last executing test programs: 1m56.345756207s ago: executing program 2 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x28, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 1m56.302551838s ago: executing program 2 (id=127): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 1m56.269536969s ago: executing program 2 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000900)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20024000}, 0x6000010) 1m56.242890309s ago: executing program 2 (id=130): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x8800, 0x0) process_mrelease(r0, 0x0) 1m56.16663505s ago: executing program 2 (id=133): r0 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) 1m56.119419511s ago: executing program 2 (id=136): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@user_xattr}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") 1m50.38786204s ago: executing program 0 (id=354): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x10, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x20048045}, 0x8080) ptrace(0x4208, 0x0) 1m50.34446024s ago: executing program 0 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) io_cancel(0x0, 0x0, 0x0) 1m50.274106472s ago: executing program 0 (id=361): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)) 1m50.247452892s ago: executing program 0 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}}, 0x0) 1m50.206875373s ago: executing program 0 (id=366): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1m50.167431893s ago: executing program 0 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m41.077695539s ago: executing program 32 (id=136): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@user_xattr}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") 1m35.067861992s ago: executing program 33 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.095883667s ago: executing program 5 (id=2406): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 1m0.064454927s ago: executing program 5 (id=2408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 1m0.018825388s ago: executing program 5 (id=2410): r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x1f, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08"], 0x0) 59.993969599s ago: executing program 5 (id=2411): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000004c0)='./file0\x00') 59.704918033s ago: executing program 5 (id=2421): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@utf8}, {@uni_xlate}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_mixed}, {@fat=@errors_continue}, {@uni_xlateno}, {@shortname_win95}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x7fff}}]}, 0x1, 0x369, &(0x7f0000000700)="$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") timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 59.033285582s ago: executing program 5 (id=2449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 59.011246362s ago: executing program 34 (id=2449): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 21.479629002s ago: executing program 4 (id=4375): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0xc, 0xa, 0x0) 21.407206683s ago: executing program 4 (id=4378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) 21.266344125s ago: executing program 4 (id=4382): unshare(0x20400) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) 21.203762726s ago: executing program 4 (id=4388): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000200)=@sg0, 0x0, 0x0) 21.162129286s ago: executing program 4 (id=4390): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 21.124219807s ago: executing program 4 (id=4393): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) migrate_pages(0x0, 0x1, 0x0, 0x0) 6.073924896s ago: executing program 35 (id=4393): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) migrate_pages(0x0, 0x1, 0x0, 0x0) 1.066454255s ago: executing program 8 (id=5174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) 1.052712676s ago: executing program 8 (id=5176): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f00000014c0)=""/167, &(0x7f0000000240)=0xa7) 1.028847696s ago: executing program 8 (id=5179): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000080)}, 0x10) 998.859916ms ago: executing program 8 (id=5183): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='cmdline\x00') exit(0x2) pread64(r0, 0x0, 0x0, 0xffff) 530.864993ms ago: executing program 7 (id=5218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 505.632863ms ago: executing program 3 (id=5221): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) cachestat(r0, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0) 493.108663ms ago: executing program 1 (id=5222): r0 = memfd_create(&(0x7f00000007c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba\x1b\xc7%\x88 \xeeQR\x9f\x81\x8b\xae@\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x05\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8dn\xf4i\xfd\x98\xbc\x19U&\xd7e\xb7m\xcb%K\x1d\xe7_\xde\x87\xbf\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x17{\x02\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\x01\x00\x00\x00\x00\x00\x00\x00\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bG\xaf\xb6\xf4WzZ\xbf\xed\xed\xcd\xeb\x8a:\x9e\x86\x87\x8c\x94\xd0\x13\xdb\x1cp\x82Z\xf0\xe9\x04;(\x12\xfd\xd1W\x90C\xc7\x13y \x96[)\xee\xc1\xa2\x04\xf8xws\x1f\nOZ}\x173\xff?\xcdL+\xaa\xcf0\xa6\xdd$\x10\xeae\xb6p6\xfa\xa8\x97:\a\xa8\x8e\xea\xa4=\xc3X\xf6\x92\xcb\nd\x00\xca\x96L\xf8\xca\x91|\xf0\x1b\x91\xe1\xe7\xf8\buR\xff\xe10\x03\x1a\xd5\xda5\\\xc1x\xd2\x8a\xb2\xc2;\xce\xf0\xd0\x0f\xff\x9a\x10\x168d\xa5\xf7r\x92\x93gk\xa5\xe9F\xcb\x11t\x11\x83\xe7\xe8\"P_\x01\x1c\x86DD\xa9\xe3\x10\xcdP\x9e\xa1\xf6\x00\xa51\xd1\x11\x96Je!q\xaaB\xcc`m\x19\xda\xd8\xd6X>\xe5\x1c^\xb8\x89\x87 \xdd4\x95\x9ae\x9b\xd8\xa7\x86y\xc3\x1a\x11~\xc8\xcd\xbe\x965\x03\x11\xd0)\x1aW\xe7\xe9\xa9\x10Z\xd5F\x1f\xdd&r.\x86\xccVr\x9a\xbb\xcb\x17\x01\x17ZS\xce\xd3\xc5~\xab\x01\xe9l\xc0w%\xde\x81R\xdc;\x85\xe9$\x83\x91\xd0\xc7\xbc\x8d\xb5\x02\xe4l\x87z\xf70\x89)\b}N\xc2\xf2J\x16:\xea\x9f\xaf~D\x06\xee\xe2\x83\xdd\x95\xc9S\x8ez\xc2\xb9\\\xbbO\xa3AN\xf5I\ra\x87\x87O4\xb3\xe2EbY\x01\x04\x8cX\xda1&g*\r@\x9b8p\x1a\xde\r\n\xcc\xb0\xf2\xcf]\xff\xbe\xe9\xb1\xc5S*\xe9\x10T\x8e\xc0r\x82\xc2oo\n\xc2\xaf\xaa\"\x93\xc8\xe8R\x84Z7g \x80Y\xda<\x94T\x99\n$LyC\xa6}u#%\x1a\x1e\x8bxLTS\x97\x88\xdf|\xac/$\xca}\xe0\x101\xa1\xa0\xe8\xf3\xb2s\x9fT\a\x1c\aBX\xe8\x12=\x139\xc9\v\x01\xf6\x11\xc8\x96;X\x10;k\xf12\x87uH\x1f\xba\xc8\x8a<E{f5\xe6G\x18N\x00\xc2,\x12\xa1 \x9c\xfa9\x00\xf2\xcb8\x959\xdd\xd2\xc0\xad0\xf2\xe7\t\x0e\x9eG\v\x85 \x89l', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) futex(&(0x7f0000000000), 0x8b, 0x0, 0x0, 0x0, 0x0) 492.630243ms ago: executing program 7 (id=5223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 464.502693ms ago: executing program 1 (id=5224): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x2, 0x0, 0x8000000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) 449.803894ms ago: executing program 7 (id=5225): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="a4626c6b5548", 0x0, 0x3, 0x24, 0x0, 0x0}) 418.100794ms ago: executing program 1 (id=5226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x44, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xa48}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x948d}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x44}}, 0x4000000) 416.966734ms ago: executing program 7 (id=5227): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000a00), 0x3, 0x44b, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 388.580745ms ago: executing program 1 (id=5228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 361.569415ms ago: executing program 7 (id=5229): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 361.239025ms ago: executing program 1 (id=5230): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 299.982036ms ago: executing program 1 (id=5231): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) 299.764246ms ago: executing program 7 (id=5232): pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r0, 0x2402}], 0x1, 0x83a4) fcntl$setpipe(r0, 0x407, 0x0) 277.263466ms ago: executing program 3 (id=5234): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000080)=""/44, 0x2c) getdents(r0, 0xfffffffffffffffd, 0x58) 211.565237ms ago: executing program 3 (id=5239): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x102}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) 197.599447ms ago: executing program 6 (id=5240): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x1, &(0x7f0000000500)) 194.398197ms ago: executing program 3 (id=5241): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 150.297058ms ago: executing program 8 (id=5242): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='./cgroup/syz0\x00') 142.928928ms ago: executing program 3 (id=5243): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_setup(0x8, &(0x7f0000004200)=<r0=>0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 97.265379ms ago: executing program 6 (id=5244): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x6c) 96.898909ms ago: executing program 6 (id=5245): r0 = timerfd_create(0x8, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000200)=""/149, 0x95) 80.807119ms ago: executing program 8 (id=5246): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 61.459069ms ago: executing program 6 (id=5247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 61.100089ms ago: executing program 6 (id=5248): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0xf0ff1f00000000) 10.63367ms ago: executing program 6 (id=5249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004a80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000004ac0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200008c5}, 0x40) 0s ago: executing program 3 (id=5250): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="00e3950826e5c064c6000000eeffffffff", 0x11}, {&(0x7f0000000340)="174640", 0x3}], 0x2}}], 0x1, 0x0) kernel console output (not intermixed with test programs): mm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5827e5e9a3 code=0x7ffc0000 [ 99.740612][ T29] audit: type=1326 audit(2000000018.961:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5827e5d41f code=0x7ffc0000 [ 99.763934][ T29] audit: type=1326 audit(2000000018.961:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5827e5e9f7 code=0x7ffc0000 [ 99.777188][ T9933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.787307][ T29] audit: type=1326 audit(2000000018.961:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5827e5d2d0 code=0x7ffc0000 [ 99.819474][ T29] audit: type=1326 audit(2000000018.961:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5827e5e56b code=0x7ffc0000 [ 99.833226][ T9935] FAT-fs (loop3): Directory bread(block 32) failed [ 99.842781][ T29] audit: type=1326 audit(2000000018.981:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5827e5d5ca code=0x7ffc0000 [ 99.872514][ T29] audit: type=1326 audit(2000000018.981:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5827e5d5ca code=0x7ffc0000 [ 99.890147][ T9935] FAT-fs (loop3): Directory bread(block 33) failed [ 99.896126][ T29] audit: type=1326 audit(2000000018.981:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9932 comm="syz.6.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5827e5d1d7 code=0x7ffc0000 [ 99.931765][ T9933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.933472][ T9935] FAT-fs (loop3): Directory bread(block 34) failed [ 99.951040][ T9935] FAT-fs (loop3): Directory bread(block 35) failed [ 99.956274][ T9942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9942 comm=syz.1.2819 [ 99.957564][ T9935] FAT-fs (loop3): Directory bread(block 36) failed [ 99.978331][ T9935] FAT-fs (loop3): Directory bread(block 37) failed [ 99.984884][ T9935] FAT-fs (loop3): Directory bread(block 38) failed [ 99.991561][ T9935] FAT-fs (loop3): Directory bread(block 39) failed [ 99.998191][ T9935] FAT-fs (loop3): Directory bread(block 40) failed [ 99.999910][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.004796][ T9935] FAT-fs (loop3): Directory bread(block 41) failed [ 100.206023][ T9959] loop7: detected capacity change from 0 to 164 [ 100.219769][ T9959] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 100.228209][ T9957] loop3: detected capacity change from 0 to 4096 [ 100.285106][ T9957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.361520][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.424544][ T9982] 9p: Unknown Cache mode or invalid value 0m�{�persion=9p2"00 [ 100.636770][T10012] loop4: detected capacity change from 0 to 1764 [ 100.776917][T10032] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 100.902952][T10051] loop7: detected capacity change from 0 to 512 [ 101.004512][T10065] loop7: detected capacity change from 0 to 1024 [ 101.034652][T10065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.078768][T10065] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.137570][T10081] loop1: detected capacity change from 0 to 512 [ 101.175413][T10081] EXT4-fs: Ignoring removed nobh option [ 101.182644][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.196082][T10085] netlink: 'syz.6.2888': attribute type 10 has an invalid length. [ 101.232686][T10091] loop7: detected capacity change from 0 to 164 [ 101.240749][T10088] loop6: detected capacity change from 0 to 1024 [ 101.255251][T10081] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.2886: corrupted inode contents [ 101.281605][T10081] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.2886: mark_inode_dirty error [ 101.297018][T10088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.314898][T10081] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.2886: corrupted inode contents [ 101.341606][T10081] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.2886: mark_inode_dirty error [ 101.362000][T10081] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2886: Failed to acquire dquot type 0 [ 101.407264][T10081] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.2886: corrupted inode contents [ 101.441453][T10081] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.2886: mark_inode_dirty error [ 101.453768][T10081] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.2886: corrupted inode contents [ 101.467225][T10081] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.2886: mark_inode_dirty error [ 101.482778][T10081] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.2886: corrupted inode contents [ 101.514145][T10081] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 101.534520][T10081] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.2886: corrupted inode contents [ 101.535753][T10111] ALSA: seq fatal error: cannot create timer (-19) [ 101.557262][T10081] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.2886: mark_inode_dirty error [ 101.587329][T10081] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 101.631795][T10081] EXT4-fs (loop1): 1 truncate cleaned up [ 101.638302][T10081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.667373][T10081] ext4 filesystem being mounted at /642/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.728961][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.817623][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.859573][T10144] vhci_hcd: invalid port number 236 [ 101.864820][T10144] vhci_hcd: invalid port number 236 [ 101.874944][T10146] __nla_validate_parse: 8 callbacks suppressed [ 101.874961][T10146] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2915'. [ 101.890913][T10149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2912'. [ 101.900340][T10139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2912'. [ 102.005673][T10161] loop7: detected capacity change from 0 to 512 [ 102.045392][T10166] loop4: detected capacity change from 0 to 512 [ 102.066257][T10161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.082998][T10166] EXT4-fs (loop4): 1 orphan inode deleted [ 102.098665][ T383] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 102.100880][T10166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.128264][T10166] ext4 filesystem being mounted at /641/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.139989][T10161] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.160998][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.183366][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.195089][T10180] loop6: detected capacity change from 0 to 512 [ 102.202023][T10180] EXT4-fs: Ignoring removed nobh option [ 102.240363][T10180] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.2930: corrupted inode contents [ 102.302130][T10180] EXT4-fs (loop6): Remounting filesystem read-only [ 102.319601][T10180] EXT4-fs (loop6): 1 truncate cleaned up [ 102.325680][T10180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.338477][T10180] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.342903][ T51] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.359603][ T51] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 102.374925][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.411813][ T51] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 102.443856][T10211] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2939'. [ 102.461613][T10213] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2944'. [ 102.482226][T10211] net_ratelimit: 41 callbacks suppressed [ 102.482241][T10211] netlink: zone id is out of range [ 102.500832][T10211] netlink: del zone limit has 8 unknown bytes [ 102.609719][T10235] loop3: detected capacity change from 0 to 256 [ 102.628983][T10236] loop6: detected capacity change from 0 to 512 [ 102.667584][T10236] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 102.677972][T10236] EXT4-fs (loop6): orphan cleanup on readonly fs [ 102.684644][T10236] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2954: invalid indirect mapped block 256 (level 2) [ 102.709996][T10236] EXT4-fs (loop6): 2 truncates cleaned up [ 102.716186][T10236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.717787][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2960'. [ 102.796328][T10255] loop3: detected capacity change from 0 to 512 [ 102.803049][T10255] EXT4-fs: Ignoring removed i_version option [ 102.810106][T10255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.836885][T10255] EXT4-fs (loop3): 1 truncate cleaned up [ 102.849598][T10255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.863767][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.876439][T10255] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1025 (only 1 groups) [ 102.920145][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.011644][T10275] loop1: detected capacity change from 0 to 512 [ 103.054222][T10275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.087014][T10275] ext4 filesystem being mounted at /659/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.166862][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.221169][T10294] loop1: detected capacity change from 0 to 512 [ 103.239256][T10296] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2982'. [ 103.284799][T10294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.307524][T10294] ext4 filesystem being mounted at /660/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.353193][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.470126][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2992'. [ 103.479350][T10319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2992'. [ 103.515367][T10323] loop1: detected capacity change from 0 to 512 [ 103.554022][T10323] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.563151][T10323] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 103.600590][T10323] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 103.626312][T10323] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 103.644223][T10323] System zones: 0-2, 18-18, 34-35 [ 103.649970][T10323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.684884][T10339] loop7: detected capacity change from 0 to 128 [ 103.691222][T10338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10338 comm=syz.6.2999 [ 103.707897][T10323] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.749188][T10342] vhci_hcd: invalid port number 96 [ 103.754341][T10342] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 103.764248][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.892027][T10365] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3014'. [ 103.995771][T10379] loop6: detected capacity change from 0 to 1024 [ 104.021685][T10379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.061519][T10393] loop3: detected capacity change from 0 to 128 [ 104.083952][T10396] bridge0: entered promiscuous mode [ 104.089723][T10393] FAT-fs (loop3): Directory bread(block 162) failed [ 104.107791][T10393] FAT-fs (loop3): Directory bread(block 163) failed [ 104.107845][T10396] macvlan2: entered promiscuous mode [ 104.114397][T10393] FAT-fs (loop3): Directory bread(block 164) failed [ 104.150224][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.158776][T10393] FAT-fs (loop3): Directory bread(block 165) failed [ 104.165938][T10393] FAT-fs (loop3): Directory bread(block 166) failed [ 104.177681][T10393] FAT-fs (loop3): Directory bread(block 167) failed [ 104.189217][T10393] FAT-fs (loop3): Directory bread(block 168) failed [ 104.207754][T10393] FAT-fs (loop3): Directory bread(block 169) failed [ 104.232175][T10405] loop4: detected capacity change from 0 to 512 [ 104.253935][T10405] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3033: invalid indirect mapped block 256 (level 2) [ 104.254299][T10405] EXT4-fs (loop4): 2 truncates cleaned up [ 104.291153][T10405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.329090][T10411] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 104.335701][T10411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.343371][T10411] vhci_hcd vhci_hcd.0: Device attached [ 104.376588][T10418] Invalid ELF header magic: != ELF [ 104.390159][T10405] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3033: bg 0: block 5: invalid block bitmap [ 104.402676][T10419] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 104.409231][T10419] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.416891][T10419] vhci_hcd vhci_hcd.0: Device attached [ 104.445643][T10412] vhci_hcd: connection closed [ 104.445875][ T3335] vhci_hcd: stop threads [ 104.454844][ T3335] vhci_hcd: release socket [ 104.459303][ T3335] vhci_hcd: disconnect device [ 104.467323][T10405] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28 [ 104.479854][T10405] EXT4-fs (loop4): This should not happen!! Data will be lost [ 104.479854][T10405] [ 104.489526][T10405] EXT4-fs (loop4): Total free blocks count 0 [ 104.495600][T10405] EXT4-fs (loop4): Free/Dirty block details [ 104.501588][T10405] EXT4-fs (loop4): free_blocks=0 [ 104.506582][T10405] EXT4-fs (loop4): dirty_blocks=44 [ 104.511798][T10405] EXT4-fs (loop4): Block reservation details [ 104.517952][T10405] EXT4-fs (loop4): i_reserved_data_blocks=44 [ 104.535670][T10420] vhci_hcd: connection closed [ 104.535869][ T3335] vhci_hcd: stop threads [ 104.544846][ T3335] vhci_hcd: release socket [ 104.549311][ T3335] vhci_hcd: disconnect device [ 104.568351][T10426] loop7: detected capacity change from 0 to 512 [ 104.599896][ T3393] vhci_hcd: vhci_device speed not set [ 104.639824][T10426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.654778][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.666039][T10426] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.720240][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.754964][T10430] loop4: detected capacity change from 0 to 8192 [ 104.788304][ T4075] loop4: p1 p2 < > p3 p4 < p5 > [ 104.793287][ T4075] loop4: partition table partially beyond EOD, truncated [ 104.810152][ T4075] loop4: p1 size 100663296 extends beyond EOD, truncated [ 104.823508][ T4075] loop4: p2 start 591104 is beyond EOD, truncated [ 104.829987][ T4075] loop4: p3 start 33572980 is beyond EOD, truncated [ 104.842424][ T4075] loop4: p5 size 100663296 extends beyond EOD, truncated [ 104.854911][T10430] loop4: p1 p2 < > p3 p4 < p5 > [ 104.860083][T10430] loop4: partition table partially beyond EOD, truncated [ 104.868167][T10430] loop4: p1 size 100663296 extends beyond EOD, truncated [ 104.885937][T10430] loop4: p2 start 591104 is beyond EOD, truncated [ 104.892524][T10430] loop4: p3 start 33572980 is beyond EOD, truncated [ 104.900115][T10430] loop4: p5 size 100663296 extends beyond EOD, truncated [ 104.952687][ T3681] udevd[3681]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 104.952747][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 104.952760][ T29] audit: type=1400 audit(2000000024.251:1238): avc: denied { prog_load } for pid=10456 comm="syz.4.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.963561][ T4075] udevd[4075]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 104.968564][ T29] audit: type=1400 audit(2000000024.251:1239): avc: denied { bpf } for pid=10456 comm="syz.4.3054" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.995200][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 104.997378][ T29] audit: type=1400 audit(2000000024.251:1240): avc: denied { perfmon } for pid=10456 comm="syz.4.3054" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.027906][ T29] audit: type=1400 audit(2000000024.301:1241): avc: denied { prog_run } for pid=10456 comm="syz.4.3054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.054595][ T3681] udevd[3681]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.070100][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.088906][ T4075] udevd[4075]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 105.116424][ T29] audit: type=1326 audit(2000000024.391:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10447 comm="syz.3.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7fc00000 [ 105.140002][ T29] audit: type=1400 audit(2000000024.401:1243): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30030 daddr=10.128.1.107 dest=36096 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 105.165462][ T29] audit: type=1400 audit(2000000024.411:1244): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.189674][ T29] audit: type=1400 audit(2000000024.411:1245): avc: denied { read write } for pid=5290 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.214030][ T29] audit: type=1400 audit(2000000024.411:1247): avc: denied { ioctl } for pid=5290 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.239897][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 105.247413][ T29] audit: type=1400 audit(2000000024.411:1246): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.287071][T10468] loop6: detected capacity change from 0 to 128 [ 105.491820][T10499] Cannot find add_set index 0 as target [ 105.534527][T10502] loop6: detected capacity change from 0 to 2048 [ 105.601451][T10512] unsupported nlmsg_type 40 [ 105.669291][T10523] loop1: detected capacity change from 0 to 512 [ 105.680974][T10523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.714371][T10523] ext4 filesystem being mounted at /680/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.731317][T10526] netlink: 'syz.7.3087': attribute type 1 has an invalid length. [ 105.758362][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.388837][T10599] loop1: detected capacity change from 0 to 512 [ 106.401396][T10600] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 106.451323][T10599] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3122: invalid indirect mapped block 256 (level 2) [ 106.542619][T10599] EXT4-fs (loop1): 2 truncates cleaned up [ 106.552325][T10615] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.565291][T10599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.599547][T10599] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3122: bg 0: block 5: invalid block bitmap [ 106.647859][T10599] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28 [ 106.660354][T10599] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.660354][T10599] [ 106.670117][T10599] EXT4-fs (loop1): Total free blocks count 0 [ 106.676127][T10599] EXT4-fs (loop1): Free/Dirty block details [ 106.682175][T10599] EXT4-fs (loop1): free_blocks=0 [ 106.687134][T10599] EXT4-fs (loop1): dirty_blocks=44 [ 106.692293][T10599] EXT4-fs (loop1): Block reservation details [ 106.698339][T10599] EXT4-fs (loop1): i_reserved_data_blocks=44 [ 106.741716][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.825853][T10633] loop4: detected capacity change from 0 to 128 [ 106.884187][T10635] No such timeout policy "syz0" [ 107.160909][T10651] loop6: detected capacity change from 0 to 512 [ 107.225571][T10651] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3146: invalid indirect mapped block 256 (level 2) [ 107.334629][T10651] EXT4-fs (loop6): 2 truncates cleaned up [ 107.376812][T10651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.451011][T10676] loop4: detected capacity change from 0 to 512 [ 107.460108][T10651] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3146: bg 0: block 5: invalid block bitmap [ 107.485512][T10680] loop1: detected capacity change from 0 to 128 [ 107.505176][T10651] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28 [ 107.517649][T10651] EXT4-fs (loop6): This should not happen!! Data will be lost [ 107.517649][T10651] [ 107.527290][T10651] EXT4-fs (loop6): Total free blocks count 0 [ 107.533417][T10651] EXT4-fs (loop6): Free/Dirty block details [ 107.539381][T10651] EXT4-fs (loop6): free_blocks=0 [ 107.544405][T10651] EXT4-fs (loop6): dirty_blocks=44 [ 107.547678][T10686] __nla_validate_parse: 3 callbacks suppressed [ 107.547694][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 107.549535][T10651] EXT4-fs (loop6): Block reservation details [ 107.570533][T10651] EXT4-fs (loop6): i_reserved_data_blocks=44 [ 107.588841][T10676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.609368][T10676] ext4 filesystem being mounted at /683/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.626977][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.670068][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 107.680096][T10697] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 107.686633][T10697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.694226][T10697] vhci_hcd vhci_hcd.0: Device attached [ 107.713484][T10699] vhci_hcd: connection closed [ 107.714439][ T51] vhci_hcd: stop threads [ 107.723506][ T51] vhci_hcd: release socket [ 107.728051][ T51] vhci_hcd: disconnect device [ 107.783364][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3174'. [ 107.889258][T10733] loop1: detected capacity change from 0 to 256 [ 107.925443][T10734] loop4: detected capacity change from 0 to 1764 [ 108.098461][T10770] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3200'. [ 108.242309][T10782] loop3: detected capacity change from 0 to 512 [ 108.249591][T10782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.277910][T10782] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.298892][T10782] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3205: Failed to acquire dquot type 1 [ 108.310682][T10782] EXT4-fs (loop3): 1 truncate cleaned up [ 108.330341][T10782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.372279][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.670966][T10840] loop7: detected capacity change from 0 to 512 [ 108.687157][T10840] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.708182][T10842] netlink: 'syz.1.3234': attribute type 2 has an invalid length. [ 108.715969][T10842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3234'. [ 108.751064][T10840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.777571][T10840] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.803305][T10840] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3232: corrupted xattr block 32: bad e_name length [ 108.817000][T10840] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 108.828402][T10840] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.3232: corrupted xattr block 32: bad e_name length [ 108.872828][T10840] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 108.947112][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.437308][T10940] program syz.1.3274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.623222][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3291'. [ 109.655341][T10974] loop3: detected capacity change from 0 to 2048 [ 109.699948][T10974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.730338][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.867534][T11007] tipc: Cannot configure node identity twice [ 109.884816][T11009] loop3: detected capacity change from 0 to 512 [ 109.896797][T11009] EXT4-fs (loop3): 1 truncate cleaned up [ 109.899053][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3310'. [ 109.908844][T11009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.961806][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.009847][T11028] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3313'. [ 110.026389][T11019] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3313'. [ 110.146924][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 110.146943][ T29] audit: type=1400 audit(2000000029.441:1394): avc: denied { accept } for pid=11045 comm="syz.3.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.243815][ T29] audit: type=1400 audit(2000000029.541:1395): avc: denied { read } for pid=11059 comm="syz.6.3333" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.266940][ T29] audit: type=1400 audit(2000000029.541:1396): avc: denied { open } for pid=11059 comm="syz.6.3333" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.293352][ T29] audit: type=1400 audit(2000000029.551:1397): avc: denied { ioctl } for pid=11059 comm="syz.6.3333" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.350169][T11074] loop7: detected capacity change from 0 to 1024 [ 110.356929][T11074] EXT4-fs: Ignoring removed nobh option [ 110.362662][T11074] EXT4-fs: Ignoring removed bh option [ 110.404149][ T29] audit: type=1400 audit(2000000029.701:1398): avc: denied { mounton } for pid=11082 comm="syz.3.3343" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 110.409050][T11074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.516528][ T29] audit: type=1400 audit(2000000029.811:1399): avc: denied { connect } for pid=11092 comm="syz.4.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.517568][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3348'. [ 110.536390][ T29] audit: type=1400 audit(2000000029.811:1400): avc: denied { name_connect } for pid=11092 comm="syz.4.3349" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 110.591578][ T29] audit: type=1400 audit(2000000029.891:1401): avc: denied { read write } for pid=11098 comm="syz.6.3352" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.618260][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.634251][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.662315][ T29] audit: type=1400 audit(2000000029.921:1402): avc: denied { open } for pid=11098 comm="syz.6.3352" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.685901][ T29] audit: type=1400 audit(2000000029.921:1403): avc: denied { ioctl } for pid=11098 comm="syz.6.3352" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.711102][T11107] loop1: detected capacity change from 0 to 1024 [ 110.783276][T11120] usb usb8: usbfs: process 11120 (syz.3.3361) did not claim interface 7 before use [ 110.899103][T11140] loop7: detected capacity change from 0 to 256 [ 110.952970][T11147] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3373'. [ 111.061074][T11164] loop7: detected capacity change from 0 to 1024 [ 111.068978][T11164] EXT4-fs: Ignoring removed orlov option [ 111.091277][T11164] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 111.135455][T11164] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.3383: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 111.166402][T11180] tipc: Enabled bearer <udp:syz0>, priority 10 [ 111.198051][T11184] loop3: detected capacity change from 0 to 256 [ 111.227863][T11184] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.660978][T11245] pimreg: left allmulticast mode [ 111.750134][T11257] netlink: 'syz.6.3428': attribute type 5 has an invalid length. [ 111.751643][T11253] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 112.157319][ T1032] tipc: Node number set to 1835347501 [ 112.329075][T11284] loop3: detected capacity change from 0 to 512 [ 112.500927][T11301] loop6: detected capacity change from 0 to 1024 [ 112.542619][T11301] EXT4-fs: Ignoring removed nobh option [ 112.548361][T11301] EXT4-fs: Ignoring removed bh option [ 112.562101][T11284] EXT4-fs (loop3): 1 orphan inode deleted [ 112.577765][ T3431] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 112.592589][T11284] ext4 filesystem being mounted at /754/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.798973][T11345] loop1: detected capacity change from 0 to 1024 [ 112.818649][T11345] EXT4-fs: Ignoring removed nobh option [ 112.824269][T11345] EXT4-fs: Ignoring removed bh option [ 112.975236][T11365] loop6: detected capacity change from 0 to 512 [ 113.023956][T11365] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 113.092246][T11365] EXT4-fs (loop6): orphan cleanup on readonly fs [ 113.135445][T11365] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3474: invalid indirect mapped block 256 (level 2) [ 113.212767][T11365] EXT4-fs (loop6): 2 truncates cleaned up [ 113.238959][T11380] __nla_validate_parse: 1 callbacks suppressed [ 113.238991][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3482'. [ 113.336061][T11391] netlink: 'syz.7.3486': attribute type 17 has an invalid length. [ 113.344037][T11391] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3486'. [ 113.375189][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3492'. [ 113.377631][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3490'. [ 113.386116][T11391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.603213][T11431] netlink: 'syz.4.3508': attribute type 4 has an invalid length. [ 113.611084][T11431] netlink: 3649 bytes leftover after parsing attributes in process `syz.4.3508'. [ 113.693796][T11446] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 114.010764][T11477] loop7: detected capacity change from 0 to 1024 [ 114.118937][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3531'. [ 114.127928][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3531'. [ 114.136907][T11488] netlink: 'syz.7.3531': attribute type 20 has an invalid length. [ 114.221570][T11493] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3535'. [ 114.311603][T11504] netlink: 'syz.4.3540': attribute type 3 has an invalid length. [ 114.319428][T11504] netlink: 'syz.4.3540': attribute type 3 has an invalid length. [ 114.560191][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3550'. [ 114.753854][T11544] loop4: detected capacity change from 0 to 4096 [ 114.867293][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3571'. [ 114.980932][T11584] loop3: detected capacity change from 0 to 256 [ 115.075569][T11595] loop7: detected capacity change from 0 to 1024 [ 115.104958][T11597] loop1: detected capacity change from 0 to 512 [ 115.147687][T11597] EXT4-fs: Ignoring removed oldalloc option [ 115.154198][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 115.154212][ T29] audit: type=1400 audit(2000000034.451:1449): avc: denied { setattr } for pid=11594 comm="syz.7.3583" name="file1" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.200341][T11597] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.3584: Parent and EA inode have the same ino 15 [ 115.220797][ T29] audit: type=1326 audit(2000000034.521:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 115.254156][T11597] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.3584: Parent and EA inode have the same ino 15 [ 115.263511][ T29] audit: type=1326 audit(2000000034.521:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 115.290080][ T29] audit: type=1326 audit(2000000034.521:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 115.301741][T11597] EXT4-fs (loop1): 1 orphan inode deleted [ 115.313559][ T29] audit: type=1326 audit(2000000034.541:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 115.342797][ T29] audit: type=1326 audit(2000000034.541:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 115.412100][ T29] audit: type=1400 audit(2000000034.711:1455): avc: denied { create } for pid=11625 comm="syz.6.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.433853][ T29] audit: type=1400 audit(2000000034.731:1456): avc: denied { shutdown } for pid=11625 comm="syz.6.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.466229][ T29] audit: type=1400 audit(2000000034.751:1457): avc: denied { read } for pid=11625 comm="syz.6.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.534198][ T29] audit: type=1400 audit(2000000034.831:1458): avc: denied { write } for pid=11633 comm="syz.3.3600" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.604845][T11645] loop4: detected capacity change from 0 to 1024 [ 115.623912][T11648] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.688671][T11654] loop7: detected capacity change from 0 to 4096 [ 115.869724][T11671] loop3: detected capacity change from 0 to 1024 [ 115.884490][T11671] EXT4-fs: Ignoring removed nobh option [ 115.890183][T11671] EXT4-fs: Ignoring removed bh option [ 116.003681][T11699] loop3: detected capacity change from 0 to 512 [ 116.052313][T11699] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3630: bad orphan inode 15 [ 116.085391][T11699] ext4_test_bit(bit=14, block=18) = 1 [ 116.090841][T11699] is_bad_inode(inode)=0 [ 116.095012][T11699] NEXT_ORPHAN(inode)=1023 [ 116.099387][T11699] max_ino=32 [ 116.102906][T11699] i_nlink=0 [ 116.145975][T11699] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.3630: corrupted xattr block 19: invalid header [ 116.168394][T11699] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 116.205865][T11699] ext4 filesystem being mounted at /786/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 116.283814][T11732] netlink: 'syz.1.3644': attribute type 11 has an invalid length. [ 116.300273][T11738] loop3: detected capacity change from 0 to 1024 [ 116.435109][T11758] loop4: detected capacity change from 0 to 512 [ 116.457603][T11758] EXT4-fs: Ignoring removed orlov option [ 116.473572][T11758] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 116.489227][T11758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 116.500771][T11758] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.3658: corrupted in-inode xattr: e_value size too large [ 116.515306][T11758] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3658: couldn't read orphan inode 15 (err -117) [ 116.659777][T11792] IPv6: syztnl0: Disabled Multicast RS [ 116.668100][T11794] tipc: Can't bind to reserved service type 1 [ 116.763788][T11807] tipc: Enabled bearer <eth:ip6_vti0>, priority 10 [ 116.790919][T11809] loop3: detected capacity change from 0 to 2048 [ 116.927312][T11830] loop3: detected capacity change from 0 to 1024 [ 116.935499][T11830] EXT4-fs: inline encryption not supported [ 116.941508][T11830] EXT4-fs: Ignoring removed i_version option [ 116.948752][T11830] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.967313][T11830] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.3691: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.029660][T11830] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.3691: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.049433][T11830] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.3691: Failed to acquire dquot type 0 [ 117.072195][T11830] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 117.092758][T11830] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.3691: mark_inode_dirty error [ 117.121798][T11830] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 117.140463][T11830] EXT4-fs (loop3): 1 orphan inode deleted [ 117.157387][ T383] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.182627][ T383] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 117.196179][T11843] loop7: detected capacity change from 0 to 128 [ 117.228202][ T383] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm kworker/u8:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.251813][ T383] EXT4-fs error (device loop3): ext4_write_dquot:6915: comm kworker/u8:5: Failed to commit dquot type 0 [ 117.273635][ T3315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 117.288157][ T3315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 117.298258][ T3315] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 117.331077][T11849] netlink: 'syz.3.3699': attribute type 2 has an invalid length. [ 117.338869][T11849] netlink: 'syz.3.3699': attribute type 1 has an invalid length. [ 117.568158][T11872] loop1: detected capacity change from 0 to 512 [ 117.580014][T11872] EXT4-fs: Ignoring removed bh option [ 117.586545][T11872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.607968][ T3390] kernel write not supported for file /stat (pid: 3390 comm: kworker/0:4) [ 117.636095][T11872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 117.665896][T11872] System zones: 1-12 [ 117.685282][T11872] EXT4-fs (loop1): 1 truncate cleaned up [ 117.716668][T11872] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 118.051458][T11921] loop6: detected capacity change from 0 to 1024 [ 118.061109][T11921] EXT4-fs: Ignoring removed nobh option [ 118.066798][T11921] EXT4-fs: Ignoring removed bh option [ 118.161544][T11938] loop6: detected capacity change from 0 to 512 [ 118.173794][T11938] EXT4-fs: Ignoring removed oldalloc option [ 118.178639][T11940] loop4: detected capacity change from 0 to 1024 [ 118.203456][T11938] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3742: Parent and EA inode have the same ino 15 [ 118.226864][T11938] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3742: Parent and EA inode have the same ino 15 [ 118.240144][T11938] EXT4-fs (loop6): 1 orphan inode deleted [ 118.260110][T11950] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 118.512263][T11971] __nla_validate_parse: 3 callbacks suppressed [ 118.512323][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3753'. [ 118.527577][T11971] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 118.676573][T11989] loop4: detected capacity change from 0 to 512 [ 118.739134][T11989] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3765: casefold flag without casefold feature [ 118.771138][T11989] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3765: couldn't read orphan inode 15 (err -117) [ 118.830952][T12002] loop1: detected capacity change from 0 to 164 [ 118.867976][T12005] IPv6: syztnl0: Disabled Multicast RS [ 119.050831][T12021] loop4: detected capacity change from 0 to 512 [ 119.061089][T12021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.073258][T12021] EXT4-fs (loop4): 1 truncate cleaned up [ 119.361748][T12067] loop6: detected capacity change from 0 to 512 [ 119.374502][T12067] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3803: bad orphan inode 15 [ 119.385057][T12067] ext4_test_bit(bit=14, block=18) = 1 [ 119.390486][T12067] is_bad_inode(inode)=0 [ 119.394648][T12067] NEXT_ORPHAN(inode)=1023 [ 119.399067][T12067] max_ino=32 [ 119.402269][T12067] i_nlink=0 [ 119.406067][T12067] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz.6.3803: corrupted xattr block 19: invalid header [ 119.424564][T12067] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 119.439135][T12067] ext4 filesystem being mounted at /623/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 119.484963][T12080] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3808'. [ 119.494002][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3808'. [ 119.680104][T12108] loop7: detected capacity change from 0 to 512 [ 119.705707][T12108] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3820: bad orphan inode 15 [ 119.725009][T12108] ext4_test_bit(bit=14, block=18) = 1 [ 119.730615][T12108] is_bad_inode(inode)=0 [ 119.734784][T12108] NEXT_ORPHAN(inode)=1023 [ 119.739785][T12108] max_ino=32 [ 119.743004][T12108] i_nlink=0 [ 119.758877][T12108] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.3820: corrupted xattr block 19: invalid header [ 119.779597][T12108] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -117) [ 119.808954][T12108] ext4 filesystem being mounted at /265/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 119.831662][T12125] netlink: 'syz.1.3830': attribute type 7 has an invalid length. [ 119.839555][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 119.860858][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3831'. [ 120.044781][T12154] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 120.180749][T12176] tc_dump_action: action bad kind [ 120.186339][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 120.186354][ T29] audit: type=1400 audit(2000000039.482:1572): avc: denied { bind } for pid=12174 comm="syz.1.3854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.239668][T12181] loop3: detected capacity change from 0 to 512 [ 120.241830][ T29] audit: type=1400 audit(2000000039.502:1573): avc: denied { create } for pid=12178 comm="syz.6.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.265665][ T29] audit: type=1400 audit(2000000039.502:1574): avc: denied { setopt } for pid=12178 comm="syz.6.3856" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.303017][ T29] audit: type=1400 audit(2000000039.592:1575): avc: denied { write } for pid=12184 comm="syz.4.3860" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.350813][T12181] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3858: casefold flag without casefold feature [ 120.352876][ T29] audit: type=1400 audit(2000000039.642:1576): avc: denied { create } for pid=12191 comm="syz.7.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.383858][ T29] audit: type=1400 audit(2000000039.642:1577): avc: denied { write } for pid=12191 comm="syz.7.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.404075][ T29] audit: type=1400 audit(2000000039.642:1578): avc: denied { nlmsg_write } for pid=12191 comm="syz.7.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.424910][ T29] audit: type=1400 audit(2000000039.682:1579): avc: denied { create } for pid=12195 comm="syz.4.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 120.445358][ T29] audit: type=1400 audit(2000000039.692:1580): avc: denied { setopt } for pid=12195 comm="syz.4.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 120.464798][T12181] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3858: couldn't read orphan inode 15 (err -117) [ 120.491776][ T29] audit: type=1400 audit(2000000039.782:1581): avc: denied { getopt } for pid=12200 comm="syz.1.3865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 120.584774][T12214] loop3: detected capacity change from 0 to 2048 [ 120.939112][T12268] loop4: detected capacity change from 0 to 8192 [ 121.050358][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3907'. [ 121.124644][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3911'. [ 121.528363][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3939'. [ 121.671601][T12373] loop7: detected capacity change from 0 to 1024 [ 121.698112][T12373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.743155][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 121.776606][T12389] loop6: detected capacity change from 0 to 512 [ 121.784338][T12389] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.795505][T12373] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 121.810339][T12389] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 121.810466][T12389] EXT4-fs (loop6): orphan cleanup on readonly fs [ 121.811197][T12389] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.846171][T12389] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 121.854457][T12389] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3959: bg 0: block 40: padding at end of block bitmap is not set [ 121.854618][T12389] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 121.854853][T12389] EXT4-fs (loop6): 1 truncate cleaned up [ 121.887798][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3961'. [ 121.892876][T12389] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.3959: corrupted xattr block 31: invalid header [ 121.920883][T12389] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 121.930046][T12389] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.3959: corrupted xattr block 31: invalid header [ 121.931722][T12389] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 121.955055][T12389] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.3959: bad symlink. [ 122.580129][T12500] loop3: detected capacity change from 0 to 256 [ 122.601142][ T3681] udevd[3681]: symlink '../../loop3' '/dev/disk/by-diskseq/630.tmp-b7:3' failed: Read-only file system [ 122.630594][T12504] loop4: detected capacity change from 0 to 512 [ 122.631018][T12500] FAT-fs (loop3): Directory bread(block 64) failed [ 122.666415][T12500] FAT-fs (loop3): Directory bread(block 65) failed [ 122.668596][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/631.tmp-b7:4' failed: Read-only file system [ 122.673118][T12500] FAT-fs (loop3): Directory bread(block 66) failed [ 122.693601][T12500] FAT-fs (loop3): Directory bread(block 67) failed [ 122.701398][T12500] FAT-fs (loop3): Directory bread(block 68) failed [ 122.708321][T12500] FAT-fs (loop3): Directory bread(block 69) failed [ 122.715072][T12500] FAT-fs (loop3): Directory bread(block 70) failed [ 122.720010][T12504] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.722021][T12500] FAT-fs (loop3): Directory bread(block 71) failed [ 122.742960][T12500] FAT-fs (loop3): Directory bread(block 72) failed [ 122.749585][T12500] FAT-fs (loop3): Directory bread(block 73) failed [ 122.760209][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 122.773828][T12510] loop1: detected capacity change from 0 to 4096 [ 122.780305][T12504] EXT4-fs (loop4): mount failed [ 122.822941][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/631.tmp-b7:4' failed: Read-only file system [ 122.836238][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/630.tmp-b7:3' failed: Read-only file system [ 122.853187][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/631.tmp-b7:4' failed: Read-only file system [ 122.870734][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/630.tmp-b7:3' failed: Read-only file system [ 122.872685][ T3681] udevd[3681]: symlink '../../loop1' '/dev/disk/by-diskseq/632.tmp-b7:1' failed: Read-only file system [ 122.886029][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/633.tmp-b7:4' failed: Read-only file system [ 122.907532][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/634.tmp-b7:3' failed: Read-only file system [ 122.950259][T12521] loop6: detected capacity change from 0 to 512 [ 122.970406][T12527] wireguard0: entered promiscuous mode [ 122.975917][T12527] wireguard0: entered allmulticast mode [ 123.031763][T12521] EXT4-fs (loop6): too many log groups per flexible block group [ 123.040161][T12521] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 123.056700][T12521] EXT4-fs (loop6): mount failed [ 123.256546][T12567] loop7: detected capacity change from 0 to 128 [ 123.719109][T12631] __nla_validate_parse: 3 callbacks suppressed [ 123.719127][T12631] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4073'. [ 123.733969][T12629] loop3: detected capacity change from 0 to 2048 [ 123.786309][T12629] EXT4-fs (loop3): failed to initialize system zone (-117) [ 123.806766][T12638] netlink: 'syz.1.4078': attribute type 298 has an invalid length. [ 123.823141][T12629] EXT4-fs (loop3): mount failed [ 123.845822][T12647] loop4: detected capacity change from 0 to 128 [ 123.862821][T12647] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.907559][T12647] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.941034][T12658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4086'. [ 124.087424][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4096'. [ 124.147358][T12686] netlink: 'syz.1.4099': attribute type 30 has an invalid length. [ 124.339719][T12721] loop3: detected capacity change from 0 to 512 [ 124.357204][T12721] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 124.370602][T12721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0102] [ 124.381519][T12721] EXT4-fs (loop3): orphan cleanup on readonly fs [ 124.397351][T12721] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.4116: attempt to clear invalid blocks 1024 len 1 [ 124.416326][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4121'. [ 124.439822][T12733] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 124.462625][T12721] EXT4-fs (loop3): Remounting filesystem read-only [ 124.469938][T12721] EXT4-fs (loop3): 1 truncate cleaned up [ 124.478720][T12721] kernel profiling enabled (shift: 63) [ 124.484238][T12721] profiling shift: 63 too large [ 124.520772][T12745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4124'. [ 124.546183][T12736] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4124'. [ 124.713625][T12770] loop4: detected capacity change from 0 to 512 [ 124.717736][T12774] loop7: detected capacity change from 0 to 512 [ 124.736822][T12774] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 124.821822][T12774] EXT4-fs (loop7): 1 truncate cleaned up [ 124.830607][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4142'. [ 124.872307][T12770] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4140: iget: bad extended attribute block 1 [ 124.885762][T12770] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4140: couldn't read orphan inode 15 (err -117) [ 125.116179][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4160'. [ 125.192290][T12816] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615) [ 125.203213][T12816] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 125.353796][T12846] x_tables: ip_tables: udp match: only valid for protocol 17 [ 125.432338][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 125.432354][ T29] audit: type=1400 audit(2000000044.732:1673): avc: denied { name_bind } for pid=12852 comm="syz.6.4179" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 125.582110][ T29] audit: type=1400 audit(2000000044.882:1674): avc: denied { setopt } for pid=12876 comm="syz.4.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.700706][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4199'. [ 125.725043][T12900] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4203'. [ 125.783465][ T29] audit: type=1400 audit(2000000045.082:1675): avc: denied { write } for pid=12907 comm="syz.6.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.990732][T12940] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 126.006284][ T29] audit: type=1400 audit(2000000045.302:1676): avc: denied { write } for pid=12938 comm="syz.6.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 126.059643][T12944] loop4: detected capacity change from 0 to 128 [ 126.084594][ T29] audit: type=1326 audit(2000000045.362:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 126.108323][ T29] audit: type=1326 audit(2000000045.362:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 126.131897][ T29] audit: type=1326 audit(2000000045.372:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d3a70d2d0 code=0x7ffc0000 [ 126.155600][ T29] audit: type=1326 audit(2000000045.372:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 126.179229][ T29] audit: type=1326 audit(2000000045.372:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 126.202928][ T29] audit: type=1326 audit(2000000045.372:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.3.4223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 126.427795][T12964] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 126.434419][T12964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.441893][T12964] vhci_hcd vhci_hcd.0: Device attached [ 126.450684][T12967] vhci_hcd: connection closed [ 126.454214][ T3431] vhci_hcd: stop threads [ 126.463298][ T3431] vhci_hcd: release socket [ 126.467873][ T3431] vhci_hcd: disconnect device [ 126.788007][T13014] loop4: detected capacity change from 0 to 128 [ 126.839091][T13014] ext4 filesystem being mounted at /914/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.913750][T13034] loop6: detected capacity change from 0 to 128 [ 127.050610][T13055] random: crng reseeded on system resumption [ 127.202650][T13073] loop7: detected capacity change from 0 to 512 [ 127.234642][T13078] loop4: detected capacity change from 0 to 128 [ 127.242452][T13073] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 127.306050][T13073] EXT4-fs (loop7): 1 orphan inode deleted [ 127.312029][T13073] EXT4-fs (loop7): 1 truncate cleaned up [ 127.445835][T13104] loop6: detected capacity change from 0 to 512 [ 127.455827][T13098] loop3: detected capacity change from 0 to 8192 [ 127.469094][T13104] EXT4-fs mount: 69 callbacks suppressed [ 127.469111][T13104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.492580][T13104] ext4 filesystem being mounted at /710/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.521614][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.607641][ T3681] udevd[3681]: symlink '../../loop3' '/dev/disk/by-diskseq/661.tmp-b7:3' failed: Read-only file system [ 127.610190][ T3306] udevd[3306]: symlink '../../loop6' '/dev/disk/by-diskseq/663.tmp-b7:6' failed: Read-only file system [ 127.638737][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/659.tmp-b7:7' failed: Read-only file system [ 127.672818][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/659.tmp-b7:7' failed: Read-only file system [ 127.704187][T13122] loop7: detected capacity change from 0 to 512 [ 127.733439][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/664.tmp-b7:7' failed: Read-only file system [ 127.746796][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 127.760690][T13122] EXT4-fs (loop7): too many log groups per flexible block group [ 127.768494][T13122] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 127.776761][T13122] EXT4-fs (loop7): mount failed [ 127.798513][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/664.tmp-b7:7' failed: Read-only file system [ 127.815919][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 127.849758][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/662.tmp-b7:3' failed: Read-only file system [ 127.862491][ T3306] udevd[3306]: symlink '../../loop6' '/dev/disk/by-diskseq/663.tmp-b7:6' failed: Read-only file system [ 128.094197][T13167] SELinux: security_context_str_to_sid (E�) failed with errno=-22 [ 128.094405][T13163] loop1: detected capacity change from 0 to 512 [ 128.155324][T13163] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.177893][T13163] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.194662][T13163] EXT4-fs (loop1): 1 truncate cleaned up [ 128.201163][T13163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.229989][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.380124][T13193] loop1: detected capacity change from 0 to 512 [ 128.384238][T13191] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 128.388800][T13193] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.405617][T13193] EXT4-fs (loop1): 1 orphan inode deleted [ 128.411500][T13193] EXT4-fs (loop1): 1 truncate cleaned up [ 128.418891][T13193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.461262][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.685405][T13229] vlan3: entered allmulticast mode [ 128.690868][T13229] gretap0: entered allmulticast mode [ 128.782382][T13244] 9pnet_fd: Insufficient options for proto=fd [ 128.794801][T13246] loop3: detected capacity change from 0 to 512 [ 128.802069][T13246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 128.807509][T13247] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 128.807509][T13247] The task syz.7.4362 (13247) triggered the difference, watch for misbehavior. [ 128.843749][T13246] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 128.851743][T13246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 128.863624][T13246] System zones: 0-1, 15-15, 18-18, 34-34 [ 128.869880][T13246] EXT4-fs (loop3): orphan cleanup on readonly fs [ 128.878268][T13246] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 128.892992][T13246] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 128.899951][T13246] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4365: bg 0: block 40: padding at end of block bitmap is not set [ 128.914344][T13246] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 128.923277][T13246] EXT4-fs (loop3): 1 truncate cleaned up [ 128.930228][T13246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.946881][T13246] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.4365: bad symlink. [ 128.978163][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.000945][T13260] __nla_validate_parse: 8 callbacks suppressed [ 129.000962][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 129.018375][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 129.091793][T13266] loop3: detected capacity change from 0 to 512 [ 129.100648][T13266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.159393][T13266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.173838][T13279] random: crng reseeded on system resumption [ 129.179405][T13266] ext4 filesystem being mounted at /927/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.205616][T13266] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4374: bg 0: block 304: padding at end of block bitmap is not set [ 129.250352][T13266] EXT4-fs (loop3): Remounting filesystem read-only [ 129.332166][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.620860][T13321] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4400'. [ 129.697509][T13329] loop3: detected capacity change from 0 to 512 [ 129.710806][T13331] netlink: 'syz.7.4405': attribute type 4 has an invalid length. [ 129.719291][T13327] loop1: detected capacity change from 0 to 512 [ 129.731665][T13329] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.745602][T13331] netlink: 'syz.7.4405': attribute type 4 has an invalid length. [ 129.760046][T13333] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4406'. [ 129.777024][T13327] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4404: corrupted in-inode xattr: e_name out of bounds [ 129.793384][T13329] EXT4-fs (loop3): 1 truncate cleaned up [ 129.799180][T13327] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4404: couldn't read orphan inode 15 (err -117) [ 129.856668][T13329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.878561][T13327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.919335][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.977181][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.005113][T13349] loop7: detected capacity change from 0 to 512 [ 130.028350][T13349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.060961][T13349] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 130.077344][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4416'. [ 130.086273][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4416'. [ 130.095164][T13355] netlink: 'syz.6.4416': attribute type 15 has an invalid length. [ 130.113953][T13349] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 130.129856][T13349] EXT4-fs (loop7): 1 truncate cleaned up [ 130.135939][T13349] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.176543][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4421'. [ 130.176564][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4421'. [ 130.176674][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4421'. [ 130.237365][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.343959][T13379] loop3: detected capacity change from 0 to 1024 [ 130.381853][T13379] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 130.391712][T13379] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 130.433129][T13379] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 130.437234][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 130.437247][ T29] audit: type=1326 audit(2000000049.732:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13387 comm="syz.6.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 130.445653][T13379] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.4428: unexpected bad inode w/o EXT4_IGET_BAD [ 130.449725][ T29] audit: type=1326 audit(2000000049.742:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13387 comm="syz.6.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 130.509248][T13379] EXT4-fs (loop3): no journal found [ 130.509267][T13379] EXT4-fs (loop3): can't get journal size [ 130.509974][T13379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.535487][ T29] audit: type=1326 audit(2000000049.782:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13387 comm="syz.6.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 130.543806][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4431'. [ 130.568475][T13386] netlink: 'syz.1.4431': attribute type 15 has an invalid length. [ 130.579776][ T29] audit: type=1326 audit(2000000049.882:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13387 comm="syz.6.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 130.603920][ T29] audit: type=1326 audit(2000000049.882:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13387 comm="syz.6.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5827e5e969 code=0x7ffc0000 [ 130.654524][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.713985][T13395] loop3: detected capacity change from 0 to 512 [ 130.757558][T13395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.781009][T13395] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4434: invalid indirect mapped block 4294967295 (level 1) [ 130.850085][T13395] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4434: invalid indirect mapped block 4294967295 (level 1) [ 130.892065][ T29] audit: type=1400 audit(2000000050.182:1752): avc: denied { write } for pid=13409 comm="syz.7.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.958434][T13395] EXT4-fs (loop3): 2 truncates cleaned up [ 130.974831][T13395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.016998][T13418] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 131.028852][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.168759][ T29] audit: type=1326 audit(2000000050.472:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 131.224952][ T29] audit: type=1326 audit(2000000050.492:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 131.248564][ T29] audit: type=1326 audit(2000000050.492:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 131.272061][ T29] audit: type=1326 audit(2000000050.492:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.3.4451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3a70e969 code=0x7ffc0000 [ 131.457334][T13452] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 131.838715][T13478] netlink: 'syz.1.4471': attribute type 4 has an invalid length. [ 132.029236][T13500] loop6: detected capacity change from 0 to 1024 [ 132.068456][T13500] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.086418][T13500] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 132.094912][T13500] EXT4-fs (loop6): orphan cleanup on readonly fs [ 132.102490][T13500] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #3: comm syz.6.4482: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 132.120929][T13500] EXT4-fs error (device loop6): ext4_quota_enable:7129: comm syz.6.4482: Bad quota inode: 3, type: 0 [ 132.136092][T13500] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 132.150842][T13500] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 132.158360][T13500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.174724][T13500] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 132.210845][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.421553][T13531] loop7: detected capacity change from 0 to 2048 [ 132.487130][T13531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.548749][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.617787][ T3306] udevd[3306]: symlink '../../loop6' '/dev/disk/by-diskseq/685.tmp-b7:6' failed: Read-only file system [ 132.635882][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/686.tmp-b7:7' failed: Read-only file system [ 132.650528][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/683.tmp-b7:3' failed: Read-only file system [ 132.665239][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/676.tmp-b7:1' failed: Read-only file system [ 132.685114][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/687.tmp-b7:7' failed: Read-only file system [ 132.711251][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-diskseq/683.tmp-b7:3' failed: Read-only file system [ 132.741822][ T3681] udevd[3681]: symlink '../../loop6' '/dev/disk/by-diskseq/685.tmp-b7:6' failed: Read-only file system [ 132.768869][ T3306] udevd[3306]: symlink '../../loop7' '/dev/disk/by-diskseq/687.tmp-b7:7' failed: Read-only file system [ 132.810904][ T3681] udevd[3681]: symlink '../../loop3' '/dev/disk/by-diskseq/683.tmp-b7:3' failed: Read-only file system [ 132.845093][ T3306] udevd[3306]: symlink '../../loop7' '/dev/disk/by-diskseq/687.tmp-b7:7' failed: Read-only file system [ 133.031448][T13599] loop3: detected capacity change from 0 to 2048 [ 133.080077][T13599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.136510][T13610] netlink: 'syz.7.4532': attribute type 1 has an invalid length. [ 133.145222][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.154905][T13610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.154930][T13610] IPv6: NLM_F_CREATE should be set when creating new route [ 133.451899][T13650] netlink: 'syz.3.4552': attribute type 5 has an invalid length. [ 133.549519][T13662] loop1: detected capacity change from 0 to 256 [ 133.586404][T13662] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.595154][T13662] FAT-fs (loop1): Filesystem has been set read-only [ 133.969017][ T36] kernel write not supported for file /1601/attr/prev (pid: 36 comm: kworker/1:1) [ 134.372565][T13705] loop7: detected capacity change from 0 to 1024 [ 134.401174][T13708] loop1: detected capacity change from 0 to 512 [ 134.412837][T13709] loop6: detected capacity change from 0 to 1024 [ 134.428566][T13705] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.439140][T13709] EXT4-fs: Ignoring removed oldalloc option [ 134.445094][T13709] EXT4-fs: Ignoring removed orlov option [ 134.450899][T13709] EXT4-fs: Ignoring removed oldalloc option [ 134.457073][T13709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.468851][T13705] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 134.502232][T13709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.529933][T13708] EXT4-fs (loop1): 1 orphan inode deleted [ 134.535920][T13705] EXT4-fs (loop7): orphan cleanup on readonly fs [ 134.546102][ T3431] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 134.557887][T13708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.577196][T13705] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 134.589765][T13709] EXT4-fs error (device loop6): ext4_xattr_set_entry:1660: inode #13: comm syz.6.4579: corrupted xattr entries [ 134.603188][T13708] ext4 filesystem being mounted at /956/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.614155][T13705] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.4578: mark_inode_dirty error [ 134.628340][T13709] EXT4-fs (loop6): Remounting filesystem read-only [ 134.634868][T13709] EXT4-fs warning (device loop6): ext4_xattr_ibody_set:2272: inode #18: comm syz.6.4579: dec ref error=-30 [ 134.656324][T13705] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4578: Invalid block bitmap block 3 in block_group 0 [ 134.707839][T13705] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4578: Invalid block bitmap block 3 in block_group 0 [ 134.725777][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.735361][T13705] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4578: Invalid block bitmap block 3 in block_group 0 [ 134.753039][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.817116][T13705] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 134.846280][T13705] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.4578: mark_inode_dirty error [ 134.876247][T13705] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm syz.7.4578: lblock 6 mapped to illegal pblock 1 (length 1) [ 134.915214][T13737] loop1: detected capacity change from 0 to 256 [ 134.923361][T13705] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 48: comm syz.7.4578: lblock 0 mapped to illegal pblock 48 (length 1) [ 134.949267][T13737] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 134.957126][T13737] FAT-fs (loop1): Filesystem has been set read-only [ 134.975623][T13705] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.4578: Failed to acquire dquot type 0 [ 135.005676][T13705] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 49: comm syz.7.4578: lblock 1 mapped to illegal pblock 49 (length 1) [ 135.057261][T13705] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.4578: Failed to acquire dquot type 0 [ 135.107377][T13705] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 135.137849][T13705] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #15: comm syz.7.4578: mark_inode_dirty error [ 135.169685][T13746] loop6: detected capacity change from 0 to 512 [ 135.179871][T13705] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 135.199748][T13755] __nla_validate_parse: 8 callbacks suppressed [ 135.199761][T13755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4599'. [ 135.215100][T13755] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4599'. [ 135.215978][T13705] EXT4-fs (loop7): 1 orphan inode deleted [ 135.251400][T13746] EXT4-fs (loop6): too many log groups per flexible block group [ 135.259152][T13746] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 135.267300][T13705] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.268387][T13746] EXT4-fs (loop6): mount failed [ 135.313379][T13764] loop1: detected capacity change from 0 to 1024 [ 135.347467][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.382143][T13768] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4604'. [ 135.396016][T13766] loop3: detected capacity change from 0 to 512 [ 135.398553][T13764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.428969][T13766] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 135.463082][T13766] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 135.546052][T13766] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 135.589392][T13766] EXT4-fs (loop3): 1 truncate cleaned up [ 135.601390][T13766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.657589][T13766] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 135.721355][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.733605][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.758872][T13793] Invalid ELF header magic: != ELF [ 135.842103][T13801] netlink: 'syz.6.4619': attribute type 2 has an invalid length. [ 135.860329][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 135.860387][ T29] audit: type=1326 audit(2000000055.163:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd045ce969 code=0x7ffc0000 [ 135.898129][ T29] audit: type=1326 audit(2000000055.193:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd045ce969 code=0x7ffc0000 [ 135.921694][ T29] audit: type=1326 audit(2000000055.193:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd045ce969 code=0x7ffc0000 [ 135.945275][ T29] audit: type=1326 audit(2000000055.203:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd045ce969 code=0x7ffc0000 [ 135.946964][T13803] tipc: Invalid UDP bearer configuration [ 135.969485][ T29] audit: type=1326 audit(2000000055.203:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcd045ce969 code=0x7ffc0000 [ 135.969626][ T29] audit: type=1326 audit(2000000055.203:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd045ce969 code=0x7ffc0000 [ 135.969735][ T29] audit: type=1326 audit(2000000055.203:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13804 comm="syz.1.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd045ce969 code=0x7ffc0000 [ 136.047279][T13803] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 136.111939][T13815] usb usb1: usbfs: process 13815 (syz.6.4626) did not claim interface 0 before use [ 136.196268][ T29] audit: type=1400 audit(2000000055.493:1780): avc: denied { create } for pid=13824 comm="syz.6.4631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.216164][ T29] audit: type=1400 audit(2000000055.493:1781): avc: denied { write } for pid=13824 comm="syz.6.4631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.265128][T13827] loop7: detected capacity change from 0 to 512 [ 136.274335][ T29] audit: type=1400 audit(2000000055.583:1782): avc: denied { setopt } for pid=13832 comm="syz.1.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.317358][T13827] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 136.389521][T13827] EXT4-fs (loop7): failed to open journal device unknown-block(11,131) -6 [ 136.569433][T13867] loop1: detected capacity change from 0 to 512 [ 136.625869][T13867] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.4651: corrupted in-inode xattr: e_name out of bounds [ 136.667765][T13867] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4651: couldn't read orphan inode 15 (err -117) [ 136.707694][T13881] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4656'. [ 136.714801][T13867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.716668][T13881] netlink: 276 bytes leftover after parsing attributes in process `syz.7.4656'. [ 136.744283][T13867] EXT4-fs error (device loop1): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz.1.4651: bad entry in directory: rec_len % 4 != 0 - offset=76, inode=4294967056, rec_len=127, size=1024 fake=0 [ 136.813598][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.877752][T13893] loop1: detected capacity change from 0 to 512 [ 136.919818][T13893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 136.993125][T13893] ext4 filesystem being mounted at /977/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.078160][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 137.407156][ T36] IPVS: starting estimator thread 0... [ 137.429272][T13943] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4681'. [ 137.506205][T13939] IPVS: using max 2352 ests per chain, 117600 per kthread [ 137.584868][T13959] devtmpfs: Too few inodes for current use [ 137.659719][ T3306] udevd[3306]: symlink '../../loop7' '/dev/disk/by-diskseq/707.tmp-b7:7' failed: Read-only file system [ 137.674583][ T3681] udevd[3681]: symlink '../../loop6' '/dev/disk/by-diskseq/700.tmp-b7:6' failed: Read-only file system [ 137.688175][ T4075] udevd[4075]: symlink '../../loop1' '/dev/disk/by-diskseq/711.tmp-b7:1' failed: Read-only file system [ 137.707972][T13964] loop6: detected capacity change from 0 to 512 [ 137.709586][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-diskseq/704.tmp-b7:3' failed: Read-only file system [ 137.730705][ T3681] udevd[3681]: symlink '../../loop6' '/dev/disk/by-diskseq/712.tmp-b7:6' failed: Read-only file system [ 137.745426][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4695'. [ 137.757137][T13964] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.769574][ T3681] udevd[3681]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 137.798709][ T3306] udevd[3306]: symlink '../../loop7' '/dev/disk/by-diskseq/707.tmp-b7:7' failed: Read-only file system [ 137.799893][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/704.tmp-b7:3' failed: Read-only file system [ 137.835995][ T3681] udevd[3681]: symlink '../../loop1' '/dev/disk/by-diskseq/711.tmp-b7:1' failed: Read-only file system [ 137.849647][T13964] EXT4-fs (loop6): 1 truncate cleaned up [ 137.856088][T13964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.871520][ T3306] udevd[3306]: symlink '../../loop7' '/dev/disk/by-diskseq/707.tmp-b7:7' failed: Read-only file system [ 137.939214][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.142792][T14008] loop1: detected capacity change from 0 to 2048 [ 138.161972][T14011] loop3: detected capacity change from 0 to 1024 [ 138.187096][T14008] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 138.214430][T14013] usb usb6: usbfs: process 14013 (syz.6.4712) did not claim interface 0 before use [ 138.216720][T14011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.316603][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.328769][ C1] sd 0:0:1:0: [sda] tag#6737 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 138.339164][ C1] sd 0:0:1:0: [sda] tag#6737 CDB: Read(6) 08 00 00 00 00 2c [ 138.363902][T14030] program syz.6.4723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.577557][T14055] 9pnet: Could not find request transport: 0xffffffffffffffff [ 138.637870][T14054] loop3: detected capacity change from 0 to 8192 [ 138.770548][T14080] loop7: detected capacity change from 0 to 1024 [ 138.806453][T14080] EXT4-fs: Ignoring removed bh option [ 138.846373][T14080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.888551][T14096] loop6: detected capacity change from 0 to 1024 [ 138.918886][T14096] EXT4-fs: Ignoring removed bh option [ 138.960473][T14096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 138.985378][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.996950][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 139.291957][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4775'. [ 139.377820][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4779'. [ 139.459832][T14163] loop6: detected capacity change from 0 to 512 [ 139.484278][T14163] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 139.514841][T14163] EXT4-fs (loop6): 1 truncate cleaned up [ 139.526043][T14163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.571121][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4789'. [ 139.675905][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.714502][T14190] loop6: detected capacity change from 0 to 512 [ 139.736327][T14190] EXT4-fs: Ignoring removed nobh option [ 139.768665][T14190] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.4795: corrupted inode contents [ 139.781019][T14190] EXT4-fs (loop6): Remounting filesystem read-only [ 139.789718][T14190] EXT4-fs (loop6): 1 truncate cleaned up [ 139.795762][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.796693][T14190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.816512][ T383] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.827085][ T383] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.838173][ T383] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 139.839071][T14190] ext4 filesystem being mounted at /843/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.884872][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.010398][T14205] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 140.157892][T14212] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.165375][T14212] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 140.333888][T14224] loop6: detected capacity change from 0 to 164 [ 140.361450][T14224] Unable to read rock-ridge attributes [ 140.511981][T14234] loop7: detected capacity change from 0 to 1024 [ 140.520838][T14234] EXT4-fs: Ignoring removed bh option [ 140.520908][T14234] EXT4-fs: inline encryption not supported [ 140.520923][T14234] EXT4-fs: Ignoring removed i_version option [ 140.527929][T14234] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.558393][T14234] EXT4-fs error (device loop7): ext4_map_blocks:709: inode #3: block 1: comm syz.7.4816: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.632534][T14234] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.4816: Failed to acquire dquot type 0 [ 140.697390][T14234] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.4816: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.725307][T14234] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4816: Invalid inode bitmap blk 0 in block_group 0 [ 140.740229][ T51] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.778169][T14234] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 140.791304][ T51] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 140.817918][T14234] EXT4-fs (loop7): 1 orphan inode deleted [ 140.823948][T14234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.889263][T14234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.122363][T14294] loop1: detected capacity change from 0 to 1024 [ 141.150465][T14296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4846'. [ 141.160521][T14294] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.196995][T14294] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4844: Invalid block bitmap block 0 in block_group 0 [ 141.238960][T14294] __quota_error: 50 callbacks suppressed [ 141.238971][T14294] Quota error (device loop1): write_blk: dquota write failed [ 141.252080][T14294] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 141.281602][T14294] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4844: Failed to acquire dquot type 0 [ 141.329474][T14294] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.4844: Freeing blocks not in datazone - block = 0, count = 4096 [ 141.401394][T14320] netlink: 22 bytes leftover after parsing attributes in process `syz.7.4857'. [ 141.411103][ T29] audit: type=1400 audit(2000000060.713:1824): avc: denied { create } for pid=14319 comm="syz.6.4858" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_connector_socket permissive=1 [ 141.437214][T14294] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4844: Invalid inode bitmap blk 0 in block_group 0 [ 141.465697][ T3335] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 141.474692][ T3335] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 141.490639][T14294] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 141.512386][T14330] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 141.521116][T14294] EXT4-fs (loop1): 1 orphan inode deleted [ 141.531385][T14294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.576764][ T29] audit: type=1400 audit(2000000060.883:1825): avc: denied { create } for pid=14292 comm="syz.1.4844" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.608155][ T29] audit: type=1400 audit(2000000060.883:1826): avc: denied { create } for pid=14292 comm="syz.1.4844" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.631296][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.644970][ T3431] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 141.654212][ T3431] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 141.706301][T14343] pim6reg9: entered allmulticast mode [ 141.983637][ T29] audit: type=1400 audit(2000000061.283:1827): avc: denied { write } for pid=14377 comm="syz.6.4885" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 141.997413][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4886'. [ 142.099217][T14386] loop6: detected capacity change from 0 to 512 [ 142.131235][T14386] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 142.147184][T14386] EXT4-fs (loop6): 1 truncate cleaned up [ 142.156258][T14386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.205464][T14395] loop1: detected capacity change from 0 to 512 [ 142.217367][T14397] netlink: 'syz.7.4893': attribute type 2 has an invalid length. [ 142.226764][ T5290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.236177][T14395] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.271795][T14401] tipc: Bearer <udp:s>: already 2 bearers with priority 10 [ 142.277190][T14395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.279702][T14401] tipc: Bearer <udp:s>: trying with adjusted priority [ 142.298353][T14401] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 142.307124][T14395] ext4 filesystem being mounted at /1033/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.364899][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.528112][T14424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4907'. [ 142.666490][ T3681] udevd[3681]: symlink '../../loop3' '/dev/disk/by-diskseq/719.tmp-b7:3' failed: Read-only file system [ 142.683481][ T3306] udevd[3306]: symlink '../../loop6' '/dev/disk/by-diskseq/736.tmp-b7:6' failed: Read-only file system [ 142.700720][T14439] tipc: Started in network mode [ 142.705797][T14439] tipc: Node identity ac1414aa, cluster identity 4711 [ 142.720413][ T3681] udevd[3681]: symlink '../../loop1' '/dev/disk/by-diskseq/737.tmp-b7:1' failed: Read-only file system [ 142.729004][T14447] loop1: detected capacity change from 0 to 512 [ 142.739571][T14439] tipc: Enabled bearer <udp:syz2>, priority 10 [ 142.756378][T14447] EXT4-fs: inline encryption not supported [ 142.775127][ T3306] udevd[3306]: symlink '../../loop7' '/dev/disk/by-diskseq/731.tmp-b7:7' failed: Read-only file system [ 142.787035][T14447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.810070][ T4075] udevd[4075]: symlink '../../loop6' '/dev/disk/by-diskseq/736.tmp-b7:6' failed: Read-only file system [ 142.821318][ T29] audit: type=1326 audit(2000000062.103:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14449 comm="syz.7.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cad9e969 code=0x7ffc0000 [ 142.821351][ T29] audit: type=1326 audit(2000000062.103:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14449 comm="syz.7.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cad9e969 code=0x7ffc0000 [ 142.870846][ T3304] udevd[3304]: symlink '../../loop3' '/dev/disk/by-diskseq/719.tmp-b7:3' failed: Read-only file system [ 142.884923][T14447] EXT4-fs (loop1): 1 truncate cleaned up [ 142.886544][ T3681] udevd[3681]: symlink '../../loop1' '/dev/disk/by-diskseq/738.tmp-b7:1' failed: Read-only file system [ 142.892247][T14447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.936203][ T3681] udevd[3681]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 142.987146][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/731.tmp-b7:7' failed: Read-only file system [ 142.987551][ T3306] udevd[3306]: symlink '../../loop6' '/dev/disk/by-diskseq/736.tmp-b7:6' failed: Read-only file system [ 143.032576][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.087511][T14468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4926'. [ 143.096664][T14468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4926'. [ 143.133779][ T1032] Process accounting resumed [ 143.217470][T14480] loop6: detected capacity change from 0 to 1764 [ 143.293998][T14493] 9pnet_fd: Insufficient options for proto=fd [ 143.416186][T14506] loop6: detected capacity change from 0 to 512 [ 143.431510][T14506] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 143.480217][T14506] EXT4-fs (loop6): failed to open journal device unknown-block(0,3) -6 [ 143.607548][T14524] loop1: detected capacity change from 0 to 1764 [ 143.838886][T14547] loop3: detected capacity change from 0 to 2048 [ 143.855476][ T23] tipc: Node number set to 2886997162 [ 143.863551][T14550] netlink: 'syz.6.4965': attribute type 1 has an invalid length. [ 143.888868][T14547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.941438][T14547] ext4 filesystem being mounted at /1062/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.039773][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.056646][T14563] loop6: detected capacity change from 0 to 512 [ 144.118086][T14563] EXT4-fs (loop6): too many log groups per flexible block group [ 144.125855][T14563] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 144.143862][T14563] EXT4-fs (loop6): mount failed [ 144.346352][T14591] loop1: detected capacity change from 0 to 128 [ 144.374986][T14591] FAT-fs (loop1): bogus logical sector size 0 [ 144.381880][T14591] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 144.391235][T14591] FAT-fs (loop1): Can't find a valid FAT filesystem [ 144.491012][T14602] loop1: detected capacity change from 0 to 1024 [ 144.620444][T14614] loop7: detected capacity change from 0 to 1024 [ 144.664889][T14614] EXT4-fs warning (device loop7): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 144.775274][ T383] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.818239][T14613] chnl_net:caif_netlink_parms(): no params data found [ 144.838945][ T383] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.881391][ T383] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.919933][T14613] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.927073][T14613] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.939743][T14613] bridge_slave_0: entered allmulticast mode [ 144.948633][T14613] bridge_slave_0: entered promiscuous mode [ 144.961479][ T383] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.976679][T14613] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.983832][T14613] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.000426][T14613] bridge_slave_1: entered allmulticast mode [ 145.011735][T14613] bridge_slave_1: entered promiscuous mode [ 145.046484][T14613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.056918][T14613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.115738][ T383] bridge_slave_1: left allmulticast mode [ 145.121463][ T383] bridge_slave_1: left promiscuous mode [ 145.127855][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.142668][ T383] bridge_slave_0: left allmulticast mode [ 145.148374][ T383] bridge_slave_0: left promiscuous mode [ 145.154138][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.387373][ T383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.408457][ T383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.419122][ T383] bond0 (unregistering): Released all slaves [ 145.476650][T14613] team0: Port device team_slave_0 added [ 145.500366][T14613] team0: Port device team_slave_1 added [ 145.561917][T14658] loop6: detected capacity change from 0 to 1024 [ 145.573019][ T383] tipc: Left network mode [ 145.583206][ T383] IPVS: stopping master sync thread 11950 ... [ 145.627380][T14658] EXT4-fs warning (device loop6): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 145.640743][ T383] hsr_slave_0: left promiscuous mode [ 145.649588][ T383] hsr_slave_1: left promiscuous mode [ 145.655184][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.662760][ T383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.672561][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.680099][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.700218][ T383] veth1_macvtap: left promiscuous mode [ 145.705831][ T383] veth0_macvtap: left promiscuous mode [ 145.711351][ T383] veth1_vlan: left allmulticast mode [ 145.716710][ T383] veth1_vlan: left promiscuous mode [ 145.722115][ T383] veth0_vlan: left promiscuous mode [ 145.829127][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5013'. [ 145.838124][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5013'. [ 145.871432][ T383] team0 (unregistering): Port device team_slave_1 removed [ 145.887757][ T383] team0 (unregistering): Port device team_slave_0 removed [ 145.931964][T14613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.938956][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.965541][T14613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.004228][T14613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.011983][T14613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.038483][T14613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.068625][T14683] loop7: detected capacity change from 0 to 512 [ 146.094311][T14613] hsr_slave_0: entered promiscuous mode [ 146.123150][T14613] hsr_slave_1: entered promiscuous mode [ 146.134189][T14683] EXT4-fs: Ignoring removed oldalloc option [ 146.140900][T14613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.151733][T14613] Cannot create hsr debugfs directory [ 146.153526][T14689] loop6: detected capacity change from 0 to 512 [ 146.158838][T14683] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 146.186856][T14683] EXT4-fs (loop7): 1 truncate cleaned up [ 146.232431][T14689] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.5018: iget: bad extended attribute block 1 [ 146.247522][T14689] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5018: couldn't read orphan inode 15 (err -117) [ 146.335111][T14700] pim6reg: entered allmulticast mode [ 146.401648][ T383] IPVS: stop unused estimator thread 0... [ 146.404067][T14613] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 146.439062][T14613] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 146.456744][T14613] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 146.484739][T14613] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 146.588215][T14613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.619957][T14613] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.642632][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.647012][T14736] loop1: detected capacity change from 0 to 256 [ 146.649783][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.657738][T14738] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5041'. [ 146.672296][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5041'. [ 146.678009][T14613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.692330][T14613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.726621][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.733719][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.741681][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 146.741691][ T29] audit: type=1400 audit(2000000066.033:1854): avc: denied { remount } for pid=14735 comm="syz.1.5040" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 146.783482][ T29] audit: type=1400 audit(2000000066.073:1855): avc: denied { wake_alarm } for pid=14742 comm="syz.3.5043" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.867079][T14756] ipvlan2: entered allmulticast mode [ 146.872467][T14756] team0: entered allmulticast mode [ 146.878296][T14756] team_slave_0: entered allmulticast mode [ 146.884060][T14756] team_slave_1: entered allmulticast mode [ 146.892813][T14756] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 146.910446][T14613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.064626][T14613] veth0_vlan: entered promiscuous mode [ 147.073147][T14787] loop7: detected capacity change from 0 to 164 [ 147.073408][T14613] veth1_vlan: entered promiscuous mode [ 147.095894][T14787] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.110119][T14613] veth0_macvtap: entered promiscuous mode [ 147.117317][T14787] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.129785][T14787] Symlink component flag not implemented [ 147.135636][T14787] Symlink component flag not implemented [ 147.135775][T14613] veth1_macvtap: entered promiscuous mode [ 147.147584][T14787] Symlink component flag not implemented (7) [ 147.153784][T14787] Symlink component flag not implemented (116) [ 147.169997][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.180474][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.190922][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.201516][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.211464][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.222657][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.232659][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.243154][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.258558][T14613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.287661][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.298205][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.308110][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.318691][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.324921][T14799] loop7: detected capacity change from 0 to 256 [ 147.329284][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.345260][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.355107][T14613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.366365][T14613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.378757][T14613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.387417][T14613] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.396906][T14613] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.405688][T14613] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.414390][T14613] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.436807][T14799] FAT-fs (loop7): Directory bread(block 64) failed [ 147.443534][T14799] FAT-fs (loop7): Directory bread(block 65) failed [ 147.475155][ T29] audit: type=1400 audit(2000000066.773:1856): avc: denied { mounton } for pid=14613 comm="syz-executor" path="/root/syzkaller.Misbho/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 147.478599][T14799] FAT-fs (loop7): Directory bread(block 66) failed [ 147.500388][ T29] audit: type=1400 audit(2000000066.773:1857): avc: denied { mounton } for pid=14613 comm="syz-executor" path="/root/syzkaller.Misbho/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 147.533434][T14799] FAT-fs (loop7): Directory bread(block 67) failed [ 147.533483][T14799] FAT-fs (loop7): Directory bread(block 68) failed [ 147.533502][T14799] FAT-fs (loop7): Directory bread(block 69) failed [ 147.533530][T14799] FAT-fs (loop7): Directory bread(block 70) failed [ 147.533553][T14799] FAT-fs (loop7): Directory bread(block 71) failed [ 147.533609][T14799] FAT-fs (loop7): Directory bread(block 72) failed [ 147.533628][T14799] FAT-fs (loop7): Directory bread(block 73) failed [ 147.580378][ T29] audit: type=1400 audit(2000000066.773:1858): avc: denied { mounton } for pid=14613 comm="syz-executor" path="/root/syzkaller.Misbho/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 147.608708][ T29] audit: type=1400 audit(2000000066.773:1859): avc: denied { mounton } for pid=14613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 147.631930][ T29] audit: type=1400 audit(2000000066.773:1860): avc: denied { mount } for pid=14613 comm="syz-executor" name="/" dev="gadgetfs" ino=3803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 147.662783][T14810] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.5067'. [ 147.672183][T14810] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.5067'. [ 147.704372][ T3681] udevd[3681]: symlink '../../loop6' '/dev/disk/by-diskseq/762.tmp-b7:6' failed: Read-only file system [ 147.729522][ T3306] udevd[3306]: symlink '../../loop7' '/dev/disk/by-diskseq/767.tmp-b7:7' failed: Read-only file system [ 147.751596][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/767.tmp-b7:7' failed: Read-only file system [ 147.765320][ T29] audit: type=1326 audit(2000000067.053:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14815 comm="syz.7.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cad9e969 code=0x7ffc0000 [ 147.789654][ T29] audit: type=1326 audit(2000000067.053:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14815 comm="syz.7.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cad9e969 code=0x7ffc0000 [ 147.813195][ T29] audit: type=1326 audit(2000000067.053:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14815 comm="syz.7.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22cad9e969 code=0x7ffc0000 [ 147.836842][ T3306] udevd[3306]: symlink '../../loop6' '/dev/disk/by-diskseq/762.tmp-b7:6' failed: Read-only file system [ 147.850881][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/764.tmp-b7:1' failed: Read-only file system [ 147.871687][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/768.tmp-b7:7' failed: Read-only file system [ 147.887881][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/749.tmp-b7:3' failed: Read-only file system [ 147.919990][ T3681] udevd[3681]: symlink '../../loop7' '/dev/disk/by-diskseq/768.tmp-b7:7' failed: Read-only file system [ 147.929418][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5075'. [ 147.939990][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5075'. [ 147.948895][T14829] netlink: 'syz.7.5075': attribute type 30 has an invalid length. [ 147.950062][ T4075] udevd[4075]: symlink '../../loop3' '/dev/disk/by-diskseq/749.tmp-b7:3' failed: Read-only file system [ 147.959155][ T3306] udevd[3306]: symlink '../../loop6' '/dev/disk/by-diskseq/762.tmp-b7:6' failed: Read-only file system [ 147.990974][T14831] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5077'. [ 148.015082][T14837] loop8: detected capacity change from 0 to 764 [ 148.240256][T14867] loop8: detected capacity change from 0 to 1024 [ 148.254368][T14867] journal_path: Non-blockdev passed as './file0' [ 148.255957][T14869] loop6: detected capacity change from 0 to 1024 [ 148.260777][T14867] EXT4-fs: error: could not find journal device path [ 148.349153][T14881] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 148.441573][T14894] loop8: detected capacity change from 0 to 512 [ 148.463592][T14894] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.507892][T14905] sctp: [Deprecated]: syz.6.5111 (pid 14905) Use of int in max_burst socket option. [ 148.507892][T14905] Use struct sctp_assoc_value instead [ 148.571846][T14911] loop3: detected capacity change from 0 to 2048 [ 148.660937][T14917] loop8: detected capacity change from 0 to 2048 [ 148.673797][T14923] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 148.744853][ T3681] Alternate GPT is invalid, using primary GPT. [ 148.751239][ T3681] loop8: p1 p2 p3 [ 148.775999][T14917] Alternate GPT is invalid, using primary GPT. [ 148.776126][T14917] loop8: p1 p2 p3 [ 148.859812][T14950] loop8: detected capacity change from 0 to 128 [ 148.964357][T14958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5134'. [ 149.017555][T14958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5134'. [ 149.030071][T14952] loop7: detected capacity change from 0 to 8192 [ 149.067026][T14952] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 149.075061][T14952] FAT-fs (loop7): Filesystem has been set read-only [ 149.089840][T14958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5134'. [ 149.102557][T14952] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 149.265412][ T3681] printk: udevd: 1440 output lines suppressed due to ratelimiting [ 149.322298][T15005] loop3: detected capacity change from 0 to 512 [ 149.359671][T15005] ext4 filesystem being mounted at /1111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.382641][T15005] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.5157: Failed to acquire dquot type 0 [ 149.685668][T15086] loop3: detected capacity change from 0 to 256 [ 149.709698][T15090] loop1: detected capacity change from 0 to 512 [ 149.752830][T15086] syz.3.5195: attempt to access beyond end of device [ 149.752830][T15086] loop3: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 149.769705][T15086] syz.3.5195: attempt to access beyond end of device [ 149.769705][T15086] loop3: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 149.784041][T15086] syz.3.5195: attempt to access beyond end of device [ 149.784041][T15086] loop3: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 149.801964][T15086] syz.3.5195: attempt to access beyond end of device [ 149.801964][T15086] loop3: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 149.838033][T15105] loop1: detected capacity change from 0 to 512 [ 149.870909][T15105] ext4 filesystem being mounted at /1103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.939587][T15122] loop7: detected capacity change from 0 to 136 [ 149.992968][T15128] loop3: detected capacity change from 0 to 764 [ 150.077962][T15144] netlink: 'syz.7.5223': attribute type 5 has an invalid length. [ 150.145584][T15153] loop7: detected capacity change from 0 to 512 [ 150.153063][T15153] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 150.166387][T15153] EXT4-fs (loop7): 1 truncate cleaned up [ 150.367959][T15184] loop3: detected capacity change from 0 to 512 [ 150.386801][T15184] ext4 filesystem being mounted at /1126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.432756][T15192] loop6: detected capacity change from 0 to 1024 [ 150.557123][ T51] ================================================================== [ 150.565264][ T51] BUG: KCSAN: data-race in process_scheduled_works / process_scheduled_works [ 150.574056][ T51] [ 150.576383][ T51] read-write to 0xffff888100072eb0 of 8 bytes by task 31 on cpu 1: [ 150.584279][ T51] process_scheduled_works+0x4fe/0x9d0 [ 150.589756][ T51] worker_thread+0x582/0x770 [ 150.594364][ T51] kthread+0x486/0x510 [ 150.598440][ T51] ret_from_fork+0x4b/0x60 [ 150.602862][ T51] ret_from_fork_asm+0x1a/0x30 [ 150.607632][ T51] [ 150.609951][ T51] read-write to 0xffff888100072eb0 of 8 bytes by task 51 on cpu 0: [ 150.617838][ T51] process_scheduled_works+0x4fe/0x9d0 [ 150.623307][ T51] worker_thread+0x582/0x770 [ 150.627912][ T51] kthread+0x486/0x510 [ 150.631995][ T51] ret_from_fork+0x4b/0x60 [ 150.636408][ T51] ret_from_fork_asm+0x1a/0x30 [ 150.641180][ T51] [ 150.643499][ T51] value changed: 0x0000000000002d19 -> 0x0000000000002d1b [ 150.650599][ T51] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.652918][ T51] Reported by Kernel Concurrency Sanitizer on: [ 150.659081][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(voluntary) [ 150.671492][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 150.681550][ T51] Workqueue: events_unbound nsim_dev_trap_report_work [ 150.688321][ T51] ================================================================== [ 150.883263][ T3431] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.978214][ T3431] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.068261][ T3431] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.108132][ T3431] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.169156][ T3431] bridge_slave_1: left allmulticast mode [ 151.174813][ T3431] bridge_slave_1: left promiscuous mode [ 151.180522][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.188308][ T3431] bridge_slave_0: left allmulticast mode [ 151.193942][ T3431] bridge_slave_0: left promiscuous mode [ 151.200345][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.208831][ T3431] tipc: Resetting bearer <eth:ip6_vti0> [ 151.247333][ T3431] tipc: Disabling bearer <eth:ip6_vti0> [ 151.297282][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.307532][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.317526][ T3431] bond0 (unregistering): Released all slaves [ 151.346076][ T3431] tipc: Disabling bearer <udp:syz2> [ 151.351388][ T3431] tipc: Left network mode [ 151.359192][ T3431] hsr_slave_0: left promiscuous mode [ 151.364803][ T3431] hsr_slave_1: left promiscuous mode [ 151.371242][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.378703][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.386336][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.393711][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.405097][ T3431] veth0_macvtap: left promiscuous mode [ 151.410589][ T3431] veth1_vlan: left promiscuous mode [ 151.415903][ T3431] veth0_vlan: left promiscuous mode [ 151.471239][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 151.483217][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 151.779025][ T3431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.838020][ T3431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.888164][ T3431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.937514][ T3431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.999783][ T3431] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.057579][ T3431] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.118282][ T3431] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.187424][ T3431] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.252393][ T3431] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.298309][ T3431] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.347643][ T3431] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.407601][ T3431] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.479788][ T3431] bridge_slave_1: left allmulticast mode [ 152.485535][ T3431] bridge_slave_1: left promiscuous mode [ 152.491139][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.498947][ T3431] bridge_slave_0: left allmulticast mode [ 152.504654][ T3431] bridge_slave_0: left promiscuous mode [ 152.510341][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.519178][ T3431] bridge_slave_1: left allmulticast mode [ 152.524855][ T3431] bridge_slave_1: left promiscuous mode [ 152.531268][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.539953][ T3431] bridge_slave_0: left allmulticast mode [ 152.545697][ T3431] bridge_slave_0: left promiscuous mode [ 152.551331][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.560203][ T3431] bridge_slave_1: left allmulticast mode [ 152.565871][ T3431] bridge_slave_1: left promiscuous mode [ 152.571519][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.579361][ T3431] bridge_slave_0: left allmulticast mode [ 152.585069][ T3431] bridge_slave_0: left promiscuous mode [ 152.590741][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.936777][ T3431] $H� (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.945592][ T3431] bond_slave_0: left promiscuous mode [ 152.951930][ T3431] $H� (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.960695][ T3431] bond_slave_1: left promiscuous mode [ 152.966896][ T3431] $H� (unregistering): Released all slaves [ 152.975209][ T3431] bond0 (unregistering): Released all slaves [ 152.984156][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.993903][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.003376][ T3431] bond0 (unregistering): Released all slaves [ 153.012091][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.022140][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.031639][ T3431] bond0 (unregistering): Released all slaves [ 153.086965][ T3431] tipc: Disabling bearer <udp:syz0> [ 153.093262][ T3431] tipc: Left network mode [ 153.097988][ T3431] tipc: Disabling bearer <udp:syz2> [ 153.104155][ T3431] tipc: Left network mode [ 153.111023][ T3431] IPVS: stopping master sync thread 5672 ... [ 153.117167][ T3431] IPVS: stopping master sync thread 12733 ... [ 153.123430][ T3431] IPVS: stopping master sync thread 12940 ... [ 153.131788][ T3431] hsr_slave_0: left promiscuous mode [ 153.137432][ T3431] hsr_slave_1: left promiscuous mode [ 153.142994][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.150482][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.158203][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.165620][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.174192][ T3431] hsr_slave_0: left promiscuous mode [ 153.179935][ T3431] hsr_slave_1: left promiscuous mode [ 153.185487][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.192931][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.200526][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.207996][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.217091][ T3431] hsr_slave_0: left promiscuous mode [ 153.222731][ T3431] hsr_slave_1: left promiscuous mode [ 153.228273][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.235891][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.243374][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.250793][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.266949][ T3431] veth1_macvtap: left promiscuous mode [ 153.272519][ T3431] veth0_macvtap: left promiscuous mode [ 153.278077][ T3431] veth1_vlan: left promiscuous mode [ 153.283426][ T3431] veth0_vlan: left promiscuous mode [ 153.289236][ T3431] veth1_vlan: left promiscuous mode [ 153.294566][ T3431] veth0_vlan: left promiscuous mode [ 153.300342][ T3431] veth1_macvtap: left promiscuous mode [ 153.305867][ T3431] veth0_macvtap: left promiscuous mode [ 153.311427][ T3431] veth1_vlan: left promiscuous mode [ 153.316743][ T3431] veth0_vlan: left promiscuous mode [ 153.444338][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 153.453639][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 153.484105][ T3431] pim6reg (unregistering): left allmulticast mode [ 153.491526][ T3431] pim6reg9 (unregistering): left allmulticast mode [ 153.516417][ T3431] team_slave_1 (unregistering): left allmulticast mode [ 153.523711][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 153.532814][ T3431] team_slave_0 (unregistering): left allmulticast mode [ 153.540086][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 153.591736][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 153.601707][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 154.263061][ T3431] IPVS: stop unused estimator thread 0... [ 154.269249][ T3431] IPVS: stop unused estimator thread 0... [ 154.275685][ T3431] IPVS: stop unused estimator thread 0...