_range+0xa7d/0xdb0 [ 129.414751][ T9132] elf_core_dump+0x21a2/0x2330 [ 129.419579][ T9132] coredump_write+0xacf/0xdf0 [ 129.424290][ T9132] vfs_coredump+0x26bc/0x3120 [ 129.429008][ T9132] get_signal+0xd7b/0xf60 [ 129.433367][ T9132] arch_do_signal_or_restart+0x96/0x450 [ 129.438955][ T9132] irqentry_exit+0xf7/0x510 [ 129.443540][ T9132] asm_exc_page_fault+0x26/0x30 [ 129.448421][ T9132] [ 129.450761][ T9132] read to 0xffff888237d26468 of 1 bytes by task 9132 on cpu 0: [ 129.458358][ T9132] __lru_add_drain_all+0x17e/0x450 [ 129.463504][ T9132] lru_add_drain_all+0x10/0x20 [ 129.468311][ T9132] invalidate_bdev+0x47/0x70 [ 129.472929][ T9132] ext4_put_super+0x624/0x7d0 [ 129.477631][ T9132] generic_shutdown_super+0xe6/0x210 [ 129.482946][ T9132] kill_block_super+0x2a/0x70 [ 129.487645][ T9132] ext4_kill_sb+0x42/0x80 [ 129.492007][ T9132] deactivate_locked_super+0x75/0x1c0 [ 129.497410][ T9132] deactivate_super+0x97/0xa0 [ 129.502127][ T9132] cleanup_mnt+0x2bb/0x330 [ 129.506666][ T9132] __cleanup_mnt+0x19/0x20 [ 129.511102][ T9132] task_work_run+0x130/0x1a0 [ 129.515742][ T9132] exit_to_user_mode_loop+0x1f7/0x6f0 [ 129.521158][ T9132] do_syscall_64+0x1d3/0x2a0 [ 129.525775][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.531690][ T9132] [ 129.534033][ T9132] value changed: 0x18 -> 0x1b [ 129.538823][ T9132] [ 129.541162][ T9132] Reported by Kernel Concurrency Sanitizer on: [ 129.547344][ T9132] CPU: 0 UID: 0 PID: 9132 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.557263][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 129.567346][ T9132] ==================================================================