last executing test programs: 2m25.019974256s ago: executing program 3 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2m25.012306106s ago: executing program 3 (id=830): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$eJzs3MtvVFUYAPDv3j5406r4AEGrmEh8tLQ8F24wmrjQxEQXGFe1LQQZqNKaCCGCLnBpSNwblyb+Ba50Y9SViYkr3RsSYtiAJiZj7p1723E6UzvtwFDm90sunDP3DOd8c86Z+zhzCaBnjWR/JBFbI+K3iBiqZf9bYKT2160bF6f+unFxKolq9Y0/k7zczRsXp8qi5fu21DLVapHf0KTeK29HTFYqM+eK/Nj8mffG5s5feP7UmcmTMydnzk4cPXrwwJ7BwxOHOhJnFtfNXR/N7t75yltXX5s6fvWdH7/O2ru12F8fR6eM1D7dpfo6XVP3batLJ/1dbAhtyYZi1l0D+fwfir7YtLBvKF7+pKuNA26rarVabXZ8LlyuAvewJLrdAqA7ygN9dv1bbnfo1OOucP1YxPtHavHfKrbanv5IizIDDde3nTQSEccv//1FtsVtug8BAFDv22MR8Vyz8780Hqort71YQxmOiPsi4v6IeCAidkTEgxF52Ycj4pE2629cIVl6/pNeW1VgK5Sd/71QrG0tnP/9U83jLwz3FbltefwDyYlTlZn9xWeyLwY2ZPnxZer47qVfPmu1r/78L9uy+stzwZr0Wn/DDbrpyfnJNYa94PrHEbv6G+LPJVEu4yQRsTMidrX1Ly9eYZx65qvdrUr9f/zL6MA6U/XLiKdr/X85GuIvJS3XJ8ePHJ44NLYxKjP7x8pRsdRPP195vVX9a4q/A7L+39w4/hd771I25JONEXPnL5zO12vn2q/jyu+ftrymWe34H0zezNODxWsfTs7PnxuPGExeXfr6xOJ7y3xZPot/395m4z/Nv+Oi6P9HIyIbxHsi4rGIeLxo+xMR8WRE7F0m/h9efOrd9uNf5q58B2XxTzfp/7rxP5ylFvu//UTf6e+/aT/+Utb/B/PUvuKVlXz/rbSBa/nsAAAAYL1I89/AJ+noQjpNR0drv+HfEZvTyuzc/LMnZj84O137rfxwDKTlna6huvuh48W94TI/0ZA/UNw3/rxvU54fnZqtTHc7eOhxW1rM/8wf9+BzKkADz2tB7zL/oXeZ/9C7Fuf/4a62A7jzHP+hdzWb/5e60A7gznP8h95l/kPvMv+hd5n/0JNaPhufrumR/3Wb+HX7XdGMdZCItP139Uc32zzY1dpXnehf8X9mscrEhqa7uv3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BgAA//92QvTM") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe) 2m24.939266059s ago: executing program 3 (id=833): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40200, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffe, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x8000a]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 2m24.776979814s ago: executing program 3 (id=835): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000020010000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff) 2m24.600047401s ago: executing program 3 (id=838): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfe, 0x3}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20003, 0xc, 0x0, 0x0, 0x0, 0xca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m24.576252581s ago: executing program 3 (id=840): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x4) socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x5}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m9.40306614s ago: executing program 32 (id=840): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x4) socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x5}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m3.37668414s ago: executing program 4 (id=1006): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@bridge_dellink={0x2c, 0x13, 0x5, 0x3, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x202, 0x12002}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x880) 2m3.310909482s ago: executing program 4 (id=1008): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48844}, 0x40) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 2m3.254795054s ago: executing program 4 (id=1009): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000001dc0)={0xb, 0x0, 0x20000, {r0}}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2m3.171536597s ago: executing program 4 (id=1012): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2m2.890360776s ago: executing program 4 (id=1018): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) unlink(&(0x7f0000000280)='./file1\x00') 2m2.836799688s ago: executing program 4 (id=1022): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x1800412, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m47.783409622s ago: executing program 33 (id=1022): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x1800412, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m6.639451563s ago: executing program 2 (id=2395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 1m6.43393449s ago: executing program 2 (id=2398): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001000)={r1, 0x6, 0x20}, 0xc) 1m6.356269193s ago: executing program 2 (id=2400): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x7fffffff}, {0x6, 0x10, 0x8, 0x40}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000d40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@val={0x88a8, 0x6, 0x1, 0x1}, {0x8100, 0x4, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x9, 0x58, 0x67, 0x0, 0xf8, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0x9, 0x3, 0x1, 0x2, 0x3, 0x6}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x8, 0x1, 0x1, 0x2, 0x1, 0x2}, 0x2, {0xf, 0xcf, 0x1, 0x4, 0x1, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) 1m6.270986936s ago: executing program 2 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r0, 0x0, &(0x7f00000015c0)=""/133}, 0x20) 1m6.230392187s ago: executing program 2 (id=2402): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m6.15677069s ago: executing program 2 (id=2404): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590f", 0x28}) 51.136075012s ago: executing program 34 (id=2404): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590f", 0x28}) 6.839946173s ago: executing program 7 (id=3934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0xfc, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x1, 0x9, 0x7, 0xd2a, 0x4, "a3a4db508166a462f7f9b4dfe64b5779387c16"}) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 6.024981461s ago: executing program 7 (id=3962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5.967415443s ago: executing program 7 (id=3963): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 5.786350889s ago: executing program 7 (id=3966): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x0) 5.418942752s ago: executing program 7 (id=3975): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5.368821404s ago: executing program 7 (id=3977): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.411813187s ago: executing program 5 (id=4044): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x800, 0xce, 0xe34b64bf4be35a10, 0x7, 0x55a9, 0x5aa8, 0x0, 0x8, r1}, &(0x7f0000000240)=0x20) 2.374583408s ago: executing program 5 (id=4045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x213}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.261654752s ago: executing program 5 (id=4048): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.839875527s ago: executing program 5 (id=4053): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x10000, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfa}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1.74307128s ago: executing program 5 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0x8, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) 1.663874182s ago: executing program 5 (id=4057): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 734.007785ms ago: executing program 0 (id=4079): syz_emit_ethernet(0x15d, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6701474201272101fe8000000000000000000000000000bbfc"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 599.07561ms ago: executing program 0 (id=4081): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_open_procfs(0x0, &(0x7f00000025c0)='fd/3\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000180)) 515.177073ms ago: executing program 0 (id=4084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x2000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) 451.942835ms ago: executing program 1 (id=4085): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 427.822446ms ago: executing program 1 (id=4087): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0xdd}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) sendmsg$unix(r0, 0x0, 0x4000851) 392.907347ms ago: executing program 0 (id=4089): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) listen(r1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x8c, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 323.435189ms ago: executing program 6 (id=4090): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000fd03"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x18, 0x0, 0x0) 305.70218ms ago: executing program 0 (id=4091): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x5, 0x7}, &(0x7f0000000240)=0xc) 305.19774ms ago: executing program 1 (id=4092): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x16}], 0x1) 289.70657ms ago: executing program 0 (id=4093): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) 243.128262ms ago: executing program 6 (id=4094): r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa16b558f", 0x5, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000580)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 195.329744ms ago: executing program 1 (id=4095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f000001b580)=[{&(0x7f00000001c0)=""/86, 0x56}], 0x1, 0x0, 0xb) 195.151194ms ago: executing program 6 (id=4096): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 143.475345ms ago: executing program 6 (id=4097): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xebc, 0x8) 142.976946ms ago: executing program 1 (id=4098): r0 = getpgrp(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') unshare(0x2c020400) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) 61.555218ms ago: executing program 6 (id=4099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 61.156858ms ago: executing program 1 (id=4100): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 0s ago: executing program 6 (id=4101): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): . [ 144.209286][ T9847] loop0: detected capacity change from 0 to 4096 [ 144.279677][ T9847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.443260][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.664098][ T9874] loop1: detected capacity change from 0 to 512 [ 144.716914][ T9874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.793823][ T9874] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.880302][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.068969][ T9902] ipvlan2: entered promiscuous mode [ 145.107865][ T9902] ipvlan2: entered allmulticast mode [ 145.128617][ T9902] team0: entered allmulticast mode [ 145.133886][ T9902] team_slave_0: entered allmulticast mode [ 145.180082][ T9902] team_slave_1: entered allmulticast mode [ 145.188920][ T9902] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 145.218295][ T9912] random: crng reseeded on system resumption [ 145.220167][ T9902] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.247419][ T9912] Restarting kernel threads ... [ 145.258785][ T9912] Done restarting kernel threads. [ 145.260235][ T9902] team0: Device ipvlan2 is already an upper device of the team interface [ 145.527572][ T9920] loop0: detected capacity change from 0 to 8192 [ 145.596712][ T28] kauditd_printk_skb: 1871 callbacks suppressed [ 145.596733][ T28] audit: type=1326 audit(1775082818.440:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 145.629667][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 145.658018][ T28] audit: type=1326 audit(1775082818.530:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 145.667884][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 145.707751][ T28] audit: type=1326 audit(1775082818.530:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 145.787266][ T28] audit: type=1326 audit(1775082818.530:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 145.847349][ T28] audit: type=1326 audit(1775082818.530:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 145.969260][ T28] audit: type=1326 audit(1775082818.530:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 146.037427][ T28] audit: type=1326 audit(1775082818.530:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 146.093521][ T28] audit: type=1326 audit(1775082818.530:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 146.151345][ T28] audit: type=1326 audit(1775082818.530:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 146.247676][ T28] audit: type=1326 audit(1775082818.530:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.6.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5723b1c819 code=0x50000 [ 146.340667][ T9959] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.358301][ T9959] vhci_hcd vhci_hcd.1: invalid port number 96 [ 146.364576][ T9959] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 146.486211][ T9966] loop5: detected capacity change from 0 to 1024 [ 146.547482][ T9966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.666021][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.955962][ T9995] program syz.5.2613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.278704][T10019] syzkaller0: tun_chr_ioctl cmd 1074025694 [ 147.653930][ T9] IPVS: starting estimator thread 0... [ 147.757856][T10043] IPVS: using max 2544 ests per chain, 127200 per kthread [ 148.073595][T10059] loop5: detected capacity change from 0 to 1024 [ 148.098330][T10059] EXT4-fs: Ignoring removed bh option [ 148.139425][T10059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.329459][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.395984][T10085] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2650'. [ 148.446337][T10088] loop0: detected capacity change from 0 to 256 [ 148.899837][T10116] loop1: detected capacity change from 0 to 512 [ 148.906470][T10116] EXT4-fs: Ignoring removed bh option [ 148.957862][T10116] EXT4-fs: inline encryption not supported [ 149.024363][T10116] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.106347][T10116] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 149.148730][T10116] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2666: bg 0: block 248: padding at end of block bitmap is not set [ 149.217687][T10116] loop1: lost filesystem error report for type 5 error -117 [ 149.227673][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 149.241641][ C1] EXT4-fs (loop1): last error at time 1775082822: ext4_validate_block_bitmap:441 [ 149.258462][T10116] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.2666: Failed to acquire dquot type 1 [ 149.278606][T10116] loop1: lost filesystem error report for type 5 error -28 [ 149.283528][T10116] EXT4-fs (loop1): 1 truncate cleaned up [ 149.318377][T10116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 149.519270][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 149.625062][T10144] loop0: detected capacity change from 0 to 512 [ 150.081367][T10169] loop1: detected capacity change from 0 to 512 [ 150.101499][T10171] loop0: detected capacity change from 0 to 512 [ 150.129836][T10171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.143266][T10169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.165422][T10171] ext4 filesystem being mounted at /653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.253437][T10169] EXT4-fs (loop1): 1 truncate cleaned up [ 150.268254][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.309656][T10169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.335640][T10179] loop6: detected capacity change from 0 to 512 [ 150.358480][T10179] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 150.392221][T10179] EXT4-fs (loop6): 1 truncate cleaned up [ 150.432752][T10179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.490963][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.546208][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.598379][ T28] kauditd_printk_skb: 15210 callbacks suppressed [ 150.598398][ T28] audit: type=1326 audit(1775082823.530:17835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 150.688532][ T28] audit: type=1326 audit(1775082823.530:17836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 150.767081][ T28] audit: type=1326 audit(1775082823.530:17837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 150.897717][ T28] audit: type=1326 audit(1775082823.530:17838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 150.955259][ T28] audit: type=1326 audit(1775082823.530:17839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 150.990982][T10208] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 151.017708][ T28] audit: type=1326 audit(1775082823.530:17840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 151.090631][ T28] audit: type=1326 audit(1775082823.530:17841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 151.180930][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 151.190705][ T28] audit: type=1326 audit(1775082823.530:17842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 151.258022][ T28] audit: type=1326 audit(1775082823.530:17843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 151.344660][ T28] audit: type=1326 audit(1775082823.530:17844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10091 comm="syz.5.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x50000 [ 151.489814][T10243] loop0: detected capacity change from 0 to 1024 [ 151.500006][T10238] loop1: detected capacity change from 0 to 512 [ 151.526308][T10243] EXT4-fs: Ignoring removed bh option [ 151.605102][T10243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 151.730941][T10252] loop1: detected capacity change from 0 to 256 [ 151.750100][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 151.815680][T10252] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.834473][T10256] bond1: ARP target 9.0.0.0 is already present [ 151.841298][T10256] bond1: option arp_ip_target: invalid value (9) [ 151.876396][T10256] bond1 (unregistering): Released all slaves [ 152.017864][T10271] syz.0.2733 uses obsolete (PF_INET,SOCK_PACKET) [ 152.156214][T10283] loop0: detected capacity change from 0 to 128 [ 152.307989][T10295] random: crng reseeded on system resumption [ 152.400504][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2750'. [ 152.469108][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2752'. [ 152.606815][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2758'. [ 152.733236][ T6803] bridge0: port 3(syz_tun) entered disabled state [ 152.752850][ T6803] syz_tun (unregistering): left allmulticast mode [ 152.759719][ T6803] syz_tun (unregistering): left promiscuous mode [ 152.782521][ T6803] bridge0: port 3(syz_tun) entered disabled state [ 152.887948][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.968021][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.022410][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.064204][T10325] chnl_net:caif_netlink_parms(): no params data found [ 153.083589][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.184397][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.198831][T10325] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.207875][T10325] bridge_slave_0: entered allmulticast mode [ 153.214643][T10325] bridge_slave_0: entered promiscuous mode [ 153.235405][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.264906][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.286626][T10325] bridge_slave_1: entered allmulticast mode [ 153.306190][T10325] bridge_slave_1: entered promiscuous mode [ 153.379469][ T36] bridge_slave_1: left allmulticast mode [ 153.391776][ T36] bridge_slave_1: left promiscuous mode [ 153.405463][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.423692][ T36] bridge_slave_0: left allmulticast mode [ 153.437085][ T36] bridge_slave_0: left promiscuous mode [ 153.461027][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.624276][T10385] program syz.6.2780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.730753][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.740769][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.751898][ T36] bond0 (unregistering): Released all slaves [ 153.789931][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.806005][T10395] loop0: detected capacity change from 0 to 1024 [ 153.818223][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.854583][T10395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.887578][T10405] delete_channel: no stack [ 153.907759][ T36] hsr_slave_0: left promiscuous mode [ 153.974621][T10395] EXT4-fs error (device loop0): __ext4_new_inode:1079: comm syz.0.2785: reserved inode found cleared - inode=2 [ 153.974939][ T36] hsr_slave_1: left promiscuous mode [ 153.999219][T10395] EXT4-fs (loop0): Remounting filesystem read-only [ 154.017921][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.025592][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.041558][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.051062][T10406] Symlink component flag not implemented [ 154.058163][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.065790][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.093497][ T36] veth1_macvtap: left promiscuous mode [ 154.109992][ T36] veth0_macvtap: left promiscuous mode [ 154.116671][T10406] Symlink component flag not implemented (7) [ 154.126405][ T36] veth1_vlan: left promiscuous mode [ 154.132752][ T36] veth0_vlan: left promiscuous mode [ 154.484308][ T36] team0 (unregistering): Port device team_slave_1 removed [ 154.497232][ T36] team0 (unregistering): Port device team_slave_0 removed [ 154.555873][T10431] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2799'. [ 154.589993][T10325] team0: Port device team_slave_0 added [ 154.603321][T10325] team0: Port device team_slave_1 added [ 154.627348][T10435] netlink: 'syz.1.2802': attribute type 3 has an invalid length. [ 154.636589][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 154.647037][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.664178][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.706334][T10446] set_capacity_and_notify: 1 callbacks suppressed [ 154.706356][T10446] loop0: detected capacity change from 0 to 256 [ 154.718450][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.732539][T10437] tipc: Started in network mode [ 154.741163][T10437] tipc: Node identity ac14140f, cluster identity 4711 [ 154.751096][T10446] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 154.761578][T10437] tipc: New replicast peer: 172.20.20.187 [ 154.770212][T10437] tipc: Enabled bearer , priority 10 [ 154.777465][T10449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2807'. [ 154.801193][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.815423][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.845546][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.948712][T10325] hsr_slave_0: entered promiscuous mode [ 154.966614][T10325] hsr_slave_1: entered promiscuous mode [ 154.980188][T10325] debugfs: 'hsr0' already exists in 'hsr' [ 154.992093][T10325] Cannot create hsr debugfs directory [ 155.208859][T10500] loop5: detected capacity change from 0 to 512 [ 155.239572][T10325] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 155.246862][T10500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.289332][T10325] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 155.296463][T10500] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.331605][T10325] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 155.342836][T10325] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 155.359668][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.432554][T10520] loop5: detected capacity change from 0 to 512 [ 155.482169][T10520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.553604][T10325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.561957][T10520] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.579961][T10520] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 155.592918][T10325] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.603686][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.610837][ T7001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.630418][T10520] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 155.649597][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.656686][ T7001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.666246][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.765390][T10555] loop0: detected capacity change from 0 to 2048 [ 155.822698][T10325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.830527][T10555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.865369][ T28] kauditd_printk_skb: 431 callbacks suppressed [ 155.865387][ T28] audit: type=1400 audit(1775082828.800:18275): avc: denied { create } for pid=10567 comm="syz.5.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 155.897768][ T10] tipc: Node number set to 2886997007 [ 155.909105][ T28] audit: type=1400 audit(1775082828.840:18276): avc: denied { append } for pid=10567 comm="syz.5.2838" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.939200][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.941925][ T28] audit: type=1400 audit(1775082828.840:18277): avc: denied { write } for pid=10567 comm="syz.5.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.010202][ T28] audit: type=1400 audit(1775082828.950:18278): avc: denied { name_bind } for pid=10580 comm="syz.0.2839" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 156.037431][ T28] audit: type=1400 audit(1775082828.950:18279): avc: denied { node_bind } for pid=10580 comm="syz.0.2839" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 156.115495][T10325] veth0_vlan: entered promiscuous mode [ 156.125503][T10325] veth1_vlan: entered promiscuous mode [ 156.145340][T10325] veth0_macvtap: entered promiscuous mode [ 156.153813][T10325] veth1_macvtap: entered promiscuous mode [ 156.165369][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.178806][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.191033][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.203839][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.219381][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.242745][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.282914][ T28] audit: type=1400 audit(1775082829.220:18280): avc: denied { create } for pid=10606 comm="syz.5.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 156.327690][ T28] audit: type=1400 audit(1775082829.260:18281): avc: denied { mounton } for pid=10325 comm="syz-executor" path="/root/syzkaller.xDyaJ6/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 156.358283][ T28] audit: type=1400 audit(1775082829.260:18282): avc: denied { mount } for pid=10325 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 156.442555][ T28] audit: type=1400 audit(1775082829.260:18283): avc: denied { mounton } for pid=10325 comm="syz-executor" path="/root/syzkaller.xDyaJ6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 156.470764][ T28] audit: type=1400 audit(1775082829.260:18284): avc: denied { mounton } for pid=10325 comm="syz-executor" path="/root/syzkaller.xDyaJ6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 156.539750][T10622] loop5: detected capacity change from 0 to 2048 [ 156.549772][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2851'. [ 156.597979][T10622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.630433][T10637] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 156.657078][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.662398][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2858'. [ 156.745803][T10649] sctp: [Deprecated]: syz.6.2861 (pid 10649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.745803][T10649] Use struct sctp_sack_info instead [ 156.809988][T10656] loop1: detected capacity change from 0 to 1024 [ 156.839718][T10656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.858601][T10656] ext4 filesystem being mounted at /610/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.872391][T10664] netlink: 'syz.6.2867': attribute type 4 has an invalid length. [ 156.925943][T10669] loop6: detected capacity change from 0 to 512 [ 156.941176][T10656] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: block 3: comm syz.1.2864: lblock 3 mapped to illegal pblock 3 (length 3) [ 156.963500][T10669] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.972932][T10669] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 156.990270][T10669] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 156.999802][T10669] System zones: 0-2, 18-18, 34-35 [ 157.011396][T10669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 157.036486][T10669] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 157.055881][T10656] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 157.057836][T10669] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 157.068570][T10656] EXT4-fs (loop1): This should not happen!! Data will be lost [ 157.068570][T10656] [ 157.086967][T10673] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: comm syz.1.2864: lblock 0 mapped to illegal pblock 0 (length 1) [ 157.097733][T10669] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 157.122816][T10673] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 157.135482][T10673] EXT4-fs (loop1): This should not happen!! Data will be lost [ 157.135482][T10673] [ 157.187836][ T313] EXT4-fs error (device loop1): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 157.231786][ T313] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 157.264863][T10669] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2869: bg 0: block 353: padding at end of block bitmap is not set [ 157.269924][ T313] EXT4-fs (loop1): This should not happen!! Data will be lost [ 157.269924][ T313] [ 157.298369][ T3311] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 157.317088][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.333352][T10689] netlink: 'syz.0.2887': attribute type 2 has an invalid length. [ 157.341626][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.375343][T10689] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2887'. [ 157.413003][T10696] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2878'. [ 157.578855][T10706] loop5: detected capacity change from 0 to 1024 [ 157.595471][T10706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 157.608713][T10706] System zones: 0-1, 3-36 [ 157.663658][T10706] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2883: bad orphan inode 134217728 [ 157.702724][T10706] loop5: lost filesystem error report for type 5 error -117 [ 157.703523][T10706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.716860][T10714] loop6: detected capacity change from 0 to 8192 [ 157.774898][T10706] EXT4-fs (loop5): shut down requested (2) [ 157.783778][T10717] loop7: detected capacity change from 0 to 512 [ 157.793299][T10714] loop6: p1 p2 p4[EZD] [ 157.816065][T10714] loop6: p4 start 201326592 is beyond EOD, truncated [ 157.862412][T10717] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.894486][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.924713][T10717] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 157.995202][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 158.006428][ T6657] udevd[6657]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 158.046068][T10717] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 158.077765][T10717] System zones: 0-2, 18-18, 34-35 [ 158.082954][T10738] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2897'. [ 158.119922][T10717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.271251][T10742] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 158.286426][T10717] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 158.327369][T10742] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 2: comm syz.0.2899: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.378873][T10742] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.379118][T10742] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 48: comm syz.0.2899: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.388246][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 158.388272][ C0] EXT4-fs (loop0): initial error at time 1775082831: ext4_map_blocks:786: inode 3: block 2 [ 158.388338][ C0] EXT4-fs (loop0): last error at time 1775082831: ext4_map_blocks:786: inode 3: block 2 [ 158.457743][T10742] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.458339][T10742] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.2899: Failed to acquire dquot type 0 [ 158.479023][T10742] loop0: lost filesystem error report for type 5 error -117 [ 158.479169][T10717] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 158.495251][T10742] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 158.514901][T10742] loop0: lost filesystem error report for type 5 error -117 [ 158.517694][T10742] EXT4-fs error (device loop0): ext4_evict_inode:265: inode #11: comm syz.0.2899: mark_inode_dirty error [ 158.557722][T10742] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.567705][T10742] EXT4-fs warning (device loop0): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 158.587519][T10742] EXT4-fs (loop0): 1 orphan inode deleted [ 158.593982][T10742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.600374][T10717] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 158.615588][ T7001] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.650969][ T7001] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 0 [ 158.676642][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.703834][T10717] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2888: bg 0: block 353: padding at end of block bitmap is not set [ 158.733732][ T3307] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.775867][ T3307] loop0: lost filesystem error report for type 5 error -117 [ 158.776047][ T3307] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 158.817778][ T3307] loop0: lost filesystem error report for type 5 error -117 [ 158.817970][ T3307] EXT4-fs error (device loop0): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 158.867744][ T3307] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.949621][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.197376][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 159.294503][T10782] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2912'. [ 159.409104][T10786] ------------[ cut here ]------------ [ 159.415042][T10786] EA inode 11 i_nlink=0 [ 159.415060][T10786] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.2914/10786 [ 159.430882][T10786] Modules linked in: [ 159.434802][T10786] CPU: 0 UID: 0 PID: 10786 Comm: syz.1.2914 Not tainted syzkaller #0 PREEMPT(full) [ 159.444947][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.455132][T10786] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 159.462447][T10786] Code: d4 35 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf c4 dd 03 66 66 66 66 66 66 2e [ 159.482847][T10786] RSP: 0018:ffffc90001553778 EFLAGS: 00010246 [ 159.489151][T10786] RAX: ffff8881023ebd08 RBX: ffff88811b5e4a68 RCX: ffffffff81c02ad8 [ 159.497243][T10786] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 159.505863][T10786] RBP: 000000000000000b R08: 000188811b5e4a1b R09: 0000000000000000 [ 159.507510][T10772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.514447][T10786] R10: 0001c900017e3768 R11: 0001c900015536a8 R12: ffff88811b5e4a18 [ 159.535728][T10786] R13: ffffffff871dcd00 R14: ffff88811b5e49d0 R15: 0000000000000001 [ 159.544632][T10786] FS: 00007fd8457276c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 159.553954][T10786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.561158][T10786] CR2: 00007facd8085024 CR3: 000000011df0c000 CR4: 00000000003506f0 [ 159.569585][T10786] DR0: 0000000000000000 DR1: 0000000000000003 DR2: 0000000000000000 [ 159.578640][T10786] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 159.586664][T10786] Call Trace: [ 159.590006][T10786] [ 159.593014][T10786] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 159.599589][T10786] ? errseq_check+0x2c/0x50 [ 159.604228][T10786] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 159.609841][T10786] ext4_evict_inode+0xac1/0xe40 [ 159.614864][T10786] ? __pfx_ext4_evict_inode+0x10/0x10 [ 159.621036][T10786] evict+0x2af/0x510 [ 159.624996][T10786] ? __dquot_initialize+0x146/0x7c0 [ 159.630261][T10786] iput+0x41a/0x580 [ 159.634192][T10786] ext4_process_orphan+0x1a9/0x1c0 [ 159.639905][T10786] ext4_orphan_cleanup+0x6a8/0xa00 [ 159.645132][T10786] ext4_fill_super+0x3414/0x37c0 [ 159.650136][T10786] ? set_blocksize+0x14c/0x270 [ 159.654965][T10786] ? setup_bdev_super+0x30e/0x370 [ 159.660730][T10786] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.666058][T10786] get_tree_bdev_flags+0x291/0x300 [ 159.671315][T10786] ? __pfx_ext4_fill_super+0x10/0x10 [ 159.676631][T10786] get_tree_bdev+0x1f/0x30 [ 159.681778][T10786] ext4_get_tree+0x1c/0x30 [ 159.686227][T10786] vfs_get_tree+0x57/0x1d0 [ 159.690781][T10786] do_new_mount+0x288/0x8d0 [ 159.695314][T10786] path_mount+0x4d0/0xbc0 [ 159.700276][T10786] __se_sys_mount+0x28c/0x2e0 [ 159.704986][T10786] __x64_sys_mount+0x67/0x80 [ 159.709627][T10786] x64_sys_call+0x2d61/0x3020 [ 159.714359][T10786] do_syscall_64+0x12c/0x370 [ 159.719897][T10786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.726053][T10786] RIP: 0033:0x7fd846ccda8a [ 159.730772][T10786] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.751474][T10786] RSP: 002b:00007fd845726e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.760153][T10786] RAX: ffffffffffffffda RBX: 00007fd845726ee0 RCX: 00007fd846ccda8a [ 159.768999][T10786] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fd845726ea0 [ 159.777711][T10786] RBP: 0000200000000180 R08: 00007fd845726ee0 R09: 0000000000800700 [ 159.784713][T10772] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.785713][T10786] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000000 [ 159.805067][T10786] R13: 00007fd845726ea0 R14: 000000000000047d R15: 00002000000007c0 [ 159.814196][T10786] [ 159.817251][T10786] ---[ end trace 0000000000000000 ]--- [ 159.828834][T10786] EXT4-fs (loop1): 1 orphan inode deleted [ 159.835091][T10786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.929491][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.074770][T10772] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 160.189047][T10803] tap0: tun_chr_ioctl cmd 1074025676 [ 160.235126][T10803] tap0: owner set to 0 [ 160.250146][T10801] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7. [ 160.451413][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.774805][T10825] set_capacity_and_notify: 3 callbacks suppressed [ 160.774827][T10825] loop7: detected capacity change from 0 to 2048 [ 160.926498][T10825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.077190][T10825] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.164123][T10842] program syz.6.2934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.235215][T10843] loop1: detected capacity change from 0 to 512 [ 161.312074][T10843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.374679][T10843] EXT4-fs (loop1): 1 orphan inode deleted [ 161.397706][T10843] EXT4-fs (loop1): 1 truncate cleaned up [ 161.415057][T10843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.430587][T10854] loop0: detected capacity change from 0 to 256 [ 161.465713][T10854] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.671153][T10860] loop6: detected capacity change from 0 to 512 [ 161.753008][T10860] EXT4-fs: inline encryption not supported [ 161.798424][T10864] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2944'. [ 161.828170][T10864] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2944'. [ 161.864395][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 161.864412][ T28] audit: type=1400 audit(1775082834.800:18304): avc: denied { ioctl } for pid=10865 comm="syz.5.2945" path="socket:[29085]" dev="sockfs" ino=29085 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.898048][T10860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.943731][T10860] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.955027][ T69] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 162.005977][T10874] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2950'. [ 162.034979][ T69] EXT4-fs (loop7): Remounting filesystem read-only [ 162.077697][ T313] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 162.109013][T10879] loop5: detected capacity change from 0 to 256 [ 162.115845][T10881] loop0: detected capacity change from 0 to 512 [ 162.123260][T10860] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 1 [ 162.137047][T10879] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.160509][T10881] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #12: comm syz.0.2962: corrupted in-inode xattr: bad e_name length [ 162.186040][T10881] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 162.187021][T10860] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 162.196211][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 162.196259][ C1] EXT4-fs (loop0): initial error at time 1775082835: ext4_iget_extra_inode:5040: inode 12 [ 162.196292][ C1] EXT4-fs (loop0): last error at time 1775082835: ext4_iget_extra_inode:5040: inode 12 [ 162.234556][T10881] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2962: couldn't read orphan inode 12 (err -117) [ 162.291189][T10881] loop0: lost filesystem error report for type 5 error -117 [ 162.330456][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 162.507724][T10860] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.2942: Failed to acquire dquot type 1 [ 162.610957][T10860] loop6: lost filesystem error report for type 5 error -5 [ 162.617700][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 162.631531][ C1] EXT4-fs (loop6): initial error at time 1775082835: ext4_acquire_dquot:7026 [ 162.640490][ C1] EXT4-fs (loop6): last error at time 1775082835: ext4_acquire_dquot:7026 [ 162.665977][T10904] loop0: detected capacity change from 0 to 256 [ 162.680542][T10860] EXT4-fs (loop6): Remounting filesystem read-only [ 162.722242][T10860] EXT4-fs (loop6): 1 truncate cleaned up [ 162.746854][T10904] FAT-fs (loop0): Directory bread(block 64) failed [ 162.758343][T10904] FAT-fs (loop0): Directory bread(block 65) failed [ 162.766943][T10904] FAT-fs (loop0): Directory bread(block 66) failed [ 162.783107][T10904] FAT-fs (loop0): Directory bread(block 67) failed [ 162.793192][T10904] FAT-fs (loop0): Directory bread(block 68) failed [ 162.819551][T10904] FAT-fs (loop0): Directory bread(block 69) failed [ 162.827152][T10904] FAT-fs (loop0): Directory bread(block 70) failed [ 162.836179][T10904] FAT-fs (loop0): Directory bread(block 71) failed [ 162.843467][T10904] FAT-fs (loop0): Directory bread(block 72) failed [ 162.860593][T10904] FAT-fs (loop0): Directory bread(block 73) failed [ 162.885942][T10913] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2966'. [ 162.925115][T10904] bio_check_eod: 7822 callbacks suppressed [ 162.925135][T10904] syz.0.2960: attempt to access beyond end of device [ 162.925135][T10904] loop0: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 163.088114][T10927] loop1: detected capacity change from 0 to 512 [ 163.109844][T10929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2970'. [ 163.138155][T10927] EXT4-fs: inline encryption not supported [ 163.203301][ T28] audit: type=1400 audit(1775082836.140:18305): avc: denied { read write } for pid=10934 comm="syz.0.2973" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.305968][ T28] audit: type=1400 audit(1775082836.170:18306): avc: denied { open } for pid=10934 comm="syz.0.2973" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 163.379830][T10927] EXT4-fs (loop1): 1 orphan inode deleted [ 163.428548][ T69] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.430648][T10927] ext4 filesystem being mounted at /639/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.467883][ T69] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 1 [ 163.571906][T10927] EXT4-fs error (device loop1): __ext4_remount:6829: comm syz.1.2971: Abort forced by user [ 163.623224][T10946] loop7: detected capacity change from 0 to 512 [ 163.640356][T10927] EXT4-fs (loop1): Remounting filesystem read-only [ 163.640446][T10946] EXT4-fs: inline encryption not supported [ 163.654140][T10927] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 163.704737][T10946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.731980][T10946] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.782501][T10946] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 1 [ 163.824779][T10946] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 163.858008][T10946] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.2978: Failed to acquire dquot type 1 [ 163.904190][T10946] loop7: lost filesystem error report for type 5 error -5 [ 163.904425][T10946] EXT4-fs (loop7): Remounting filesystem read-only [ 163.911601][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 163.911640][ C1] EXT4-fs (loop7): initial error at time 1775082836: ext4_acquire_dquot:7026 [ 163.911683][ C1] EXT4-fs (loop7): last error at time 1775082836: ext4_acquire_dquot:7026 [ 163.974683][T10946] EXT4-fs (loop7): 1 truncate cleaned up [ 164.135140][ T28] audit: type=1400 audit(1775082837.070:18307): avc: denied { create } for pid=10959 comm="syz.0.2984" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.187912][ T28] audit: type=1400 audit(1775082837.070:18308): avc: denied { read } for pid=10959 comm="syz.0.2984" name="file0" dev="tmpfs" ino=3849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 164.243462][T10966] loop0: detected capacity change from 0 to 4096 [ 164.258707][T10966] EXT4-fs: Ignoring removed bh option [ 164.307935][T10966] EXT4-fs (loop0): stripe (40617) is not aligned with cluster size (16), stripe is disabled [ 164.657506][T10987] ext4 filesystem being mounted at /645/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.712020][T11006] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3003'. [ 164.721560][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3003'. [ 164.734683][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'. [ 164.743402][T11010] SELinux: failed to load policy [ 164.787765][T11011] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 164.819533][T11011] EXT4-fs (loop6): 1 orphan inode deleted [ 164.843813][T11022] vcan0: tx address claim with dest, not broadcast [ 164.854939][T11011] EXT4-fs (loop6): 1 truncate cleaned up [ 165.163120][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3023'. [ 165.246883][T11060] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 165.284631][T11064] macvlan0: entered promiscuous mode [ 165.300171][T11060] EXT4-fs (loop7): 1 orphan inode deleted [ 165.306093][T11060] EXT4-fs (loop7): 1 truncate cleaned up [ 165.313594][T11060] EXT4-fs mount: 16 callbacks suppressed [ 165.313612][T11060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.315003][T11064] dummy0: entered promiscuous mode [ 165.363335][T11064] debugfs: 'hsr1' already exists in 'hsr' [ 165.369958][T11064] Cannot create hsr debugfs directory [ 165.375644][T11064] hsr1: entered promiscuous mode [ 165.381350][T11064] hsr1: entered allmulticast mode [ 165.386774][T11064] macvlan0: entered allmulticast mode [ 165.387212][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.392833][T11064] veth1_vlan: entered allmulticast mode [ 165.407277][T11064] dummy0: entered allmulticast mode [ 165.577391][T11088] program syz.1.3041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.651371][T11092] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.689873][T11092] EXT4-fs (loop5): 1 orphan inode deleted [ 165.695648][T11092] EXT4-fs (loop5): 1 truncate cleaned up [ 165.740743][T11092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.798595][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.909873][T11133] set_capacity_and_notify: 5 callbacks suppressed [ 165.909896][T11133] loop5: detected capacity change from 0 to 512 [ 165.912342][T11130] loop7: detected capacity change from 0 to 128 [ 165.951727][T11133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.970701][T11133] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.030796][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.149495][T11167] loop7: detected capacity change from 0 to 128 [ 166.383548][T11185] loop1: detected capacity change from 0 to 128 [ 166.409585][T11185] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.432905][T11191] macvlan0: entered promiscuous mode [ 166.439810][T11191] dummy0: entered promiscuous mode [ 166.445295][T11185] ext4 filesystem being mounted at /656/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.456260][T11191] debugfs: 'hsr1' already exists in 'hsr' [ 166.466950][T11191] Cannot create hsr debugfs directory [ 166.482039][T11191] hsr1: entered promiscuous mode [ 166.487257][T11191] hsr1: entered allmulticast mode [ 166.493348][T11191] macvlan0: entered allmulticast mode [ 166.499205][T11191] veth1_vlan: entered allmulticast mode [ 166.504921][T11191] dummy0: entered allmulticast mode [ 166.511861][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.576423][T11195] tipc: Started in network mode [ 166.582034][T11195] tipc: Node identity ff, cluster identity 4711 [ 166.588973][T11195] tipc: Enabling of bearer rejected, failed to enable media [ 166.928862][T11215] loop6: detected capacity change from 0 to 512 [ 166.970723][T11215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.006183][T11215] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.021784][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 167.021872][ T28] audit: type=1400 audit(1775082839.960:18348): avc: denied { append } for pid=11214 comm="syz.6.3085" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.050840][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811afec800: rx timeout, send abort [ 167.063408][T11215] EXT4-fs (loop6): shut down requested (1) [ 167.108825][ T28] audit: type=1400 audit(1775082840.000:18349): avc: denied { ioctl } for pid=11214 comm="syz.6.3085" path="/327/bus/file1" dev="loop6" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.147144][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.228307][T11232] loop6: detected capacity change from 0 to 128 [ 167.276319][ T28] audit: type=1400 audit(1775082840.210:18350): avc: denied { remount } for pid=11230 comm="syz.6.3088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 167.358451][ T28] audit: type=1400 audit(1775082840.300:18351): avc: denied { write } for pid=11241 comm="syz.5.3091" name="file0" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.401488][ T28] audit: type=1400 audit(1775082840.300:18352): avc: denied { open } for pid=11241 comm="syz.5.3091" path="/375/file0" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.465938][ T28] audit: type=1400 audit(1775082840.300:18353): avc: denied { ioctl } for pid=11241 comm="syz.5.3091" path="/375/file0" dev="tmpfs" ino=1963 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 167.505359][T11249] loop1: detected capacity change from 0 to 4096 [ 167.513543][ T28] audit: type=1400 audit(1775082840.390:18354): avc: denied { recv } for pid=3311 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.146 dest=60484 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 167.550894][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811afec800: abort rx timeout. Force session deactivation [ 167.558753][T11249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.627275][ T28] audit: type=1400 audit(1775082840.560:18355): avc: denied { read } for pid=11256 comm="syz.5.3095" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.632978][T11257] tap0: tun_chr_ioctl cmd 1074025677 [ 167.681542][T11257] tap0: linktype set to 780 [ 167.729531][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.769507][T11267] loop0: detected capacity change from 0 to 256 [ 167.900822][ T28] audit: type=1400 audit(1775082840.840:18356): avc: denied { mount } for pid=11277 comm="syz.5.3107" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.926048][ T28] audit: type=1400 audit(1775082840.860:18357): avc: denied { search } for pid=11277 comm="syz.5.3107" name="/" dev="configfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.086714][T11292] tap0: tun_chr_ioctl cmd 35108 [ 168.374073][T11327] netlink: 'syz.0.3123': attribute type 13 has an invalid length. [ 168.410891][T11327] __nla_validate_parse: 3 callbacks suppressed [ 168.410913][T11327] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3123'. [ 168.540617][T11342] loop6: detected capacity change from 0 to 512 [ 168.556726][T11342] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 168.614738][T11342] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3125: Invalid inode bitmap blk 4 in block_group 0 [ 168.684958][T11342] loop6: lost filesystem error report for type 5 error -117 [ 168.685750][T11342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.724513][T11359] sg_write: data in/out 11228/42 bytes for SCSI command 0x0-- guessing data in; [ 168.724513][T11359] program syz.0.3132 not setting count and/or reply_len properly [ 168.832031][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.878206][T11375] loop5: detected capacity change from 0 to 256 [ 168.921144][T11375] FAT-fs (loop5): Directory bread(block 64) failed [ 168.928552][T11375] FAT-fs (loop5): Directory bread(block 65) failed [ 168.948143][T11375] FAT-fs (loop5): Directory bread(block 66) failed [ 168.978814][T11375] FAT-fs (loop5): Directory bread(block 67) failed [ 168.987193][T11375] FAT-fs (loop5): Directory bread(block 68) failed [ 169.003250][T11375] FAT-fs (loop5): Directory bread(block 69) failed [ 169.010890][T11375] FAT-fs (loop5): Directory bread(block 70) failed [ 169.018871][T11375] FAT-fs (loop5): Directory bread(block 71) failed [ 169.025648][T11375] FAT-fs (loop5): Directory bread(block 72) failed [ 169.053568][T11389] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=11389 comm=syz.1.3146 [ 169.066344][T11375] FAT-fs (loop5): Directory bread(block 73) failed [ 169.179740][T11396] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 169.939894][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 170.581707][T11525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.610810][T11525] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.650717][T11532] pimreg3: entered allmulticast mode [ 170.682875][T11534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.717522][T11534] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.729026][ T69] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 170.747297][ T69] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 170.771453][ T69] EXT4-fs (loop6): This should not happen!! Data will be lost [ 170.771453][ T69] [ 170.786645][T10325] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 170.797500][ T6804] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 170.799019][T10325] EXT4-fs (loop7): Remounting filesystem read-only [ 170.809919][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.826845][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.845410][ T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.858064][ T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.957408][T11550] bond1 (unregistering): Released all slaves [ 171.100488][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3232'. [ 171.111502][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3232'. [ 171.120681][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3232'. [ 171.130984][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3232'. [ 171.360670][T11595] set_capacity_and_notify: 3 callbacks suppressed [ 171.360695][T11595] loop0: detected capacity change from 0 to 512 [ 171.400785][T11595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.422490][T11595] ext4 filesystem being mounted at /784/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.495875][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.651231][T11620] bridge2: entered promiscuous mode [ 171.656495][T11620] bridge2: entered allmulticast mode [ 171.670061][T11620] team0: Port device bridge2 added [ 172.181457][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 172.181485][ T28] audit: type=1400 audit(1775082845.120:18398): avc: denied { write } for pid=11644 comm="syz.7.3261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 173.986141][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3262'. [ 174.179493][ T28] audit: type=1400 audit(1775082847.110:18399): avc: denied { bind } for pid=11664 comm="syz.7.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.231531][T11668] ref_ctr_offset mismatch. inode: 0x1014 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 174.244930][ T28] audit: type=1400 audit(1775082847.110:18400): avc: denied { name_bind } for pid=11664 comm="syz.7.3271" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 174.251273][T11670] loop7: detected capacity change from 0 to 1024 [ 174.312488][T11680] loop5: detected capacity change from 0 to 128 [ 174.319099][ T28] audit: type=1400 audit(1775082847.110:18401): avc: denied { node_bind } for pid=11664 comm="syz.7.3271" saddr=172.20.20.25 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 174.321006][T11680] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.393112][T11680] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.427602][ T28] audit: type=1400 audit(1775082847.360:18402): avc: denied { append } for pid=11687 comm="syz.1.3281" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 174.428279][T11670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.470453][T11670] EXT4-fs error (device loop7): ext4_empty_dir:3118: inode #11: block 32: comm syz.7.3273: bad entry in directory: directory entry overrun - offset=24, inode=255, rec_len=1024, size=1024 fake=0 [ 174.530374][T11695] sctp: [Deprecated]: syz.0.3283 (pid 11695) Use of int in max_burst socket option deprecated. [ 174.530374][T11695] Use struct sctp_assoc_value instead [ 174.546368][ T69] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.562447][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.654878][ T28] audit: type=1400 audit(1775082847.590:18403): avc: denied { create } for pid=11706 comm="syz.7.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.708133][ T28] audit: type=1400 audit(1775082847.590:18404): avc: denied { write } for pid=11706 comm="syz.7.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.821156][ T28] audit: type=1400 audit(1775082847.760:18405): avc: denied { read } for pid=11724 comm="syz.5.3298" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.897188][T11728] loop7: detected capacity change from 0 to 4096 [ 174.941564][T11728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.971773][ T28] audit: type=1400 audit(1775082847.910:18406): avc: denied { read } for pid=11738 comm="syz.5.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.994834][ T28] audit: type=1400 audit(1775082847.930:18407): avc: denied { bind } for pid=11741 comm="syz.0.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.069794][T11728] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 175.089705][T11728] EXT4-fs (loop7): can't disable delalloc during remount [ 175.113689][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.262130][T11757] atomic_op ffff8881245b1928 conn xmit_atomic 0000000000000000 [ 175.289690][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.303322][T11761] loop6: detected capacity change from 0 to 512 [ 175.351155][T11761] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.3316: missing EA_INODE flag [ 175.370153][T11761] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.370405][T11761] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3316: error while reading EA inode 12 err=-117 [ 175.379624][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 175.379648][ C1] EXT4-fs (loop6): initial error at time 1775082848: ext4_xattr_inode_iget:441: inode 12 [ 175.379677][ C1] EXT4-fs (loop6): last error at time 1775082848: ext4_xattr_inode_iget:441: inode 12 [ 175.419823][T11761] loop6: lost filesystem error report for type 5 error -117 [ 175.421935][T11761] EXT4-fs (loop6): 1 orphan inode deleted [ 175.439367][T11761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.452931][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.520285][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.585880][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.585975][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.699786][T11805] loop7: detected capacity change from 0 to 512 [ 175.740016][T11805] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3331: bg 0: block 5: invalid block bitmap [ 175.752637][T11805] loop7: lost filesystem error report for type 5 error -117 [ 175.757660][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 175.771572][ C0] EXT4-fs (loop7): initial error at time 1775082848: ext4_validate_block_bitmap:432 [ 175.777899][T11805] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 175.781000][ C0] EXT4-fs (loop7): last error at time 1775082848: ext4_validate_block_bitmap:432 [ 175.798678][T11805] loop7: lost filesystem error report for type 5 error -117 [ 175.800195][T11805] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3331: invalid indirect mapped block 3 (level 2) [ 175.821003][T11805] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.821366][T11805] EXT4-fs (loop7): 1 orphan inode deleted [ 175.837218][T11805] EXT4-fs (loop7): 1 truncate cleaned up [ 175.858241][T11805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.893882][T11818] loop6: detected capacity change from 0 to 4096 [ 175.920696][T11818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.949484][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.962253][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.998605][ T12] dvmrp6 (unregistering): left allmulticast mode [ 176.008776][T11823] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3338'. [ 176.030658][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.040987][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.050815][ T12] bond0 (unregistering): Released all slaves [ 176.058544][ T12] bond1 (unregistering): Released all slaves [ 176.137281][ T12] hsr_slave_0: left promiscuous mode [ 176.154230][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3344'. [ 176.160048][ T12] hsr_slave_1: left promiscuous mode [ 176.164037][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3344'. [ 176.194377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.214351][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.222187][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.252100][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.267284][T11852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.314565][ T12] veth1_macvtap: left promiscuous mode [ 176.336050][ T12] veth0_macvtap: left promiscuous mode [ 176.350503][ T12] veth1_vlan: left promiscuous mode [ 176.356045][ T12] veth0_vlan: left promiscuous mode [ 176.480094][ T12] team0 (unregistering): Port device team_slave_1 removed [ 176.587601][T11776] chnl_net:caif_netlink_parms(): no params data found [ 176.683080][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.691281][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.707882][T11776] bridge_slave_0: entered allmulticast mode [ 176.717089][T11776] bridge_slave_0: entered promiscuous mode [ 176.726663][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.734325][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.742493][T11776] bridge_slave_1: entered allmulticast mode [ 176.750051][T11776] bridge_slave_1: entered promiscuous mode [ 176.794375][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.809938][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.846882][T11776] team0: Port device team_slave_0 added [ 176.852924][T11915] loop7: detected capacity change from 0 to 8192 [ 176.878717][T11776] team0: Port device team_slave_1 added [ 176.917050][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.926810][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.986913][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.009531][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.016557][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.046791][T11931] loop7: detected capacity change from 0 to 512 [ 177.054253][T11931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.082677][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.098230][T11931] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3367: invalid indirect mapped block 4294967295 (level 1) [ 177.131372][T11931] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.131560][T11931] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3367: invalid indirect mapped block 4294967295 (level 1) [ 177.140926][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 177.140949][ C0] EXT4-fs (loop7): initial error at time 1775083106: ext4_free_branches:1023: inode 11 [ 177.140985][ C0] EXT4-fs (loop7): last error at time 1775083106: ext4_free_branches:1023: inode 11 [ 177.153685][T11776] hsr_slave_0: entered promiscuous mode [ 177.168992][T11931] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 177.172980][T11776] hsr_slave_1: entered promiscuous mode [ 177.202823][T11776] debugfs: 'hsr0' already exists in 'hsr' [ 177.208849][T11776] Cannot create hsr debugfs directory [ 177.211361][T11931] EXT4-fs (loop7): 2 truncates cleaned up [ 177.230170][T11931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.320131][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 177.320148][ T28] audit: type=1400 audit(1775083106.262:18437): avc: denied { setattr } for pid=11930 comm="syz.7.3367" path="/107/file0" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.366969][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.427911][ T28] audit: type=1400 audit(1775083106.362:18438): avc: denied { read } for pid=11956 comm="syz.0.3374" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.491117][ T28] audit: type=1400 audit(1775083106.362:18439): avc: denied { open } for pid=11956 comm="syz.0.3374" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.516896][ T28] audit: type=1400 audit(1775083106.362:18440): avc: denied { ioctl } for pid=11956 comm="syz.0.3374" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.606682][T11980] loop6: detected capacity change from 0 to 512 [ 177.615889][T11980] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 177.646510][T11980] EXT4-fs (loop6): 1 truncate cleaned up [ 177.658679][T11966] Falling back ldisc for ttyS3. [ 177.689501][T11980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.758953][T11980] EXT4-fs (loop6): shut down requested (0) [ 177.852670][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.890486][T11776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.942300][T11776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.961823][T11776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.978895][ T28] audit: type=1400 audit(1775083106.912:18441): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 178.015403][T11776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.029904][T12014] loop7: detected capacity change from 0 to 512 [ 178.041356][T12014] EXT4-fs: Ignoring removed oldalloc option [ 178.121748][T12014] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.3385: corrupted in-inode xattr: invalid ea_ino [ 178.142193][T12035] SELinux: policydb version 65555 does not match my version range 15-35 [ 178.152134][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.159094][T12014] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.159519][T12014] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3385: couldn't read orphan inode 15 (err -117) [ 178.169154][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 178.169181][ C0] EXT4-fs (loop7): initial error at time 1775083107: ext4_iget_extra_inode:5040: inode 15 [ 178.169210][ C0] EXT4-fs (loop7): last error at time 1775083107: ext4_iget_extra_inode:5040: inode 15 [ 178.169987][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.198063][T12035] SELinux: failed to load policy [ 178.199508][T12014] loop7: lost filesystem error report for type 5 error -117 [ 178.226679][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.241382][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.258283][T12014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.267043][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.278425][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.306222][T11776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.322390][T11776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.344004][ T28] audit: type=1400 audit(1775083107.272:18442): avc: denied { read } for pid=12013 comm="syz.7.3385" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 178.347475][T12054] loop0: detected capacity change from 0 to 256 [ 178.378942][ T28] audit: type=1400 audit(1775083107.272:18443): avc: denied { open } for pid=12013 comm="syz.7.3385" path="/" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 178.467316][T12054] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.486866][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.505241][T12054] FAT-fs (loop0): Filesystem has been set read-only [ 178.513286][T12054] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.518636][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.568181][T12054] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 178.663794][T11776] veth0_vlan: entered promiscuous mode [ 178.672856][T11776] veth1_vlan: entered promiscuous mode [ 178.689192][T11776] veth0_macvtap: entered promiscuous mode [ 178.696709][T11776] veth1_macvtap: entered promiscuous mode [ 178.707842][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.720480][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.741278][ T7001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.751714][ T7001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.764174][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.764272][T12094] loop0: detected capacity change from 0 to 1764 [ 178.774381][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.790558][T12094] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 178.800747][T12080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.807793][T12094] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 178.812966][T12080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.944750][T12105] loop1: detected capacity change from 0 to 1024 [ 178.959868][T12105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 178.997061][ T28] audit: type=1400 audit(1775083107.932:18444): avc: denied { shutdown } for pid=12108 comm="syz.5.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.058482][T11776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 179.368302][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3414'. [ 179.505290][T12145] loop7: detected capacity change from 0 to 1024 [ 179.532174][T12145] EXT4-fs: Ignoring removed bh option [ 179.539709][ T28] audit: type=1326 audit(1775083108.472:18445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.5.3423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca316bc819 code=0x0 [ 179.568250][T12145] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.583797][T12145] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 179.592053][T12145] System zones: 0-1, 3-12 [ 179.597409][T12145] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #3: block 1: comm syz.7.3421: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.611697][T12145] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.611839][T12145] EXT4-fs (loop7): Remounting filesystem read-only [ 179.621040][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 179.621059][ C1] EXT4-fs (loop7): initial error at time 1775083108: ext4_map_blocks:828: inode 3: block 1 [ 179.621094][ C1] EXT4-fs (loop7): last error at time 1775083108: ext4_map_blocks:828: inode 3: block 1 [ 179.656941][T12145] Quota error (device loop7): write_blk: dquota write failed [ 179.666021][T12145] EXT4-fs (loop7): 1 orphan inode deleted [ 179.672968][T12145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.816807][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3430'. [ 179.923482][T12174] loop0: detected capacity change from 0 to 512 [ 180.101768][T12188] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3440'. [ 180.142945][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.146888][T12194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3444'. [ 180.234591][T12194] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 180.263049][T12194] bond1 (unregistering): Released all slaves [ 180.278739][T12206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12206 comm=syz.7.3449 [ 180.340572][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3451'. [ 180.589162][T12237] bond2: invalid ARP target 0.0.0.0 specified for addition [ 180.596802][T12237] bond2: option arp_ip_target: invalid value (0) [ 180.606336][T12237] bond2 (unregistering): Released all slaves [ 180.666764][T12247] loop5: detected capacity change from 0 to 512 [ 180.720998][T12247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.741270][T12247] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.838516][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.951415][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.960452][T12277] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.000885][T12275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.017763][T12275] ext4 filesystem being mounted at /459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.074343][T12275] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #2: block 18: comm syz.5.3476: lblock 23 mapped to illegal pblock 18 (length 1) [ 181.119796][T12275] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.3476: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 181.192678][T12275] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 12: comm syz.5.3476: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 181.215930][T12275] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.3476: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 181.260418][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.319908][T11810] loop7: p3 p4 < > [ 181.324061][T11810] loop7: p3 start 11362048 is beyond EOD, truncated [ 181.335160][T12298] loop7: p3 p4 < > [ 181.339504][T12298] loop7: p3 start 11362048 is beyond EOD, truncated [ 181.412829][ T6657] udevd[6657]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 181.452136][ T6657] udevd[6657]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 181.544338][T12317] FAT-fs (loop6): error, clusters badly computed (0 != 1) [ 181.554171][T12317] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 51) [ 181.740450][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'. [ 181.781849][T12326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.795346][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'. [ 181.829821][T12326] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.891654][T12331] set_capacity_and_notify: 5 callbacks suppressed [ 181.891751][T12331] loop6: detected capacity change from 0 to 128 [ 181.958075][T12331] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 181.973461][T12326] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #2: block 18: comm syz.7.3499: lblock 23 mapped to illegal pblock 18 (length 1) [ 181.977760][T12331] FAT-fs (loop6): Filesystem has been set read-only [ 182.018179][T12326] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.3499: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 182.070842][T12326] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 12: comm syz.7.3499: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 182.123021][T12326] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 13: comm syz.7.3499: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 182.182549][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.413072][T12351] loop7: detected capacity change from 0 to 256 [ 182.443616][T12351] FAT-fs (loop7): Directory bread(block 64) failed [ 182.467698][T12351] FAT-fs (loop7): Directory bread(block 65) failed [ 182.474376][T12351] FAT-fs (loop7): Directory bread(block 66) failed [ 182.503771][T12351] FAT-fs (loop7): Directory bread(block 67) failed [ 182.510441][T12351] FAT-fs (loop7): Directory bread(block 68) failed [ 182.517005][T12351] FAT-fs (loop7): Directory bread(block 69) failed [ 182.545586][T12351] FAT-fs (loop7): Directory bread(block 70) failed [ 182.552309][T12351] FAT-fs (loop7): Directory bread(block 71) failed [ 182.567765][T12351] FAT-fs (loop7): Directory bread(block 72) failed [ 182.574497][T12351] FAT-fs (loop7): Directory bread(block 73) failed [ 182.650421][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3514'. [ 182.679763][T12362] batman_adv: batadv0: Adding interface: ipvlan2 [ 182.696450][T12362] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.747702][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.785275][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.816814][T12362] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 182.928884][ T3389] kernel read not supported for file /vcs (pid: 3389 comm: kworker/0:3) [ 183.011099][ T3539] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.054306][ T23] IPVS: starting estimator thread 0... [ 183.147818][T12380] IPVS: using max 2256 ests per chain, 112800 per kthread [ 183.218356][T12393] team_slave_0: entered promiscuous mode [ 183.224115][T12393] team_slave_1: entered promiscuous mode [ 183.246455][T12393] macvtap1: entered promiscuous mode [ 183.252845][T12393] team0: entered promiscuous mode [ 183.287843][T12393] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 183.295479][ T3389] kernel write not supported for file /66/uid_map (pid: 3389 comm: kworker/0:3) [ 183.320454][T12393] team0: Device macvtap1 is already an upper device of the team interface [ 183.367828][T12393] team0: left promiscuous mode [ 183.373028][T12393] team_slave_0: left promiscuous mode [ 183.378612][T12393] team_slave_1: left promiscuous mode [ 183.477278][T12413] loop0: detected capacity change from 0 to 128 [ 183.497165][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 183.497181][ T28] audit: type=1400 audit(2000000002.970:18456): avc: denied { connect } for pid=12414 comm="syz.5.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.570197][ T28] audit: type=1400 audit(2000000003.050:18457): avc: denied { read } for pid=12418 comm="syz.5.3540" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.622699][T12421] netlink: 'syz.7.3541': attribute type 3 has an invalid length. [ 183.633373][ T28] audit: type=1400 audit(2000000003.050:18458): avc: denied { open } for pid=12418 comm="syz.5.3540" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 183.647700][T12421] netlink: 772 bytes leftover after parsing attributes in process `syz.7.3541'. [ 183.686109][T12421] netlink: 'syz.7.3541': attribute type 3 has an invalid length. [ 183.707310][T12421] netlink: 772 bytes leftover after parsing attributes in process `syz.7.3541'. [ 183.805315][T12429] loop5: detected capacity change from 0 to 512 [ 183.806250][T12428] loop7: detected capacity change from 0 to 512 [ 183.843002][T12429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.858843][T12428] EXT4-fs: inline encryption not supported [ 183.868058][T12429] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.896273][T12428] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.917212][T12438] loop6: detected capacity change from 0 to 256 [ 183.938949][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.949626][T12428] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 183.967653][T12428] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3544: bg 0: block 248: padding at end of block bitmap is not set [ 183.968471][T12438] FAT-fs (loop6): Directory bread(block 64) failed [ 183.987143][T12428] loop7: lost filesystem error report for type 5 error -117 [ 183.989582][T12428] Quota error (device loop7): write_blk: dquota write failed [ 184.004869][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 184.004913][ C0] EXT4-fs (loop7): last error at time 2000000003: ext4_validate_block_bitmap:441 [ 184.014602][T12438] FAT-fs (loop6): Directory bread(block 65) failed [ 184.021138][T12428] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 184.037851][T12428] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.3544: Failed to acquire dquot type 1 [ 184.042129][T12438] FAT-fs (loop6): Directory bread(block 66) failed [ 184.056641][T12428] loop7: lost filesystem error report for type 5 error -28 [ 184.057301][T12428] EXT4-fs (loop7): 1 truncate cleaned up [ 184.096782][T12438] FAT-fs (loop6): Directory bread(block 67) failed [ 184.104334][T12428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 184.117261][T12438] FAT-fs (loop6): Directory bread(block 68) failed [ 184.125887][T12438] FAT-fs (loop6): Directory bread(block 69) failed [ 184.150211][T12438] FAT-fs (loop6): Directory bread(block 70) failed [ 184.157838][T12448] program syz.0.3551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.167349][ T28] audit: type=1400 audit(2000000003.630:18459): avc: denied { execute } for pid=12445 comm="syz.5.3552" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=33896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 184.177269][T12438] FAT-fs (loop6): Directory bread(block 71) failed [ 184.201977][T12438] FAT-fs (loop6): Directory bread(block 72) failed [ 184.211805][T12438] FAT-fs (loop6): Directory bread(block 73) failed [ 184.236700][ T28] audit: type=1400 audit(2000000003.710:18460): avc: denied { listen } for pid=12449 comm="syz.5.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.264125][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 184.285897][T12454] loop5: detected capacity change from 0 to 128 [ 184.297914][ T69] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 184.316763][ T69] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 1 [ 184.348057][ T69] loop7: lost filesystem error report for type 5 error -117 [ 184.375783][T12438] syz.6.3548: attempt to access beyond end of device [ 184.375783][T12438] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 184.530294][ T28] audit: type=1400 audit(2000000004.000:18461): avc: denied { shutdown } for pid=12473 comm="syz.7.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.638562][ T28] audit: type=1400 audit(2000000004.120:18462): avc: denied { append } for pid=12487 comm="syz.0.3572" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.714722][T12494] loop5: detected capacity change from 0 to 512 [ 184.764465][T12502] loop7: detected capacity change from 0 to 512 [ 184.819393][T12494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.832840][T12502] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.847138][T12494] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.863084][T12502] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.890635][T12494] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.3575: Failed to acquire dquot type 1 [ 184.963544][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.981701][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.209749][T12536] delete_channel: no stack [ 185.372854][T12551] loop1: detected capacity change from 0 to 256 [ 185.385082][T12551] FAT-fs (loop1): Directory bread(block 4098) failed [ 185.396359][T12551] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.562558][T12561] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.729505][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'. [ 185.771014][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'. [ 186.001308][T12595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.021569][T12595] ext4 filesystem being mounted at /877/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.109401][ T12] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 186.149908][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 186.174322][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.174322][ T12] [ 186.192250][T12610] EXT4-fs: Ignoring removed nobh option [ 186.200839][ T313] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 186.226297][ T313] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 186.240403][T12610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.254981][ T313] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.254981][ T313] [ 186.278069][T12610] EXT4-fs (loop1): 1 truncate cleaned up [ 186.284624][ T3307] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 186.308138][T12610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.322165][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.335704][T12610] Invalid option length (255) for dns_resolver key [ 186.513272][T11776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.682031][T12629] netlink: 'syz.1.3635': attribute type 2 has an invalid length. [ 187.575501][T12665] wireguard0: entered promiscuous mode [ 187.583988][T12665] wireguard0: entered allmulticast mode [ 187.782120][T12677] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3656'. [ 188.004088][T12692] set_capacity_and_notify: 6 callbacks suppressed [ 188.004140][T12692] loop7: detected capacity change from 0 to 1024 [ 188.056264][T12692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 188.070221][T12675] syz.5.3655 (12675) used greatest stack depth: 8848 bytes left [ 188.079050][T12692] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.115058][T12700] netlink: 47 bytes leftover after parsing attributes in process `syz.5.3666'. [ 188.141895][ T313] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 188.168787][ T313] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 188.189510][ T313] EXT4-fs (loop7): This should not happen!! Data will be lost [ 188.189510][ T313] [ 188.200484][ T69] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 188.208046][T12707] loop5: detected capacity change from 0 to 256 [ 188.228118][ T69] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 188.228274][T12707] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 188.254221][ T69] EXT4-fs (loop7): This should not happen!! Data will be lost [ 188.254221][ T69] [ 188.268660][T10325] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 188.282101][T12707] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.293630][T12656] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 188.298589][T10325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.406088][T12723] loop5: detected capacity change from 0 to 128 [ 188.416138][T12725] program syz.0.3677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.664724][T12756] loop0: detected capacity change from 0 to 512 [ 188.677162][T12756] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3692: invalid indirect mapped block 4294967295 (level 0) [ 188.702229][T12756] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.703189][T12756] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3692: invalid indirect mapped block 4294967295 (level 1) [ 188.712754][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 188.712780][ C0] EXT4-fs (loop0): initial error at time 2000000008: ext4_free_branches:1023: inode 16 [ 188.712825][ C0] EXT4-fs (loop0): last error at time 2000000008: ext4_free_branches:1023: inode 16 [ 188.757587][T12756] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.758093][T12756] EXT4-fs (loop0): 1 orphan inode deleted [ 188.773827][T12756] EXT4-fs (loop0): 1 truncate cleaned up [ 188.802420][T12756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.838905][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.989744][ T28] kauditd_printk_skb: 874 callbacks suppressed [ 188.989763][ T28] audit: type=1400 audit(2000000008.470:19335): avc: denied { read write } for pid=12791 comm="syz.0.3699" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 188.998721][ T3403] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 189.030872][ T28] audit: type=1400 audit(2000000008.470:19336): avc: denied { open } for pid=12791 comm="syz.0.3699" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 189.034923][ T3403] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 189.082783][ T3403] hid-generic 0000:0003:0001.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 189.111587][T12801] fido_id[12801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.300449][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.322067][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.369009][T12844] macvlan0: entered promiscuous mode [ 189.375365][T12844] netlink: 'syz.1.3709': attribute type 2 has an invalid length. [ 189.400163][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'. [ 189.429069][T12850] netlink: 19 bytes leftover after parsing attributes in process `syz.6.3711'. [ 189.679722][T12890] ip6tnl1: entered promiscuous mode [ 189.697735][T12890] ip6tnl1: entered allmulticast mode [ 189.713635][ T313] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.787155][T12908] loop0: detected capacity change from 0 to 512 [ 189.794192][T12908] EXT4-fs: Ignoring removed oldalloc option [ 189.811492][T12908] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3728: invalid indirect mapped block 4294967295 (level 1) [ 189.840677][T12908] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.840875][T12908] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3728: invalid indirect mapped block 4294967295 (level 1) [ 189.850077][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 189.850117][ C0] EXT4-fs (loop0): initial error at time 2000000009: ext4_free_branches:1023: inode 11 [ 189.850147][ C0] EXT4-fs (loop0): last error at time 2000000009: ext4_free_branches:1023: inode 11 [ 189.896406][T12908] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.897415][T12908] EXT4-fs (loop0): 2 truncates cleaned up [ 189.919217][T12908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.971996][T12908] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #12: block 7: comm syz.0.3728: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 190.014447][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.064443][T12934] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3734'. [ 190.074766][T12934] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3734'. [ 191.122514][T13007] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3746'. [ 191.127718][ T28] audit: type=1400 audit(2000000010.600:19337): avc: denied { write } for pid=13009 comm="syz.6.3748" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.266204][T13027] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3754'. [ 191.344172][T13034] loop0: detected capacity change from 0 to 1024 [ 191.428206][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3763'. [ 191.439060][T13051] loop6: detected capacity change from 0 to 1024 [ 191.471285][T13055] loop5: detected capacity change from 0 to 256 [ 191.497165][T13055] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 191.505197][T13055] FAT-fs (loop5): Filesystem has been set read-only [ 191.517265][T13051] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.534389][T13051] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3764: bg 0: block 112: padding at end of block bitmap is not set [ 191.550454][T13051] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28 [ 191.571455][T13051] EXT4-fs (loop6): This should not happen!! Data will be lost [ 191.571455][T13051] [ 191.581888][T13051] EXT4-fs (loop6): Total free blocks count 0 [ 191.588280][T13051] EXT4-fs (loop6): Free/Dirty block details [ 191.607968][T13051] EXT4-fs (loop6): free_blocks=0 [ 191.614244][T13051] EXT4-fs (loop6): dirty_blocks=64 [ 191.619868][T13051] EXT4-fs (loop6): Block reservation details [ 191.626293][T13051] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 191.672919][ T6804] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 191.700147][T13071] syzkaller1: entered promiscuous mode [ 191.707069][T13071] syzkaller1: entered allmulticast mode [ 191.934750][ T28] audit: type=1400 audit(2000000011.410:19338): avc: denied { bind } for pid=13091 comm="syz.6.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.054008][T13106] loop7: detected capacity change from 0 to 1024 [ 192.074592][T13106] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.112006][T13106] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 192.127432][T13113] loop6: detected capacity change from 0 to 1024 [ 192.139021][T13106] EXT4-fs (loop7): orphan cleanup on readonly fs [ 192.145717][T13106] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.3787: Freeing blocks not in datazone - block = 0, count = 4096 [ 192.150567][T13113] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.159590][T13106] loop7: lost filesystem error report for type 5 error -117 [ 192.177645][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 192.178879][T13106] EXT4-fs (loop7): Remounting filesystem read-only [ 192.185101][ C0] EXT4-fs (loop7): initial error at time 2000000011: ext4_free_blocks:6724 [ 192.207025][ C0] EXT4-fs (loop7): last error at time 2000000011: ext4_free_blocks:6724 [ 192.213866][T13106] EXT4-fs (loop7): 1 orphan inode deleted [ 192.263641][ T28] audit: type=1400 audit(2000000011.740:19339): avc: denied { map } for pid=13110 comm="syz.6.3791" path="/454/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.349443][T13106] EXT4-fs (loop7): shut down requested (2) [ 192.487287][ T28] audit: type=1326 audit(2000000011.960:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.7.3801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb51109c819 code=0x0 [ 192.569994][ T28] audit: type=1400 audit(2000000012.020:19341): avc: denied { associate } for pid=13133 comm="syz.7.3801" name="hugetlb.1GB.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 192.622518][T13141] netlink: 884 bytes leftover after parsing attributes in process `syz.6.3803'. [ 192.679604][ T28] audit: type=1400 audit(2000000012.160:19342): avc: denied { map } for pid=13142 comm="syz.6.3804" path="socket:[35689]" dev="sockfs" ino=35689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.722812][ T28] audit: type=1400 audit(2000000012.160:19343): avc: denied { read } for pid=13142 comm="syz.6.3804" path="socket:[35689]" dev="sockfs" ino=35689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.755109][ T6657] loop5: p1 p2 p3 < p5 p6 > [ 192.770056][ T6657] loop5: p2 size 16775168 extends beyond EOD, truncated [ 192.789385][ T6657] loop5: p5 start 4294970168 is beyond EOD, truncated [ 192.805478][ T28] audit: type=1400 audit(2000000012.280:19344): avc: denied { setopt } for pid=13147 comm="syz.6.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 192.832190][T13131] loop5: p1 p2 p3 < p5 p6 > [ 192.838874][T13131] loop5: p2 size 16775168 extends beyond EOD, truncated [ 192.855157][T13131] loop5: p5 start 4294970168 is beyond EOD, truncated [ 192.975706][T13155] ip6erspan0: entered allmulticast mode [ 192.980587][T13162] program syz.6.3812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.046525][T13166] tipc: Started in network mode [ 193.059836][T13167] set_capacity_and_notify: 1 callbacks suppressed [ 193.059929][T13167] loop6: detected capacity change from 0 to 256 [ 193.061452][T13166] tipc: Node identity ac14140f, cluster identity 4711 [ 193.081774][T13166] tipc: Enabled bearer , priority 10 [ 193.117789][T13167] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.152960][ T5497] udevd[5497]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 193.153162][T11810] udevd[11810]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 193.165458][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 193.174172][ T6657] udevd[6657]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 193.216209][ T5504] udevd[5504]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 193.227854][T11810] udevd[11810]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 193.242336][ T6657] udevd[6657]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 193.253919][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 193.336713][T13178] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 8200) [ 193.348141][T13178] FAT-fs (loop6): Filesystem has been set read-only [ 193.361256][T13180] loop7: detected capacity change from 0 to 7 [ 193.685908][T13209] program syz.7.3830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.761030][T13213] team_slave_0: entered promiscuous mode [ 193.766938][T13213] team_slave_1: entered promiscuous mode [ 193.777115][T13213] macsec1: entered allmulticast mode [ 193.785051][T13213] team0: entered allmulticast mode [ 193.803089][T13213] team_slave_0: entered allmulticast mode [ 193.807758][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.827455][T13213] team_slave_1: entered allmulticast mode [ 193.845375][T13213] team0: Device macsec1 is already an upper device of the team interface [ 193.867673][T13213] team0: left allmulticast mode [ 193.879851][T13213] team_slave_0: left allmulticast mode [ 193.895823][T13213] team_slave_1: left allmulticast mode [ 193.919142][T13213] team_slave_0: left promiscuous mode [ 193.924632][T13213] team_slave_1: left promiscuous mode [ 194.141550][T13249] netlink: 'syz.7.3849': attribute type 3 has an invalid length. [ 194.160970][T13249] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.3849'. [ 194.182755][T13255] Invalid argument reading file caps for ./file0 [ 194.212908][T13257] netlink: 'syz.0.3863': attribute type 29 has an invalid length. [ 194.248093][ T3389] tipc: Node number set to 2886997007 [ 194.255224][T13257] netlink: 'syz.0.3863': attribute type 29 has an invalid length. [ 194.278952][T13257] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3863'. [ 194.291704][T13257] unsupported nla_type 58 [ 194.358307][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 194.358324][ T28] audit: type=1326 audit(2000000013.840:19348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.6.3860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5723b1c819 code=0x0 [ 194.395853][T13276] loop7: detected capacity change from 0 to 512 [ 194.411057][T13278] loop6: detected capacity change from 0 to 128 [ 194.419034][T13278] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.430727][T13276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.479753][T13276] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.556575][ T28] audit: type=1400 audit(2000000014.030:19349): avc: denied { setopt } for pid=13284 comm="syz.7.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.035806][T13305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13305 comm=syz.1.3874 [ 195.067760][T13307] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 195.132821][T13312] random: crng reseeded on system resumption [ 195.186419][ T28] audit: type=1400 audit(2000000014.660:19350): avc: denied { getopt } for pid=13313 comm="syz.0.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.228628][ T313] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.331489][T13331] loop6: detected capacity change from 0 to 128 [ 195.361376][T13331] EXT4-fs mount: 10 callbacks suppressed [ 195.361394][T13331] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.374546][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3887'. [ 195.405376][T13331] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.450386][T13345] loop0: detected capacity change from 0 to 512 [ 195.456934][ T28] audit: type=1326 audit(2000000014.920:19351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5a56c819 code=0x7ffc0000 [ 195.481467][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3887'. [ 195.527650][T13345] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 195.554720][ T6804] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.568469][ T28] audit: type=1326 audit(2000000014.920:19352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4d5a56c819 code=0x7ffc0000 [ 195.594502][T13345] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3890: Invalid inode bitmap blk 4 in block_group 0 [ 195.632663][T13351] Invalid argument reading file caps for ./file0 [ 195.659372][ T28] audit: type=1326 audit(2000000014.920:19353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5a56c819 code=0x7ffc0000 [ 195.686011][ T28] audit: type=1326 audit(2000000014.920:19354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5a56c819 code=0x7ffc0000 [ 195.695866][T13345] loop0: lost filesystem error report for type 5 error -117 [ 195.738298][T13345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.775529][ T28] audit: type=1400 audit(2000000015.250:19355): avc: denied { mount } for pid=13357 comm="syz.7.3893" name="/" dev="ramfs" ino=37067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 195.804130][T13345] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 195.903650][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.920806][ T3410] IPVS: starting estimator thread 0... [ 195.926877][T13364] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.020094][T13368] IPVS: using max 2496 ests per chain, 124800 per kthread [ 196.182424][T13388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.502807][T13407] loop0: detected capacity change from 0 to 2048 [ 196.563966][T13407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.576907][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3920'. [ 196.591406][T13407] ext4 filesystem being mounted at /940/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.615999][T13413] syz_tun: entered promiscuous mode [ 196.630973][T13407] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3918: bg 0: block 345: padding at end of block bitmap is not set [ 196.646600][T13407] EXT4-fs (loop0): Remounting filesystem read-only [ 196.647818][T13413] syz_tun: left promiscuous mode [ 196.697345][ T28] audit: type=1400 audit(2000000016.170:19356): avc: denied { connect } for pid=13428 comm="syz.7.3928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.728490][ T28] audit: type=1400 audit(2000000016.170:19357): avc: denied { shutdown } for pid=13428 comm="syz.7.3928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.749023][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.846129][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3929'. [ 196.900296][T13448] serio: Serial port ptm1 [ 197.397814][T13485] loop0: detected capacity change from 0 to 8192 [ 197.410584][T13485] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.719996][T13509] loop6: detected capacity change from 0 to 1024 [ 197.748733][T13509] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.772204][T13509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.902496][T13509] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.986021][T13509] EXT4-fs (loop6): shut down requested (2) [ 198.029923][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.334323][T13542] loop5: detected capacity change from 0 to 512 [ 198.366497][T13542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.520134][T13551] macvlan0: entered allmulticast mode [ 198.525579][T13551] veth1_vlan: entered allmulticast mode [ 198.537266][T13551] veth1_vlan: left allmulticast mode [ 198.558552][T13551] macvlan0 (unregistering): left allmulticast mode [ 198.559224][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.632617][T13555] loop5: detected capacity change from 0 to 512 [ 198.649786][T13555] EXT4-fs: Ignoring removed bh option [ 198.680908][T13555] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 198.711363][T13555] EXT4-fs (loop5): 1 truncate cleaned up [ 198.758067][T13555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.913652][ T6883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.229975][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'. [ 199.257811][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'. [ 199.326671][T13591] loop0: detected capacity change from 0 to 512 [ 199.347319][T13591] EXT4-fs: Ignoring removed nobh option [ 199.360299][T13591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.411264][T13591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.427824][T13591] ext4 filesystem being mounted at /955/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.505381][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.542072][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 199.542090][ T28] audit: type=1400 audit(2000000019.020:19366): avc: denied { mount } for pid=13607 comm="syz.0.4004" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 199.628568][ T28] audit: type=1400 audit(2000000019.020:19367): avc: denied { mounton } for pid=13607 comm="syz.0.4004" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 199.675812][T13621] loop0: detected capacity change from 0 to 512 [ 199.704006][T13621] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.733036][T13621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.757663][ T28] audit: type=1400 audit(2000000019.040:19368): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 199.800397][T13621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.824398][T13621] ext4 filesystem being mounted at /958/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.875607][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.901591][T13631] 9pnet: p9_errstr2errno: server reported unknown error  [ 200.437048][T13660] loop6: detected capacity change from 0 to 4096 [ 200.449069][T13660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.473757][ T6804] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.523369][ T23] IPVS: starting estimator thread 0... [ 200.616928][T13671] syzkaller1: entered promiscuous mode [ 200.622889][T13671] syzkaller1: entered allmulticast mode [ 200.638789][T13664] IPVS: using max 2640 ests per chain, 132000 per kthread [ 200.946209][T13684] hugetlbfs: syz.1.4038 (13684): Using mlock ulimits for SHM_HUGETLB is obsolete [ 201.011952][ T28] audit: type=1400 audit(2000000020.490:19369): avc: denied { read write } for pid=13687 comm="syz.1.4040" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 201.065257][ T28] audit: type=1400 audit(2000000020.520:19370): avc: denied { open } for pid=13687 comm="syz.1.4040" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 201.117699][ T28] audit: type=1400 audit(2000000020.520:19371): avc: denied { ioctl } for pid=13687 comm="syz.1.4040" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 201.230040][ T28] audit: type=1400 audit(2000000020.710:19372): avc: denied { create } for pid=13691 comm="syz.1.4042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 201.357897][ T28] audit: type=1400 audit(2000000020.840:19373): avc: denied { read } for pid=13697 comm="syz.5.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.051294][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4056'. [ 202.130336][T13725] team0: Port device team_slave_0 removed [ 202.297903][T13745] loop6: detected capacity change from 0 to 256 [ 202.327977][T13747] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4067'. [ 202.352498][ T28] audit: type=1400 audit(2000000021.820:19374): avc: denied { watch } for pid=13744 comm="syz.6.4066" path="/528/file0/file0" dev="loop6" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 202.408393][T13752] loop0: detected capacity change from 0 to 512 [ 202.453549][T13752] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.4069: corrupted in-inode xattr: invalid ea_ino [ 202.505372][T13755] loop1: detected capacity change from 0 to 2048 [ 202.554187][T13752] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 202.554381][T13752] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4069: couldn't read orphan inode 15 (err -117) [ 202.563714][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 202.563738][ C0] EXT4-fs (loop0): initial error at time 2000000022: ext4_iget_extra_inode:5040: inode 15 [ 202.563774][ C0] EXT4-fs (loop0): last error at time 2000000022: ext4_iget_extra_inode:5040: inode 15 [ 202.628933][T13755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.687766][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.720793][T13752] loop0: lost filesystem error report for type 5 error -117 [ 202.727319][T13752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.747426][T11776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.832057][T13767] netlink: 336 bytes leftover after parsing attributes in process `syz.1.4075'. [ 202.867719][T13767] netlink: 336 bytes leftover after parsing attributes in process `syz.1.4075'. [ 202.887948][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.161562][T13781] netlink: 'syz.1.4082': attribute type 6 has an invalid length. [ 203.340366][ T28] audit: type=1400 audit(2000000022.820:19375): avc: denied { map } for pid=13795 comm="syz.6.4088" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 203.880606][T13821] ================================================================== [ 203.888828][T13821] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 203.896737][T13821] [ 203.899158][T13821] write to 0xffff88811a441e40 of 8 bytes by task 13822 on cpu 0: [ 203.906984][T13821] cpu_map_kthread_run+0x4fe/0x1680 [ 203.912235][T13821] kthread+0x22a/0x280 [ 203.916320][T13821] ret_from_fork+0x150/0x360 [ 203.921123][T13821] ret_from_fork_asm+0x1a/0x30 [ 203.926286][T13821] [ 203.928661][T13821] read to 0xffff88811a441e40 of 8 bytes by task 13821 on cpu 1: [ 203.936483][T13821] bq_flush_to_queue+0x124/0x360 [ 203.941443][T13821] cpu_map_enqueue+0x1ad/0x1c0 [ 203.946246][T13821] xdp_do_redirect_frame+0x27b/0x580 [ 203.951747][T13821] bpf_test_run_xdp_live+0xac3/0x1360 [ 203.957167][T13821] bpf_prog_test_run_xdp+0x57b/0xa10 [ 203.962494][T13821] bpf_prog_test_run+0x204/0x340 [ 203.967543][T13821] __sys_bpf+0x52e/0x7e0 [ 203.971808][T13821] __x64_sys_bpf+0x41/0x50 [ 203.976253][T13821] x64_sys_call+0x10cb/0x3020 [ 203.980977][T13821] do_syscall_64+0x12c/0x370 [ 203.985596][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.991523][T13821] [ 203.993864][T13821] value changed: 0xffff8881271be070 -> 0x0000000000000000 [ 204.001072][T13821] [ 204.003404][T13821] Reported by Kernel Concurrency Sanitizer on: [ 204.009651][T13821] CPU: 1 UID: 0 PID: 13821 Comm: syz.6.4101 Tainted: G W syzkaller #0 PREEMPT(full) [ 204.020793][T13821] Tainted: [W]=WARN [ 204.024608][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.034781][T13821] ==================================================================