last executing test programs: 18.564253883s ago: executing program 1 (id=1226): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x7}}, {@check_relaxed}, {@unhide}, {@uid}, {@uid}, {@mode={'mode', 0x3d, 0xdf27}}]}, 0x1, 0x550, &(0x7f0000000d80)="$eJzs3d9u01YcwPGf+2dUYWPTNiFUFTiUTSpSCU4CQRFXnnOSGhw7sh3UXqGKpqgihYkyae3VuEGbtD0Et3uIPcLeBO0RmGwnbdrmD4Um6dj3E23nxD4+53dM5J/cxLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx7LJp5gxxHa+xqvqzy4FfG7C+09+NQ8WAcUWM+D+Zm5NL6aJL3x6svhj/b1EW0ncLMhcXc7J3/uJX976ZmepsPyCgsdjZ3Xu63mo1X5xko+nRxTNuVe05oe/UrKpWTuirUrFo3lqphKriuDpcCyNdU3agrcgP1JJ9Q+VKpYLS2TW/4VXLlqs7C+/ezJtmUd3P1rUVhL536342tFcc13W8atImXh23uRt/EB84kYq0VVNqc6vVLCilzg8KMm6UGzaTuFF+WKO8mc/ncvl8rnindOeuac4cW2AeIe0W74z0k2zOTP5Di8k6zcM38FGm2vlfXHHEk4asiur5sqUsgfhS67O+rZP/v7+l98f4rMe43fm/k+UvHayelyT/X0nfXemX//vEMr7XjuzKnjyVdWlJS5ryYuIRjfdVFS2eOBKKL47UxEqWqPYSJSUpSlFMeSQrUpFQlFTEEVe0hLImoUSik0+ULYFosSQSXwJRsiS23BAlOSlJSQqiREtW1sSXhnhSlbJYSS+bspXs90LP6PaljXIDJrLfU35Ao5Pk/3NxtjePb0L+/7875SM48OHedfJ/f7PjiwYAAAAAAIyCkfz13UhO8y8ntYrjanPSYQEAAAAAgFOUfPO/EBfJ1/yXxeD8HwAAAACAT42RXGNniEhGrqa1zpVQ/BEAAAAAAIBPRPL9/5W4yMS1q2Jw/g8AAAAAwKfm16H32A/r54y//pEgmDVe1Ve/M7atuJ21PZ1uN320x6gyb1xod5IUxZn2O1svGO27X+7fBPNtu9jsF8fnyVLDME4hAPldrqVtrm2k5UZnTTrbTMVxddb23Xs5sawLU5FejX56tvWzJNP/zatdMGRzq9XMPn7e2khieRX38mq7fQPFY/dRHBDLy+R+C8k1Fz33/GxyIUY6rvFLOq7ZPf+pdPOpE4z5WhbTNouZtMwcnv9cPGYu22/2mTSK3JGZ97x75MAorqdtri9dT4seUeT7RhEPt9Vq5ruj+KB98R5RFIbti0InitmD4U8SBQBMyuaQLGQcT/wfcJTrm907o5xKdn8tS2mbpfnkwDoz3+OIbg47opsfmdf/nD36DKR+OTYe948jWfVNvMGbvuOGbt6Id+H0y+0f5eLO7t7Nre31J80nzWf5fKFo3jbNO3mZTabRLsg9AIAehj9jZ2gL4/aQs+qv939SkJXH8lxasiHLydUGyS8OunutftnuNdP1M4TlIWetB21zsjzkrC7T9aCX929bGMO/BAAA47PYOw+fKP8vDznvPpzLB58dd+dyAAAwGjp4e69drT/KlUo5K1rRKvDtBypwylWtHC/Sgb1ieVWt6oEf+bbvxpWHTlmHKmzU634QqYofqLofOqvJk99V+9Hvoa5ZXuTYYd3VVqiV7XuRZUeq7IS2qjd+cJ1wRQfxxp1nDNpW5PieCv1GYOusUqHWXQ2dsvYip+LEVU/VA6dmBWvqoe82alqVdWgHTj3ykw73x3K8ih/UrMj5QrIT3M8AAJwlO7t7T9dbreaLEVYmPUcAAHAYWRoAAAAAAAAAAAAAAAAAAAAAgLNvHNf/Tb7yd/oUATkr8fwHK3NnI4wTVqZE5AyEMcKKMaqeJ31kAjBq/wYAAP//YbxJJw==") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 18.492273234s ago: executing program 1 (id=1228): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x2080, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 18.266345559s ago: executing program 1 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(r0) 18.20917709s ago: executing program 1 (id=1249): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 17.974052805s ago: executing program 1 (id=1247): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 17.72006533s ago: executing program 1 (id=1264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) 17.70604158s ago: executing program 32 (id=1264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) 12.343186893s ago: executing program 4 (id=1427): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 11.98462946s ago: executing program 4 (id=1452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 11.831591943s ago: executing program 4 (id=1461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) 11.804927763s ago: executing program 4 (id=1462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x9) 11.638258496s ago: executing program 4 (id=1464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380"], 0xfc}}, 0x0) 11.539098548s ago: executing program 4 (id=1465): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004500005c00000000002f9078000000000000000024806558000000001000080010f6000002000086"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 11.506541069s ago: executing program 33 (id=1465): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004500005c00000000002f9078000000000000000024806558000000001000080010f6000002000086"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 1.246949636s ago: executing program 3 (id=1850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 1.138203218s ago: executing program 3 (id=1859): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x7fe, 0x0, 0x0, 0x60, 0x1}) 1.081927359s ago: executing program 5 (id=1863): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x9}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) 1.01559689s ago: executing program 5 (id=1866): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xc0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 1.001976921s ago: executing program 5 (id=1868): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x107242, 0x10000, 0xfffffffd, 0x9, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) 850.654594ms ago: executing program 5 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 754.233625ms ago: executing program 5 (id=1879): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8004) 753.314835ms ago: executing program 5 (id=1882): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 735.254996ms ago: executing program 3 (id=1884): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffff, 0x1, 0x4}}) 690.075167ms ago: executing program 3 (id=1888): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x0, 0x7bdfd2e3, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 411.693432ms ago: executing program 0 (id=1903): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000001a0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000500), &(0x7f0000000100)=@udp6=r0, 0x1}, 0x20) 403.534293ms ago: executing program 3 (id=1905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 372.109563ms ago: executing program 2 (id=1908): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) 371.683723ms ago: executing program 3 (id=1909): recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000003140)=""/188, 0xbc}], 0x2}, 0x8}], 0x2, 0x19bde61a8ea10eff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 340.367653ms ago: executing program 0 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 339.924853ms ago: executing program 0 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) chroot(&(0x7f0000000040)='./file0\x00') 333.171623ms ago: executing program 2 (id=1913): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0x93) 275.605655ms ago: executing program 0 (id=1916): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) 252.406115ms ago: executing program 6 (id=1918): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x6, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d7587fcb3678", 0x4, 0x200}) 200.116736ms ago: executing program 6 (id=1919): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 172.905847ms ago: executing program 0 (id=1920): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r1}}, 0x20) 172.243107ms ago: executing program 6 (id=1921): r0 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) move_pages(r0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x2) 115.582208ms ago: executing program 0 (id=1922): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a310000000008000240"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 115.008108ms ago: executing program 6 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 107.075128ms ago: executing program 2 (id=1924): sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 86.320748ms ago: executing program 6 (id=1925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 59.825449ms ago: executing program 2 (id=1926): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd7", 0x4}], 0x1, 0xa) 59.513049ms ago: executing program 6 (id=1927): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x82, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 59.328079ms ago: executing program 2 (id=1928): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 0s ago: executing program 2 (id=1929): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x14105, 0x32, 0xfffffbff, 0x9, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): oop4: detected capacity change from 0 to 512 [ 36.347361][ T4013] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 36.361971][ T4013] EXT4-fs (loop4): invalid journal inode [ 36.367644][ T4013] EXT4-fs (loop4): can't get journal size [ 36.395215][ T29] audit: type=1400 audit(1757932862.362:389): avc: denied { create } for pid=4026 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.425160][ T4013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 36.443321][ T29] audit: type=1400 audit(1757932862.392:390): avc: denied { shutdown } for pid=4026 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.462984][ T29] audit: type=1400 audit(1757932862.392:391): avc: denied { getopt } for pid=4026 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.482432][ T29] audit: type=1400 audit(1757932862.392:392): avc: denied { connect } for pid=4026 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.501110][ T4013] System zones: 1-12, 13-13 [ 36.501894][ T29] audit: type=1400 audit(1757932862.392:393): avc: denied { name_connect } for pid=4026 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 36.533578][ T4013] EXT4-fs (loop4): 1 truncate cleaned up [ 36.539752][ T4013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.552876][ T29] audit: type=1400 audit(1757932862.522:394): avc: denied { mount } for pid=4012 comm="syz.4.205" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.591167][ T29] audit: type=1400 audit(1757932862.562:395): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.592097][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.636291][ T29] audit: type=1400 audit(1757932862.602:396): avc: denied { create } for pid=3995 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.686690][ T29] audit: type=1400 audit(1757932862.602:397): avc: denied { getopt } for pid=3995 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 36.833708][ T4070] __nla_validate_parse: 6 callbacks suppressed [ 36.833722][ T4070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.219'. [ 37.227728][ T4110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.236884][ T4110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.699310][ T3419] kernel write not supported for file /sg0 (pid: 3419 comm: kworker/1:4) [ 37.742252][ T4230] syz.4.258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.807906][ T4238] loop3: detected capacity change from 0 to 512 [ 37.814544][ T4238] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.822619][ T4238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.843088][ T4238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6016c018, mo2=0002] [ 37.845815][ T4236] loop0: detected capacity change from 0 to 1024 [ 37.861360][ T4238] System zones: 1-12 [ 37.873109][ T4238] EXT4-fs (loop3): 1 truncate cleaned up [ 37.885739][ T4238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.907801][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.940638][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.951929][ T4236] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 37.992398][ T4256] loop4: detected capacity change from 0 to 512 [ 38.004217][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.034928][ T4256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.058991][ T4256] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.075796][ T4256] EXT4-fs error (device loop4): ext4_get_first_dir_block:3529: inode #12: comm syz.4.270: Attempting to read directory block (0) that is past i_size (3) [ 38.118007][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.140671][ T4270] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 38.142750][ T4273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.277'. [ 38.158660][ T4273] netlink: 140 bytes leftover after parsing attributes in process `syz.0.277'. [ 38.208497][ T4276] loop2: detected capacity change from 0 to 512 [ 38.228985][ T4276] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.236778][ T4276] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.279: iget: bad extended attribute block 1 [ 38.254441][ T4276] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.279: couldn't read orphan inode 15 (err -117) [ 38.275979][ T4276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.334448][ T4285] loop3: detected capacity change from 0 to 128 [ 38.379173][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.493600][ T4299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.289'. [ 38.510456][ T4295] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.521053][ T4295] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 38.593035][ T4314] Zero length message leads to an empty skb [ 38.630939][ T4318] loop3: detected capacity change from 0 to 256 [ 38.700896][ T4323] loop4: detected capacity change from 0 to 1024 [ 38.721428][ T4323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.743951][ T4327] loop1: detected capacity change from 0 to 512 [ 38.748139][ T4323] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 38.752381][ T4327] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.804647][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.810837][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 39.036348][ T4359] mmap: syz.3.315 (4359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.167237][ T4348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.179349][ T4348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.254836][ T4381] netlink: 14 bytes leftover after parsing attributes in process `syz.3.326'. [ 39.287373][ T4385] netlink: 'syz.2.329': attribute type 6 has an invalid length. [ 39.349182][ T4389] loop2: detected capacity change from 0 to 8192 [ 39.358805][ T4389] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 39.366699][ T4389] FAT-fs (loop2): Filesystem has been set read-only [ 39.902085][ T4447] loop1: detected capacity change from 0 to 512 [ 39.908745][ T4447] EXT4-fs: Ignoring removed bh option [ 39.930205][ T4447] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 39.947669][ T4452] loop4: detected capacity change from 0 to 128 [ 39.966241][ T4447] EXT4-fs (loop1): 1 truncate cleaned up [ 39.980864][ T4452] syz.4.359: attempt to access beyond end of device [ 39.980864][ T4452] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 39.990472][ T4447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.036886][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.066340][ T4459] team_slave_0: entered promiscuous mode [ 40.072020][ T4459] team_slave_1: entered promiscuous mode [ 40.152149][ T4465] loop4: detected capacity change from 0 to 512 [ 40.160857][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 40.172217][ T4465] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.206078][ T4471] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 40.206078][ T4471] program syz.0.367 not setting count and/or reply_len properly [ 40.255480][ T4465] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.365: Failed to acquire dquot type 1 [ 40.271717][ T4477] netlink: 104 bytes leftover after parsing attributes in process `syz.1.369'. [ 40.293255][ T4465] EXT4-fs (loop4): 1 truncate cleaned up [ 40.310399][ T4465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.368620][ T4485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.385870][ T4489] loop0: detected capacity change from 0 to 512 [ 40.401835][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.432381][ T4420] 9pnet_fd: p9_fd_create_tcp (4420): problem connecting socket to 127.0.0.1 [ 40.502828][ T4494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4494 comm=syz.3.377 [ 40.657434][ T4508] netlink: 104 bytes leftover after parsing attributes in process `syz.3.382'. [ 40.819534][ T4527] netlink: 256 bytes leftover after parsing attributes in process `syz.1.392'. [ 40.932353][ T4549] tipc: Started in network mode [ 40.937271][ T4549] tipc: Node identity ac14140f, cluster identity 4711 [ 40.956351][ T4549] tipc: New replicast peer: 255.255.255.255 [ 40.962528][ T4549] tipc: Enabled bearer , priority 10 [ 40.974841][ T4549] tipc: Disabling bearer [ 40.993860][ T4555] hugetlbfs: syz.2.406 (4555): Using mlock ulimits for SHM_HUGETLB is obsolete [ 41.016812][ T3419] IPVS: starting estimator thread 0... [ 41.060239][ T4562] bridge_slave_0: invalid flags given to default FDB implementation [ 41.092864][ T4553] loop1: detected capacity change from 0 to 8192 [ 41.104654][ T4553] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 41.112624][ T4553] FAT-fs (loop1): Filesystem has been set read-only [ 41.119360][ T4558] IPVS: using max 2592 ests per chain, 129600 per kthread [ 41.269527][ T4574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.282860][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 41.282874][ T29] audit: type=1400 audit(1757932867.252:598): avc: granted { setsecparam } for pid=4575 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 41.337620][ T29] audit: type=1400 audit(1757932867.292:599): avc: denied { write } for pid=4579 comm="syz.0.418" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.427390][ T4574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.484262][ T4574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.522165][ T4574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.552542][ T29] audit: type=1400 audit(1757932867.512:600): avc: denied { create } for pid=4590 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.571899][ T29] audit: type=1400 audit(1757932867.522:601): avc: denied { write } for pid=4590 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.591191][ T29] audit: type=1400 audit(1757932867.522:602): avc: denied { read } for pid=4590 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.646672][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.672730][ T29] audit: type=1400 audit(1757932867.642:603): avc: denied { create } for pid=4593 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 41.682837][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.692335][ T29] audit: type=1400 audit(1757932867.642:604): avc: denied { connect } for pid=4593 comm="syz.1.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 41.720020][ T29] audit: type=1400 audit(1757932867.642:605): avc: denied { ioctl } for pid=4593 comm="syz.1.424" path="socket:[8394]" dev="sockfs" ino=8394 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 41.752122][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.789996][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.808299][ T4596] random: crng reseeded on system resumption [ 41.864687][ T29] audit: type=1400 audit(1757932867.772:606): avc: denied { read append } for pid=4595 comm="syz.4.426" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.888167][ T29] audit: type=1400 audit(1757932867.772:607): avc: denied { ioctl open } for pid=4595 comm="syz.4.426" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.024438][ T4612] loop1: detected capacity change from 0 to 512 [ 42.084351][ T4612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.123812][ T4612] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.160735][ T4612] EXT4-fs (loop1): shut down requested (0) [ 42.185992][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 42.205599][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 42.215535][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 42.224582][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 42.232928][ T4628] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.233400][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 42.233418][ T4612] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 42.284562][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.340693][ T4636] __nla_validate_parse: 4 callbacks suppressed [ 42.340712][ T4636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.442'. [ 42.519388][ T4653] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 42.558083][ T4653] team0: Port device dummy0 added [ 42.565325][ T4659] program syz.3.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.610876][ T4662] SELinux: failed to load policy [ 42.635099][ T4664] loop2: detected capacity change from 0 to 512 [ 42.670363][ T4664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.683425][ T4664] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.699081][ T4664] EXT4-fs (loop2): shut down requested (0) [ 42.706851][ T4664] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 42.715881][ T4664] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 42.725088][ T4664] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 42.746059][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.914419][ T4685] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.921866][ T4685] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 43.005659][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 43.032444][ T4700] vxcan1: entered allmulticast mode [ 43.037892][ T4700] vxcan1: left allmulticast mode [ 43.192683][ T4705] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.232459][ T4705] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.296554][ T4705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.342577][ T4705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.428428][ T1674] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.458111][ T4733] loop4: detected capacity change from 0 to 512 [ 43.468838][ T1674] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.486262][ T4733] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.501794][ T1674] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.523540][ T4733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.536015][ T1674] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.540879][ T4733] EXT4-fs (loop4): 1 truncate cleaned up [ 43.555140][ T4733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.664942][ T4744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 43.680168][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.793446][ T4753] loop1: detected capacity change from 0 to 512 [ 43.810575][ T4756] loop2: detected capacity change from 0 to 128 [ 43.833752][ T4753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.856973][ T4753] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.897193][ T4756] netlink: 100 bytes leftover after parsing attributes in process `syz.2.494'. [ 43.952664][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.007373][ T4765] 9pnet_fd: Insufficient options for proto=fd [ 44.116127][ T4777] siw: device registration error -23 [ 44.211805][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 44.220764][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 44.331285][ T4796] loop3: detected capacity change from 0 to 512 [ 44.361133][ T4796] EXT4-fs: Ignoring removed i_version option [ 44.371455][ T4796] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 44.409701][ T4796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 44.444321][ T4796] System zones: 1-12 [ 44.448325][ T4796] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.477521][ T4796] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.515: invalid indirect mapped block 12 (level 1) [ 44.557214][ T4796] EXT4-fs (loop3): Remounting filesystem read-only [ 44.589706][ T4796] EXT4-fs (loop3): 1 truncate cleaned up [ 44.595867][ T4796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 44.652051][ T4796] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.515: error -117 reading directory block [ 44.692364][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 44.994036][ T4840] unsupported nla_type 52263 [ 45.140324][ T4854] Invalid logical block size (6) [ 45.206908][ T4862] netlink: 'syz.2.546': attribute type 298 has an invalid length. [ 45.328221][ T4876] loop2: detected capacity change from 0 to 128 [ 45.353517][ T4876] syz.2.552: attempt to access beyond end of device [ 45.353517][ T4876] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 45.388671][ T4876] syz.2.552: attempt to access beyond end of device [ 45.388671][ T4876] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 45.402078][ T4876] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 45.414028][ T4876] syz.2.552: attempt to access beyond end of device [ 45.414028][ T4876] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 45.427462][ T4876] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 45.437410][ T4876] syz.2.552: attempt to access beyond end of device [ 45.437410][ T4876] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 45.451379][ T4881] loop4: detected capacity change from 0 to 256 [ 45.453003][ T4876] syz.2.552: attempt to access beyond end of device [ 45.453003][ T4876] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 45.471008][ T4876] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 45.485006][ T4876] syz.2.552: attempt to access beyond end of device [ 45.485006][ T4876] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 45.498362][ T4876] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 45.515753][ T4876] syz.2.552: attempt to access beyond end of device [ 45.515753][ T4876] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 45.541522][ T4876] syz.2.552: attempt to access beyond end of device [ 45.541522][ T4876] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 45.554887][ T4876] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 45.570378][ T4876] syz.2.552: attempt to access beyond end of device [ 45.570378][ T4876] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 45.583734][ T4876] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 45.594705][ T4876] syz.2.552: attempt to access beyond end of device [ 45.594705][ T4876] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 45.608946][ T4876] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 45.634243][ T4876] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 45.649652][ T4890] netlink: 'syz.3.559': attribute type 21 has an invalid length. [ 45.650714][ T4876] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 45.666213][ T4892] loop4: detected capacity change from 0 to 1024 [ 45.673038][ T4876] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 45.674489][ T4890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.559'. [ 45.712184][ T4892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.726370][ T4716] syz.0.478 (4716) used greatest stack depth: 7528 bytes left [ 45.756187][ T4892] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 45.806113][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.887096][ T4916] loop4: detected capacity change from 0 to 512 [ 45.940756][ T4916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.564: bg 0: block 5: invalid block bitmap [ 45.964650][ T4916] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 45.975063][ T4928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.574'. [ 45.986083][ T4926] loop0: detected capacity change from 0 to 512 [ 45.992973][ T4916] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.564: invalid indirect mapped block 3 (level 2) [ 46.012192][ T4928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.574'. [ 46.027495][ T4931] loop1: detected capacity change from 0 to 1024 [ 46.035510][ T4916] EXT4-fs (loop4): 2 truncates cleaned up [ 46.037913][ T4931] EXT4-fs: Ignoring removed orlov option [ 46.047533][ T4916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.079870][ T4926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.082170][ T4931] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.108811][ T4926] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.116020][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.179622][ T4931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.216130][ T4926] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.575: lblock 23 mapped to illegal pblock 18 (length 1) [ 46.252965][ T4926] EXT4-fs (loop0): Remounting filesystem read-only [ 46.271929][ T4953] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 46.304302][ T4940] infiniband !yz!: set active [ 46.309010][ T4940] infiniband !yz!: added team_slave_0 [ 46.314978][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.324254][ T4956] loop4: detected capacity change from 0 to 1764 [ 46.326493][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.334436][ T4956] iso9660: Unknown parameter 'dmˆde' [ 46.369333][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 46.369346][ T29] audit: type=1400 audit(1757933128.335:780): avc: denied { mounton } for pid=4958 comm="syz.2.589" path="/98/file0" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.369381][ T4959] 9pnet_fd: Insufficient options for proto=fd [ 46.371913][ T4940] RDS/IB: !yz!: added [ 46.408265][ T4940] smc: adding ib device !yz! with port count 1 [ 46.416360][ T4940] smc: ib device !yz! port 1 has pnetid [ 46.417832][ T4963] netlink: 'syz.0.588': attribute type 2 has an invalid length. [ 46.495860][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 46.582785][ T29] audit: type=1400 audit(1757933128.555:781): avc: denied { relabelfrom } for pid=4977 comm="syz.1.597" name="UNIX-STREAM" dev="sockfs" ino=9276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 46.607060][ T4978] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 46.632909][ T4971] loop2: detected capacity change from 0 to 8192 [ 46.664389][ T29] audit: type=1400 audit(1757933128.575:782): avc: denied { mac_admin } for pid=4977 comm="syz.1.597" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.685339][ T29] audit: type=1400 audit(1757933128.585:783): avc: denied { relabelto } for pid=4977 comm="syz.1.597" name="UNIX-STREAM" dev="sockfs" ino=9276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:lost_found_t:s0" [ 46.713804][ T29] audit: type=1400 audit(1757933128.615:784): avc: denied { write } for pid=4980 comm="syz.0.598" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.737346][ T29] audit: type=1400 audit(1757933128.615:785): avc: denied { ioctl } for pid=4980 comm="syz.0.598" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.762849][ T29] audit: type=1400 audit(1757933128.635:786): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.777096][ T4971] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.815650][ T29] audit: type=1400 audit(1757933128.635:787): avc: denied { search } for pid=3033 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.837069][ T29] audit: type=1400 audit(1757933128.635:788): avc: denied { search } for pid=3033 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.858589][ T29] audit: type=1400 audit(1757933128.635:789): avc: denied { search } for pid=3033 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.910790][ T4984] Falling back ldisc for ttyS3. [ 46.957306][ T5002] bridge0: port 3(vlan2) entered blocking state [ 46.963724][ T5002] bridge0: port 3(vlan2) entered disabled state [ 47.022082][ T5002] vlan2: entered allmulticast mode [ 47.026449][ T5010] loop4: detected capacity change from 0 to 1764 [ 47.027279][ T5002] bridge0: entered allmulticast mode [ 47.056673][ T5002] vlan2: left allmulticast mode [ 47.061798][ T5002] bridge0: left allmulticast mode [ 47.222718][ T5037] loop4: detected capacity change from 0 to 164 [ 47.269919][ T5037] rock: directory entry would overflow storage [ 47.276175][ T5037] rock: sig=0x66, size=4, remaining=3 [ 47.495682][ T5070] __nla_validate_parse: 5 callbacks suppressed [ 47.495698][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 47.510971][ T5070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 47.520039][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 47.544253][ T5070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 47.553178][ T5070] netlink: 'syz.1.628': attribute type 6 has an invalid length. [ 47.579367][ T5077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.602812][ T5074] vhci_hcd: invalid port number 254 [ 48.022413][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 48.058117][ T5141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 48.165918][ T5158] bond0: entered promiscuous mode [ 48.171032][ T5158] bond_slave_0: entered promiscuous mode [ 48.176875][ T5158] bond_slave_1: entered promiscuous mode [ 48.223820][ T5158] bond0: left promiscuous mode [ 48.228762][ T5158] bond_slave_0: left promiscuous mode [ 48.234423][ T5158] bond_slave_1: left promiscuous mode [ 48.360317][ T5187] loop9: detected capacity change from 0 to 7 [ 48.360412][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 48.380666][ T5187] loop9: unable to read partition table [ 48.386385][ T5187] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 48.386385][ T5187] ) failed (rc=-5) [ 48.407157][ T5185] loop1: detected capacity change from 0 to 764 [ 48.434367][ T5185] rock: directory entry would overflow storage [ 48.440731][ T5185] rock: sig=0x5245, size=8, remaining=5 [ 48.532144][ T5207] loop2: detected capacity change from 0 to 512 [ 48.548878][ T5207] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.561743][ T5207] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.584503][ T5207] EXT4-fs (loop2): 1 truncate cleaned up [ 48.591540][ T5207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.760140][ T5236] macvtap1: entered allmulticast mode [ 48.765643][ T5236] veth0_macvtap: entered allmulticast mode [ 48.782861][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.799828][ T5240] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 48.977961][ T5256] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 48.994011][ T5258] loop3: detected capacity change from 0 to 1024 [ 49.025540][ T5258] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.716: Failed to acquire dquot type 0 [ 49.049684][ T5258] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.073971][ T5258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.716: corrupted inode contents [ 49.091595][ T5264] loop2: detected capacity change from 0 to 512 [ 49.113457][ T5258] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.716: mark_inode_dirty error [ 49.141562][ T5264] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.164237][ T5258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.716: corrupted inode contents [ 49.171433][ T5264] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.185190][ T5264] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.718: corrupted inode contents [ 49.211004][ T5264] EXT4-fs (loop2): Remounting filesystem read-only [ 49.217754][ T5264] EXT4-fs (loop2): 1 truncate cleaned up [ 49.222362][ T5258] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.716: mark_inode_dirty error [ 49.223976][ T1709] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.245079][ T1709] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.261387][ T5258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.716: corrupted inode contents [ 49.276842][ T1709] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.287135][ T5258] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 49.296370][ T5264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.308958][ T5258] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.716: corrupted inode contents [ 49.342200][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.349705][ T5258] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.716: mark_inode_dirty error [ 49.373347][ T5258] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 49.383068][ T5258] EXT4-fs (loop3): 1 truncate cleaned up [ 49.403759][ T5258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.441019][ T5258] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.482664][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.586722][ T5306] netlink: 'syz.0.736': attribute type 4 has an invalid length. [ 49.630908][ T5309] loop3: detected capacity change from 0 to 512 [ 49.671355][ T5309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.684310][ T5309] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.725007][ T5309] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.738: lblock 23 mapped to illegal pblock 18 (length 1) [ 49.746352][ T5309] EXT4-fs (loop3): Remounting filesystem read-only [ 49.795177][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.816515][ T5327] bond0: entered promiscuous mode [ 49.821676][ T5327] bond_slave_0: entered promiscuous mode [ 49.827507][ T5327] bond_slave_1: entered promiscuous mode [ 49.840862][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'. [ 49.849807][ T5327] bond0: left promiscuous mode [ 49.854586][ T5327] bond_slave_0: left promiscuous mode [ 49.860102][ T5327] bond_slave_1: left promiscuous mode [ 49.994890][ T5349] loop0: detected capacity change from 0 to 512 [ 50.001443][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 50.049491][ T5349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.066338][ T5349] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.090914][ T5349] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.757: corrupted inode contents [ 50.121366][ T5349] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.757: mark_inode_dirty error [ 50.145815][ T5349] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.757: corrupted inode contents [ 50.157705][ T5349] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.757: mark_inode_dirty error [ 50.179034][ T5349] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.757: Failed to acquire dquot type 1 [ 50.215657][ T5367] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.757: corrupted inode contents [ 50.248361][ T5376] loop2: detected capacity change from 0 to 128 [ 50.256599][ T5367] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.757: mark_inode_dirty error [ 50.271438][ T5367] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.757: corrupted inode contents [ 50.286246][ T5367] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.757: mark_inode_dirty error [ 50.289156][ T5376] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.297840][ T5367] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.757: Failed to acquire dquot type 1 [ 50.311893][ T5376] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.363259][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.415421][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.478721][ T5392] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.772'. [ 50.562546][ T5398] program syz.0.775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.719134][ T5409] loop1: detected capacity change from 0 to 512 [ 50.753101][ T5409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.771735][ T5409] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.823808][ T5421] loop2: detected capacity change from 0 to 1024 [ 50.832475][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.864043][ T5421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.973113][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.986048][ T5431] loop1: detected capacity change from 0 to 1024 [ 51.003658][ T5431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.097004][ T5439] loop0: detected capacity change from 0 to 512 [ 51.162896][ T5431] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 51.182679][ T5439] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.791: bg 0: block 248: padding at end of block bitmap is not set [ 51.221326][ T5439] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.791: Failed to acquire dquot type 1 [ 51.234088][ T5439] EXT4-fs (loop0): 1 truncate cleaned up [ 51.250255][ T5439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.264019][ T5439] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.284924][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.295780][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.356991][ T5452] loop0: detected capacity change from 0 to 128 [ 51.386246][ T5456] loop1: detected capacity change from 0 to 512 [ 51.423064][ T5452] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.425033][ T5456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.430937][ T5452] FAT-fs (loop0): Filesystem has been set read-only [ 51.439710][ T5452] bio_check_eod: 32 callbacks suppressed [ 51.439726][ T5452] syz.0.796: attempt to access beyond end of device [ 51.439726][ T5452] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 51.473118][ T5452] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.481004][ T5452] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.496827][ T5456] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.511986][ T5452] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.520133][ T5452] syz.0.796: attempt to access beyond end of device [ 51.520133][ T5452] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 51.533797][ T5452] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.541697][ T5452] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 51.549729][ T5452] syz.0.796: attempt to access beyond end of device [ 51.549729][ T5452] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.562981][ T5452] syz.0.796: attempt to access beyond end of device [ 51.562981][ T5452] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.576591][ T5465] syz.0.796: attempt to access beyond end of device [ 51.576591][ T5465] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.616879][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.629012][ T5469] sd 0:0:1:0: device reset [ 51.633882][ T5452] syz.0.796: attempt to access beyond end of device [ 51.633882][ T5452] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.647342][ T5465] syz.0.796: attempt to access beyond end of device [ 51.647342][ T5465] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.743454][ T5452] syz.0.796: attempt to access beyond end of device [ 51.743454][ T5452] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.772524][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 51.772537][ T29] audit: type=1400 audit(1757933133.745:921): avc: denied { setopt } for pid=5480 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.785732][ T5465] syz.0.796: attempt to access beyond end of device [ 51.785732][ T5465] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.815523][ T5484] loop4: detected capacity change from 0 to 128 [ 51.841182][ T5484] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.881352][ T29] audit: type=1400 audit(1757933133.855:922): avc: denied { create } for pid=5486 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 51.900927][ T5452] syz.0.796: attempt to access beyond end of device [ 51.900927][ T5452] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 51.915463][ T5484] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.919809][ T29] audit: type=1400 audit(1757933133.875:923): avc: denied { connect } for pid=5486 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.007376][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.085597][ T5492] SELinux: failed to load policy [ 52.157836][ T5500] capability: warning: `syz.1.819' uses deprecated v2 capabilities in a way that may be insecure [ 52.231641][ T29] audit: type=1326 audit(1757933134.205:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5503 comm="syz.3.800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x0 [ 52.278906][ T29] audit: type=1400 audit(1757933134.245:925): avc: denied { read } for pid=5507 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.307553][ T29] audit: type=1400 audit(1757933134.275:926): avc: denied { ioctl } for pid=5509 comm="syz.0.823" path="socket:[10104]" dev="sockfs" ino=10104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.355352][ T5515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.414761][ T29] audit: type=1400 audit(1757933134.385:927): avc: denied { read write } for pid=5522 comm="syz.0.828" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.439391][ T29] audit: type=1400 audit(1757933134.385:928): avc: denied { open } for pid=5522 comm="syz.0.828" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.505524][ T29] audit: type=1400 audit(1757933134.435:929): avc: denied { ioctl } for pid=5522 comm="syz.0.828" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.531605][ T29] audit: type=1326 audit(1757933134.455:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.0.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189a4ceba9 code=0x7ffc0000 [ 52.671396][ T5535] macvtap0: refused to change device tx_queue_len [ 52.728640][ T5539] loop2: detected capacity change from 0 to 512 [ 52.772205][ T5539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.785282][ T5539] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.835794][ T5551] loop0: detected capacity change from 0 to 256 [ 52.847129][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.047188][ T5563] loop0: detected capacity change from 0 to 512 [ 53.056205][ T5543] loop1: detected capacity change from 0 to 32768 [ 53.101357][ T5563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.114698][ T5563] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.174208][ T5572] loop9: detected capacity change from 0 to 7 [ 53.183235][ T5570] sg_write: data in/out 197376/1 bytes for SCSI command 0x8-- guessing data in; [ 53.183235][ T5570] program syz.3.848 not setting count and/or reply_len properly [ 53.233639][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.245904][ T5572] buffer_io_error: 25 callbacks suppressed [ 53.245915][ T5572] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.291527][ T5572] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.299382][ T5572] loop9: unable to read partition table [ 53.325313][ T5572] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 53.325313][ T5572] ) failed (rc=-5) [ 53.340286][ T5580] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.359146][ T5580] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.367149][ T5580] loop9: unable to read partition table [ 53.425752][ T5580] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 53.425752][ T5580] ) failed (rc=-5) [ 53.430616][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.499793][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.529788][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.558069][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.579960][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.597418][ T3406] kernel write not supported for file /stat (pid: 3406 comm: kworker/1:3) [ 53.608634][ T5611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5611 comm=syz.0.867 [ 53.621113][ T5611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5611 comm=syz.0.867 [ 53.712734][ T5624] netlink: 3 bytes leftover after parsing attributes in process `syz.2.873'. [ 53.731207][ T5624] batadv1: entered promiscuous mode [ 53.736446][ T5624] batadv1: entered allmulticast mode [ 53.775607][ T5633] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 53.782745][ T5633] pim6reg0: linktype set to 823 [ 53.942573][ T2994] udevd[2994]: worker [4964] terminated by signal 33 (Unknown signal 33) [ 53.957584][ T2994] udevd[2994]: worker [4964] failed while handling '/devices/virtual/block/loop2' [ 54.015883][ T5655] loop2: detected capacity change from 0 to 512 [ 54.033221][ T5655] EXT4-fs: Ignoring removed i_version option [ 54.042265][ T5655] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.886: corrupted in-inode xattr: overlapping e_value [ 54.095426][ T5655] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.886: couldn't read orphan inode 15 (err -117) [ 54.147564][ T5655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.186687][ T5655] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #2: comm syz.2.886: Directory hole found for htree leaf block 0 [ 54.267829][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.278005][ T5668] loop0: detected capacity change from 0 to 32768 [ 54.310336][ T5668] loop0: p1 p2 p3 < p5 p6 p7 > [ 54.320454][ T5668] loop0: p2 size 16775168 extends beyond EOD, truncated [ 54.332155][ T5668] loop0: p5 start 4294970168 is beyond EOD, truncated [ 54.422713][ T5695] loop1: detected capacity change from 0 to 1024 [ 54.438396][ T5695] EXT4-fs: Ignoring removed nobh option [ 54.444100][ T5695] EXT4-fs: Ignoring removed bh option [ 54.486084][ T5695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.503492][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 54.514568][ T4507] udevd[4507]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 54.515709][ T3514] udevd[3514]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 54.528042][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.551897][ T3624] udevd[3624]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 54.613467][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.683779][ T5712] loop4: detected capacity change from 0 to 8192 [ 54.860506][ T5737] loop0: detected capacity change from 0 to 128 [ 54.867331][ T5728] pim6reg1: entered promiscuous mode [ 54.998287][ T10] IPVS: starting estimator thread 0... [ 55.040390][ T5755] netlink: 'syz.1.932': attribute type 4 has an invalid length. [ 55.086632][ T5760] loop1: detected capacity change from 0 to 1024 [ 55.099722][ T5747] IPVS: using max 2784 ests per chain, 139200 per kthread [ 55.196609][ T5774] loop4: detected capacity change from 0 to 1024 [ 55.215086][ T5774] journal_path: Non-blockdev passed as './file1' [ 55.221617][ T5774] EXT4-fs: error: could not find journal device path [ 55.268216][ T5783] loop0: detected capacity change from 0 to 256 [ 55.294687][ T5783] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.352760][ T5795] netlink: 'syz.4.950': attribute type 6 has an invalid length. [ 55.373324][ T5796] loop1: detected capacity change from 0 to 512 [ 55.375705][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 55.404920][ T5796] EXT4-fs: Ignoring removed nobh option [ 55.589927][ T2994] udevd[2994]: worker [3296] terminated by signal 33 (Unknown signal 33) [ 55.604294][ T5820] SELinux: failed to load policy [ 55.627476][ T2994] udevd[2994]: worker [3296] failed while handling '/devices/virtual/block/loop4' [ 55.654392][ T5831] loop3: detected capacity change from 0 to 1024 [ 55.663077][ T2994] udevd[2994]: worker [3293] terminated by signal 33 (Unknown signal 33) [ 55.683621][ T5831] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 0 [ 55.718703][ T5831] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 55.748843][ T5831] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents [ 55.809408][ T5831] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm gtp: mark_inode_dirty error [ 55.870246][ T5831] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents [ 55.894139][ T5831] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm gtp: mark_inode_dirty error [ 55.929705][ T5831] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents [ 55.966569][ T5831] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 55.988065][ T5853] program syz.2.977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.998907][ T5831] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm gtp: corrupted inode contents [ 56.040980][ T5831] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm gtp: mark_inode_dirty error [ 56.053385][ T5859] loop1: detected capacity change from 0 to 164 [ 56.062903][ T5831] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 56.074576][ T5831] EXT4-fs (loop3): 1 truncate cleaned up [ 56.111345][ T5859] rock: directory entry would overflow storage [ 56.117533][ T5859] rock: sig=0x4f50, size=4, remaining=3 [ 56.123279][ T5859] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 56.145519][ T5867] loop4: detected capacity change from 0 to 256 [ 56.280259][ T5886] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 56.288066][ T5886] team0: Device dummy0 is up. Set it down before adding it as a team port [ 56.377591][ T5897] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.997' sets config #-1 [ 56.561896][ T5924] loop1: detected capacity change from 0 to 512 [ 56.660000][ T5924] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.679056][ T5924] EXT4-fs (loop1): mount failed [ 56.709624][ T5947] 9pnet_fd: Insufficient options for proto=fd [ 56.722935][ T5948] bpf: Bad value for 'uid' [ 56.766342][ T5950] program syz.3.1022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.805523][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 56.805537][ T29] audit: type=1400 audit(1757933138.775:1050): avc: denied { read write } for pid=5958 comm="syz.0.1026" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.839603][ T29] audit: type=1400 audit(1757933138.775:1051): avc: denied { open } for pid=5958 comm="syz.0.1026" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.865276][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 56.925700][ T29] audit: type=1400 audit(1757933138.885:1052): avc: denied { create } for pid=5967 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.945372][ T29] audit: type=1400 audit(1757933138.885:1053): avc: denied { setopt } for pid=5967 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.964878][ T29] audit: type=1400 audit(1757933138.885:1054): avc: denied { connect } for pid=5967 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.005392][ T29] audit: type=1400 audit(1757933138.975:1055): avc: denied { read write } for pid=5974 comm="syz.0.1035" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.029117][ T29] audit: type=1400 audit(1757933138.975:1056): avc: denied { open } for pid=5974 comm="syz.0.1035" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.077875][ T29] audit: type=1400 audit(1757933139.045:1057): avc: denied { setcheckreqprot } for pid=5982 comm="syz.2.1038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.160778][ T29] audit: type=1400 audit(1757933139.135:1058): avc: denied { getopt } for pid=5992 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.286738][ T29] audit: type=1400 audit(1757933139.255:1059): avc: denied { execmem } for pid=6008 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 57.391495][ T6007] loop0: detected capacity change from 0 to 8192 [ 57.476575][ T6027] loop2: detected capacity change from 0 to 512 [ 57.532315][ T6027] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.652446][ T6043] loop2: detected capacity change from 0 to 128 [ 57.699857][ T6043] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 57.707995][ T6043] FAT-fs (loop2): Filesystem has been set read-only [ 57.741719][ T6043] bio_check_eod: 6201 callbacks suppressed [ 57.741732][ T6043] syz.2.1060: attempt to access beyond end of device [ 57.741732][ T6043] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 57.778308][ T6043] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 57.786509][ T6043] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 57.870390][ T6043] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 57.889840][ T6043] syz.2.1060: attempt to access beyond end of device [ 57.889840][ T6043] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 57.931015][ T6048] syz.2.1060: attempt to access beyond end of device [ 57.931015][ T6048] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.982286][ T6043] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 57.990174][ T6043] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 58.027782][ T6048] syz.2.1060: attempt to access beyond end of device [ 58.027782][ T6048] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.063218][ T6043] syz.2.1060: attempt to access beyond end of device [ 58.063218][ T6043] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.098773][ T6048] syz.2.1060: attempt to access beyond end of device [ 58.098773][ T6048] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.140776][ T6043] syz.2.1060: attempt to access beyond end of device [ 58.140776][ T6043] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.186178][ T6048] syz.2.1060: attempt to access beyond end of device [ 58.186178][ T6048] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.233088][ T6043] syz.2.1060: attempt to access beyond end of device [ 58.233088][ T6043] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.266740][ T6043] syz.2.1060: attempt to access beyond end of device [ 58.266740][ T6043] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.613350][ T6078] SELinux: policydb version 0 does not match my version range 15-35 [ 58.645321][ T6078] SELinux: failed to load policy [ 58.707515][ T6082] process 'syz.1.1080' launched '/dev/fd/4' with NULL argv: empty string added [ 59.152735][ T6136] loop0: detected capacity change from 0 to 1024 [ 59.179978][ T6143] loop3: detected capacity change from 0 to 512 [ 59.202397][ T6143] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.220411][ T6143] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1109: corrupted in-inode xattr: overlapping e_value [ 59.247561][ T6143] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1109: couldn't read orphan inode 15 (err -117) [ 59.354956][ T6137] loop1: detected capacity change from 0 to 8192 [ 59.622242][ T6177] loop1: detected capacity change from 0 to 512 [ 59.657567][ T6179] loop3: detected capacity change from 0 to 1024 [ 59.713151][ T6179] SELinux: Context @ is not valid (left unmapped). [ 59.954656][ T6212] loop4: detected capacity change from 0 to 128 [ 60.002727][ T6212] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.299770][ T6249] loop4: detected capacity change from 0 to 512 [ 60.333893][ T6249] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.352493][ T6249] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 60.466182][ T6267] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 60.474748][ T6267] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 60.648012][ T6287] loop0: detected capacity change from 0 to 1024 [ 60.659003][ T6287] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.671888][ T6287] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 60.687036][ T6287] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.698205][ T6287] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.1173: Invalid inode table block 0 in block_group 0 [ 60.727686][ T6287] EXT4-fs (loop0): Remounting filesystem read-only [ 60.741391][ T6287] EXT4-fs (loop0): 1 truncate cleaned up [ 60.757571][ T6287] EXT4-fs (loop0): shut down requested (1) [ 60.791313][ T6295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6295 comm=syz.0.1176 [ 60.871267][ T6300] loop0: detected capacity change from 0 to 1024 [ 60.892920][ T6300] EXT4-fs: Ignoring removed orlov option [ 60.898728][ T6300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.141742][ T6329] loop2: detected capacity change from 0 to 512 [ 61.238386][ T6339] loop4: detected capacity change from 0 to 512 [ 61.262727][ T6339] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.270457][ T2994] udevd[2994]: worker [6180] terminated by signal 33 (Unknown signal 33) [ 61.283997][ T2994] udevd[2994]: worker [6180] failed while handling '/devices/virtual/block/loop4' [ 61.301259][ T6339] EXT4-fs warning (device loop4): ext4_xattr_inode_get:556: inode #11: comm syz.4.1194: EA inode hash validation failed [ 61.335405][ T6339] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.348962][ T6339] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.1194: corrupted inode contents [ 61.367739][ T6339] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.1194: mark_inode_dirty error [ 61.409422][ T6339] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.1194: corrupted inode contents [ 61.425854][ T6354] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1200'. [ 61.469785][ T6339] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #15: comm syz.4.1194: mark_inode_dirty error [ 61.491770][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.499136][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.511174][ T6339] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #15: comm syz.4.1194: mark inode dirty (error -117) [ 61.535898][ T6339] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 61.552407][ T6339] EXT4-fs (loop4): 1 orphan inode deleted [ 61.643064][ T6374] loop2: detected capacity change from 0 to 256 [ 61.670071][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.711715][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.753262][ T6381] loop1: detected capacity change from 0 to 512 [ 61.769962][ T6381] msdos: Bad value for 'uid' [ 61.769981][ T6381] msdos: Bad value for 'uid' [ 61.809325][ T170] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.817959][ T170] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.855797][ T170] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.864986][ T170] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.899444][ T170] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.908184][ T170] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.916004][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 61.916020][ T29] audit: type=1326 audit(1757933143.885:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.2.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7a620eba9 code=0x0 [ 61.959078][ T6399] loop4: detected capacity change from 0 to 1024 [ 61.967396][ T29] audit: type=1326 audit(1757933143.925:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 61.990862][ T29] audit: type=1326 audit(1757933143.925:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 62.014453][ T29] audit: type=1326 audit(1757933143.925:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 62.037887][ T29] audit: type=1326 audit(1757933143.925:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 62.049130][ T1675] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.061487][ T29] audit: type=1326 audit(1757933143.925:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 62.061520][ T29] audit: type=1326 audit(1757933143.925:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 62.061547][ T29] audit: type=1326 audit(1757933143.925:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 62.061591][ T29] audit: type=1326 audit(1757933143.925:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.3.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 62.166648][ T1675] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 62.191438][ T6407] loop1: detected capacity change from 0 to 164 [ 62.208019][ T6399] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.232304][ T6408] SELinux: failed to load policy [ 62.264983][ T6399] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 62.276413][ T6413] loop1: detected capacity change from 0 to 512 [ 62.277360][ T6399] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.291338][ T6399] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.1222: Invalid inode table block 0 in block_group 0 [ 62.302034][ T29] audit: type=1326 audit(1757933144.275:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189a4ceba9 code=0x7ffc0000 [ 62.325199][ T6399] EXT4-fs (loop4): Remounting filesystem read-only [ 62.338633][ T6399] EXT4-fs (loop4): 1 truncate cleaned up [ 62.381262][ T6413] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.405145][ T6413] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #12: comm syz.1.1228: directory missing '.' [ 62.405441][ T6425] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 62.433709][ T6399] EXT4-fs (loop4): shut down requested (1) [ 62.516288][ T6435] loop0: detected capacity change from 0 to 1024 [ 62.547397][ T6435] EXT4-fs: inline encryption not supported [ 62.555150][ T6439] loop3: detected capacity change from 0 to 164 [ 62.564260][ T6437] loop1: detected capacity change from 0 to 512 [ 62.571277][ T6435] EXT4-fs: Ignoring removed bh option [ 62.596293][ T6441] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 62.596293][ T6441] program syz.4.1240 not setting count and/or reply_len properly [ 62.639657][ T6435] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 62.655295][ T6435] EXT4-fs (loop0): Remounting filesystem read-only [ 62.662579][ T6437] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1249: Failed to acquire dquot type 0 [ 62.677444][ T6437] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 62.747150][ T3307] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /233/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 62.901530][ T6475] SELinux: security policydb version 17 (MLS) not backwards compatible [ 62.910050][ T6475] SELinux: failed to load policy [ 62.964191][ T6483] loop0: detected capacity change from 0 to 128 [ 62.977507][ T1674] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.058837][ T1674] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.095691][ T6494] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1269'. [ 63.105243][ T6498] netlink: 'syz.3.1268': attribute type 14 has an invalid length. [ 63.134687][ T1674] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.206919][ T1674] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.330952][ T1674] bridge_slave_1: left allmulticast mode [ 63.336618][ T1674] bridge_slave_1: left promiscuous mode [ 63.342326][ T1674] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.359141][ T1674] bridge_slave_0: left allmulticast mode [ 63.365028][ T1674] bridge_slave_0: left promiscuous mode [ 63.370976][ T1674] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.493166][ T1674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.513719][ T1674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.524566][ T1674] bond0 (unregistering): Released all slaves [ 63.535912][ T1674] bond1 (unregistering): Released all slaves [ 63.585159][ T6545] netlink: 'syz.4.1286': attribute type 6 has an invalid length. [ 63.697756][ T1674] hsr_slave_0: left promiscuous mode [ 63.713078][ T1674] hsr_slave_1: left promiscuous mode [ 63.720070][ T1674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.727677][ T1674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.751008][ T1674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.758705][ T1674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.791543][ T1674] veth0_macvtap: left allmulticast mode [ 63.797407][ T1674] veth1_macvtap: left promiscuous mode [ 63.813307][ T1674] veth0_macvtap: left promiscuous mode [ 63.819123][ T1674] veth1_vlan: left promiscuous mode [ 63.847529][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 63.849107][ T1674] veth0_vlan: left promiscuous mode [ 63.952626][ T1674] team0 (unregistering): Port device team_slave_1 removed [ 63.963350][ T1674] team0 (unregistering): Port device team_slave_0 removed [ 64.132594][ T6501] chnl_net:caif_netlink_parms(): no params data found [ 64.195449][ T6593] loop3: detected capacity change from 0 to 128 [ 64.230053][ T6593] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 64.238226][ T6593] FAT-fs (loop3): Filesystem has been set read-only [ 64.252377][ T6601] loop0: detected capacity change from 0 to 1024 [ 64.288201][ T6593] bio_check_eod: 5478 callbacks suppressed [ 64.288217][ T6593] syz.3.1296: attempt to access beyond end of device [ 64.288217][ T6593] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.300244][ T6601] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.309990][ T6593] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 64.326279][ T6593] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 64.336509][ T6593] syz.3.1296: attempt to access beyond end of device [ 64.336509][ T6593] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.355899][ T6601] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1298: lblock 0 mapped to illegal pblock 0 (length 6) [ 64.376357][ T6593] syz.3.1296: attempt to access beyond end of device [ 64.376357][ T6593] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.376452][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.394413][ T6601] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1298: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 64.397391][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.440537][ T6593] syz.3.1296: attempt to access beyond end of device [ 64.440537][ T6593] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.479859][ T6614] syz.3.1296: attempt to access beyond end of device [ 64.479859][ T6614] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.499732][ T6501] bridge_slave_0: entered allmulticast mode [ 64.507006][ T6501] bridge_slave_0: entered promiscuous mode [ 64.513966][ T6614] syz.3.1296: attempt to access beyond end of device [ 64.513966][ T6614] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.528425][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.535726][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.552844][ T6593] syz.3.1296: attempt to access beyond end of device [ 64.552844][ T6593] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.569812][ T6614] syz.3.1296: attempt to access beyond end of device [ 64.569812][ T6614] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.583214][ T6501] bridge_slave_1: entered allmulticast mode [ 64.583899][ T6501] bridge_slave_1: entered promiscuous mode [ 64.596599][ T6614] syz.3.1296: attempt to access beyond end of device [ 64.596599][ T6614] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.613762][ T6627] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 64.631059][ T6593] syz.3.1296: attempt to access beyond end of device [ 64.631059][ T6593] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.662518][ T6501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.684427][ T6501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.729054][ T6501] team0: Port device team_slave_0 added [ 64.743565][ T6501] team0: Port device team_slave_1 added [ 64.789177][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.796158][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.822170][ T6501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.851165][ T6501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.858108][ T6501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.884116][ T6501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.996256][ T6501] hsr_slave_0: entered promiscuous mode [ 65.020278][ T6501] hsr_slave_1: entered promiscuous mode [ 65.041118][ T6501] debugfs: 'hsr0' already exists in 'hsr' [ 65.047077][ T6501] Cannot create hsr debugfs directory [ 65.266611][ T6501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.277980][ T6501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.312641][ T6501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.332667][ T6501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.399208][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.420733][ T6501] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.436483][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.443957][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.478106][ T1674] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.485461][ T1674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.523670][ T6704] loop4: detected capacity change from 0 to 1024 [ 65.579113][ T6707] loop2: detected capacity change from 0 to 764 [ 65.594547][ T6707] rock: directory entry would overflow storage [ 65.600813][ T6707] rock: sig=0x4654, size=5, remaining=4 [ 65.668161][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.707897][ T6717] loop2: detected capacity change from 0 to 764 [ 65.765964][ T6725] loop2: detected capacity change from 0 to 512 [ 65.802205][ T6725] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.815058][ T6725] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.831149][ T6734] netlink: 'syz.4.1331': attribute type 21 has an invalid length. [ 65.844113][ T6725] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1329: corrupted inode contents [ 65.864903][ T6725] EXT4-fs (loop2): Remounting filesystem read-only [ 65.876899][ T6725] EXT4-fs (loop2): 1 truncate cleaned up [ 65.892009][ T1674] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.902547][ T1674] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.922319][ T6739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1332'. [ 65.931568][ T6739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1332'. [ 65.947274][ T1674] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.984635][ T6743] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1333'. [ 66.030620][ T6501] veth0_vlan: entered promiscuous mode [ 66.052704][ T6501] veth1_vlan: entered promiscuous mode [ 66.078105][ T6501] veth0_macvtap: entered promiscuous mode [ 66.089458][ T6501] veth1_macvtap: entered promiscuous mode [ 66.114728][ T6753] program syz.3.1337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.121846][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.139230][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.156896][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.171226][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.203193][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.248794][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.293565][ T6767] loop5: detected capacity change from 0 to 256 [ 66.311948][ T6769] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6769 comm=syz.3.1343 [ 66.417316][ T6784] loop2: detected capacity change from 0 to 512 [ 66.471453][ T6791] loop4: detected capacity change from 0 to 128 [ 66.485931][ T6792] loop3: detected capacity change from 0 to 1024 [ 66.512382][ T6796] loop2: detected capacity change from 0 to 128 [ 66.519903][ T6792] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.549296][ T6792] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.1352: lblock 0 mapped to illegal pblock 0 (length 6) [ 66.598717][ T6802] loop5: detected capacity change from 0 to 1024 [ 66.605008][ T6792] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1352: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 66.663878][ T6802] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.704970][ T6802] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 66.734395][ T6802] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 66.746822][ T6802] EXT4-fs (loop5): This should not happen!! Data will be lost [ 66.746822][ T6802] [ 66.756500][ T6802] EXT4-fs (loop5): Total free blocks count 0 [ 66.762584][ T6802] EXT4-fs (loop5): Free/Dirty block details [ 66.768579][ T6802] EXT4-fs (loop5): free_blocks=4293918720 [ 66.774328][ T6802] EXT4-fs (loop5): dirty_blocks=16 [ 66.779446][ T6802] EXT4-fs (loop5): Block reservation details [ 66.785459][ T6802] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 66.795408][ T6821] loop2: detected capacity change from 0 to 128 [ 66.834976][ T6821] FAT-fs (loop2): Directory bread(block 32) failed [ 66.845637][ T6821] FAT-fs (loop2): Directory bread(block 33) failed [ 66.879710][ T6821] FAT-fs (loop2): Directory bread(block 34) failed [ 66.913576][ T6821] FAT-fs (loop2): Directory bread(block 35) failed [ 66.926136][ T6821] FAT-fs (loop2): Directory bread(block 36) failed [ 66.942305][ T6821] FAT-fs (loop2): Directory bread(block 37) failed [ 66.956730][ T6821] FAT-fs (loop2): Directory bread(block 38) failed [ 66.967315][ T6821] FAT-fs (loop2): Directory bread(block 39) failed [ 66.974435][ T6840] futex_wake_op: syz.3.1374 tries to shift op by -1; fix this program [ 66.985901][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.993194][ T6821] FAT-fs (loop2): Directory bread(block 40) failed [ 67.000203][ T6821] FAT-fs (loop2): Directory bread(block 41) failed [ 67.058636][ T6821] Buffer I/O error on dev loop2, logical block 1028, async page read [ 67.066899][ T6821] Buffer I/O error on dev loop2, logical block 41991, async page read [ 67.075197][ T6821] FAT-fs (loop2): Filesystem has been set read-only [ 67.090743][ T6821] Buffer I/O error on dev loop2, logical block 1028, async page read [ 67.104053][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.114343][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.119809][ T6821] Buffer I/O error on dev loop2, logical block 41991, async page read [ 67.174957][ T1674] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.183865][ T1674] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.209600][ T1674] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.218498][ T1674] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.274634][ T1674] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.283588][ T1674] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.307502][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'. [ 67.335460][ T1674] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.344504][ T1674] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.353521][ T6875] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1388'. [ 67.388912][ T6881] netlink: 'syz.0.1393': attribute type 3 has an invalid length. [ 67.396693][ T6881] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1393'. [ 67.431731][ T6888] loop4: detected capacity change from 0 to 128 [ 67.519457][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 67.519472][ T29] audit: type=1400 audit(1757933149.485:1224): avc: denied { bind } for pid=6894 comm="syz.4.1399" lport=32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.558864][ T29] audit: type=1400 audit(1757933149.485:1225): avc: denied { node_bind } for pid=6894 comm="syz.4.1399" saddr=fe88::5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 67.580176][ T29] audit: type=1400 audit(1757933149.525:1226): avc: denied { read } for pid=6896 comm="syz.2.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.614557][ T6900] loop4: detected capacity change from 0 to 512 [ 67.690984][ T6900] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1402: casefold flag without casefold feature [ 67.711338][ T29] audit: type=1400 audit(1757933149.635:1227): avc: granted { setsecparam } for pid=6902 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 67.733145][ T6900] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1402: couldn't read orphan inode 15 (err -117) [ 67.757433][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 67.819609][ T29] audit: type=1326 audit(1757933149.785:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a620eba9 code=0x7ffc0000 [ 67.892828][ T3304] EXT4-fs unmount: 44 callbacks suppressed [ 67.892842][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.975710][ T29] audit: type=1326 audit(1757933149.855:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7a620eba9 code=0x7ffc0000 [ 67.999238][ T29] audit: type=1326 audit(1757933149.855:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a620eba9 code=0x7ffc0000 [ 68.022698][ T29] audit: type=1326 audit(1757933149.885:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7a620eba9 code=0x7ffc0000 [ 68.046184][ T29] audit: type=1326 audit(1757933149.885:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a620eba9 code=0x7ffc0000 [ 68.069706][ T29] audit: type=1326 audit(1757933149.885:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6915 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fb7a620eba9 code=0x7ffc0000 [ 68.140007][ T6933] loop2: detected capacity change from 0 to 1024 [ 68.157903][ T6933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.203406][ T6942] loop4: detected capacity change from 0 to 512 [ 68.232503][ T6933] EXT4-fs warning (device loop2): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 68.267425][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.298647][ T6949] tmpfs: Unknown parameter 'mpo' [ 68.425796][ T6965] loop4: detected capacity change from 0 to 128 [ 68.466603][ T6965] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 68.497943][ T6965] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 68.530414][ T6965] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 68.552971][ T6965] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 68.577948][ T6965] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 68.591801][ T6965] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 68.821849][ T7022] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1455'. [ 68.896963][ T7030] loop2: detected capacity change from 0 to 512 [ 68.949958][ T7030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.005549][ T7030] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.045232][ T7030] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.1459: lblock 23 mapped to illegal pblock 18 (length 1) [ 69.081730][ T7030] EXT4-fs (loop2): Remounting filesystem read-only [ 69.109978][ T7043] loop3: detected capacity change from 0 to 128 [ 69.183255][ T170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 69.224402][ T170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 69.461952][ T170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 69.550540][ T170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 69.591480][ T7072] netlink: 'syz.3.1476': attribute type 15 has an invalid length. [ 69.656875][ T170] bridge_slave_1: left promiscuous mode [ 69.662644][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.680086][ T170] bridge_slave_0: left allmulticast mode [ 69.685822][ T170] bridge_slave_0: left promiscuous mode [ 69.691529][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.742636][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.760607][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.773707][ T170] bond0 (unregistering): Released all slaves [ 69.785281][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.838470][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 69.986974][ T170] hsr_slave_0: left promiscuous mode [ 70.024309][ T170] hsr_slave_1: left promiscuous mode [ 70.112002][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.129630][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.203195][ T170] team0 (unregistering): Port device team_slave_1 removed [ 70.217495][ T170] team0 (unregistering): Port device team_slave_0 removed [ 70.301643][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.308879][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.354000][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.358853][ T7135] loop0: detected capacity change from 0 to 512 [ 70.365717][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.370488][ T7135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.404627][ T7135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.417278][ T7135] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.448372][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.472078][ T1709] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.481071][ T1709] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.497135][ T1709] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.506220][ T1709] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.523385][ T7140] 9pnet_fd: Insufficient options for proto=fd [ 70.550028][ T1709] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.559043][ T1709] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.579110][ T1709] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.588071][ T1709] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.627101][ T7051] chnl_net:caif_netlink_parms(): no params data found [ 70.734253][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.741425][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.782133][ T7051] bridge_slave_0: entered allmulticast mode [ 70.800820][ T7182] loop3: detected capacity change from 0 to 1024 [ 70.816785][ T7051] bridge_slave_0: entered promiscuous mode [ 70.831859][ T7182] EXT4-fs: Ignoring removed nobh option [ 70.838883][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.846021][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.875519][ T7051] bridge_slave_1: entered allmulticast mode [ 70.882712][ T7051] bridge_slave_1: entered promiscuous mode [ 70.891367][ T7182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.932674][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.953324][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.974354][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.992418][ T7051] team0: Port device team_slave_0 added [ 71.018253][ T7051] team0: Port device team_slave_1 added [ 71.089106][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.096215][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.122233][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.140378][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.147354][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.173332][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.275568][ T7051] hsr_slave_0: entered promiscuous mode [ 71.290039][ T7051] hsr_slave_1: entered promiscuous mode [ 71.403094][ T7244] Falling back ldisc for ptm0. [ 71.475326][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1526'. [ 71.551332][ T7051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.577911][ T7051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.611773][ T7051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.629190][ T7051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.754177][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.807835][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.850566][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.857645][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.899994][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.907094][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.995698][ T7051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.006126][ T7051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.134783][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.220044][ T7319] netlink: 'syz.5.1542': attribute type 4 has an invalid length. [ 72.387919][ T4507] printk: udevd: 1 output lines suppressed due to ratelimiting [ 72.445866][ T7051] veth0_vlan: entered promiscuous mode [ 72.472203][ T7346] loop5: detected capacity change from 0 to 512 [ 72.478095][ T7051] veth1_vlan: entered promiscuous mode [ 72.587870][ T7051] veth0_macvtap: entered promiscuous mode [ 72.608976][ T7051] veth1_macvtap: entered promiscuous mode [ 72.632647][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.653022][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.680931][ T170] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.710097][ T170] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.739521][ T170] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.748401][ T170] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.890394][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 72.890408][ T29] audit: type=1401 audit(1757933154.865:1274): op=setxattr invalid_context="" [ 72.914539][ T3462] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.973567][ T3462] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.051477][ T3462] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.079239][ T7397] atomic_op ffff88811ca39528 conn xmit_atomic 0000000000000000 [ 73.122381][ T7401] 9pnet: Unknown protocol version 9 [ 73.129321][ T29] audit: type=1400 audit(1757933155.095:1275): avc: denied { mounton } for pid=7400 comm="syz.6.1572" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 73.177715][ T3462] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.229314][ T7415] sctp: [Deprecated]: syz.5.1578 (pid 7415) Use of int in max_burst socket option. [ 73.229314][ T7415] Use struct sctp_assoc_value instead [ 73.307706][ T7427] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 73.322116][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.329310][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.338421][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 73.350440][ T7368] chnl_net:caif_netlink_parms(): no params data found [ 73.372990][ T3462] bridge_slave_1: left allmulticast mode [ 73.378662][ T3462] bridge_slave_1: left promiscuous mode [ 73.384615][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.387784][ T7433] loop3: detected capacity change from 0 to 2048 [ 73.400682][ T7433] EXT4-fs: Ignoring removed orlov option [ 73.407229][ T3462] bridge_slave_0: left allmulticast mode [ 73.413047][ T3462] bridge_slave_0: left promiscuous mode [ 73.418823][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.434044][ T7433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.466959][ T29] audit: type=1400 audit(1757933155.435:1276): avc: denied { ioctl } for pid=7432 comm="syz.3.1586" path="/303/file1/bus" dev="loop3" ino=18 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.491568][ T7445] loop6: detected capacity change from 0 to 164 [ 73.500829][ T7445] Unable to read rock-ridge attributes [ 73.508766][ T7445] Unable to read rock-ridge attributes [ 73.521636][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.531246][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.546390][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.567763][ T3462] bond0 (unregistering): Released all slaves [ 73.619116][ T7447] pimreg1: tun_chr_ioctl cmd 1074025677 [ 73.633709][ T7447] pimreg1: linktype set to 1 [ 73.664602][ T7465] program syz.3.1597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.680934][ T7464] loop6: detected capacity change from 0 to 256 [ 73.698333][ T3462] hsr_slave_0: left promiscuous mode [ 73.704383][ T3462] hsr_slave_1: left promiscuous mode [ 73.710020][ T7464] FAT-fs (loop6): Directory bread(block 64) failed [ 73.717081][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.724494][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.731950][ T7464] FAT-fs (loop6): Directory bread(block 65) failed [ 73.738497][ T7464] FAT-fs (loop6): Directory bread(block 66) failed [ 73.745967][ T7464] FAT-fs (loop6): Directory bread(block 67) failed [ 73.753989][ T7464] FAT-fs (loop6): Directory bread(block 68) failed [ 73.754502][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.768044][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.776169][ T7464] FAT-fs (loop6): Directory bread(block 69) failed [ 73.782882][ T7464] FAT-fs (loop6): Directory bread(block 70) failed [ 73.789482][ T7464] FAT-fs (loop6): Directory bread(block 71) failed [ 73.789791][ T3462] veth1_macvtap: left promiscuous mode [ 73.796560][ T7464] FAT-fs (loop6): Directory bread(block 72) failed [ 73.809685][ T7464] FAT-fs (loop6): Directory bread(block 73) failed [ 73.817881][ T3462] veth0_macvtap: left promiscuous mode [ 73.827176][ T3462] veth1_vlan: left promiscuous mode [ 73.837022][ T3462] veth0_vlan: left promiscuous mode [ 73.860888][ T7477] loop5: detected capacity change from 0 to 256 [ 73.888839][ T7477] FAT-fs (loop5): Directory bread(block 64) failed [ 73.898864][ T7477] FAT-fs (loop5): Directory bread(block 65) failed [ 73.929893][ T29] audit: type=1326 audit(1757933155.895:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 73.953531][ T29] audit: type=1326 audit(1757933155.895:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 73.956377][ T7477] FAT-fs (loop5): Directory bread(block 66) failed [ 73.977092][ T29] audit: type=1326 audit(1757933155.895:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 74.007071][ T29] audit: type=1326 audit(1757933155.895:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 74.030719][ T29] audit: type=1326 audit(1757933155.895:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7480 comm="syz.3.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2da35eba9 code=0x7ffc0000 [ 74.032707][ T7477] FAT-fs (loop5): Directory bread(block 67) failed [ 74.072211][ T29] audit: type=1400 audit(1757933156.005:1282): avc: denied { map } for pid=7484 comm="syz.0.1608" path="socket:[17952]" dev="sockfs" ino=17952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 74.081781][ T7477] FAT-fs (loop5): Directory bread(block 68) failed [ 74.106812][ T7477] FAT-fs (loop5): Directory bread(block 69) failed [ 74.113640][ T7477] FAT-fs (loop5): Directory bread(block 70) failed [ 74.120337][ T7477] FAT-fs (loop5): Directory bread(block 71) failed [ 74.127057][ T7477] FAT-fs (loop5): Directory bread(block 72) failed [ 74.133793][ T7477] FAT-fs (loop5): Directory bread(block 73) failed [ 74.155475][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 74.166814][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 74.214746][ T3462] team0 (unregistering): Port device dummy0 removed [ 74.229449][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.236611][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.246692][ T7368] bridge_slave_0: entered allmulticast mode [ 74.251973][ T7497] loop5: detected capacity change from 0 to 512 [ 74.254879][ T7368] bridge_slave_0: entered promiscuous mode [ 74.277690][ T3398] infiniband syz1: ib_query_port failed (-19) [ 74.352082][ T7510] Invalid ELF header magic: != ELF [ 74.352303][ T29] audit: type=1400 audit(1757933156.325:1283): avc: denied { module_load } for pid=7509 comm="syz.3.1620" path="/sys/kernel/notes" dev="sysfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 74.387547][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.396819][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.428904][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.436061][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.445201][ T7368] bridge_slave_1: entered allmulticast mode [ 74.452415][ T7368] bridge_slave_1: entered promiscuous mode [ 74.470739][ T1674] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.479902][ T1674] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.490654][ T7368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.501834][ T7368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.511231][ T170] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.520250][ T170] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.556868][ T170] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.565936][ T170] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.575544][ T7368] team0: Port device team_slave_0 added [ 74.582463][ T7368] team0: Port device team_slave_1 added [ 74.615164][ T170] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.624172][ T170] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.666277][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.673302][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.699609][ T7368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.713313][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.720391][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.746355][ T7368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.837325][ T7533] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1630'. [ 74.855273][ T7368] hsr_slave_0: entered promiscuous mode [ 74.865078][ T7368] hsr_slave_1: entered promiscuous mode [ 74.866915][ T7535] IPVS: persistence engine module ip_vs_pe_ not found [ 74.872652][ T7368] debugfs: 'hsr0' already exists in 'hsr' [ 74.883486][ T7368] Cannot create hsr debugfs directory [ 75.178748][ T7553] loop0: detected capacity change from 0 to 512 [ 75.236956][ T7553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.250719][ T7553] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.265747][ T7368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.284981][ T7368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.294797][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.317409][ T7368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.338157][ T7368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.357506][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1643'. [ 75.373189][ T7574] loop3: detected capacity change from 0 to 512 [ 75.394962][ T7574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.406875][ T7576] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 75.413549][ T7576] syzkaller0: linktype set to 800 [ 75.438310][ T7587] loop0: detected capacity change from 0 to 1024 [ 75.457537][ T7587] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 75.467399][ T7587] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 75.469713][ T7368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.479825][ T7574] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.517977][ T7368] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.519739][ T7587] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.534782][ T7574] EXT4-fs (loop3): 1 truncate cleaned up [ 75.548669][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.565564][ T7601] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1653'. [ 75.568737][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.581820][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.594131][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.601222][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.601289][ T7587] EXT4-fs error (device loop0): ext4_get_journal_inode:5800: inode #32: comm syz.0.1650: iget: special inode unallocated [ 75.631174][ T7368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.641655][ T7368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.659967][ T7587] EXT4-fs (loop0): no journal found [ 75.665204][ T7587] EXT4-fs (loop0): can't get journal size [ 75.713021][ T7587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.792119][ T7587] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.0.1650: path /336/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 75.884636][ T7368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.937736][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.960526][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.012137][ T7368] veth0_vlan: entered promiscuous mode [ 76.042447][ T7368] veth1_vlan: entered promiscuous mode [ 76.082128][ T7368] veth0_macvtap: entered promiscuous mode [ 76.101107][ T7368] veth1_macvtap: entered promiscuous mode [ 76.130798][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.165114][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.178478][ T1674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.188214][ T1674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.240767][ T1674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.255659][ T1674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.372787][ T7688] vlan2: entered allmulticast mode [ 76.378019][ T7688] hsr0: entered allmulticast mode [ 76.383141][ T7688] hsr_slave_0: entered allmulticast mode [ 76.388839][ T7688] hsr_slave_1: entered allmulticast mode [ 76.506154][ T7706] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 76.627106][ T7720] loop2: detected capacity change from 0 to 2048 [ 76.665654][ T7720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 76.690768][ T7368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 76.777276][ T7732] delete_channel: no stack [ 76.859522][ T7739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1706'. [ 76.894336][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1707'. [ 76.950330][ T7749] loop2: detected capacity change from 0 to 764 [ 77.010825][ T7749] rock: directory entry would overflow storage [ 77.017020][ T7749] rock: sig=0x5245, size=8, remaining=5 [ 77.094481][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1712'. [ 77.211463][ T7786] loop5: detected capacity change from 0 to 764 [ 77.311278][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 77.525500][ T7840] netlink: 'syz.3.1742': attribute type 1 has an invalid length. [ 77.581265][ T7849] openvswitch: netlink: Message has 6 unknown bytes. [ 77.593606][ T7851] program syz.5.1747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.685779][ T7855] SELinux: failed to load policy [ 77.747291][ T7870] loop6: detected capacity change from 0 to 512 [ 77.766912][ T7870] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 77.783971][ T7870] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1756: invalid indirect mapped block 2683928664 (level 1) [ 77.803078][ T7870] EXT4-fs (loop6): Remounting filesystem read-only [ 77.813327][ T7870] EXT4-fs (loop6): 1 truncate cleaned up [ 77.819290][ T7870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.875075][ T7051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.909360][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 77.909375][ T29] audit: type=1400 audit(1757933159.875:1314): avc: denied { create } for pid=7891 comm="syz.0.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.009355][ T29] audit: type=1400 audit(1757933159.905:1315): avc: denied { ioctl } for pid=7891 comm="syz.0.1762" path="socket:[19105]" dev="sockfs" ino=19105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 78.068462][ T7907] netlink: 'syz.0.1767': attribute type 2 has an invalid length. [ 78.100787][ T7913] loop2: detected capacity change from 0 to 128 [ 78.191103][ T7923] loop0: detected capacity change from 0 to 128 [ 78.240859][ T7929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1776'. [ 78.269111][ T7932] syz.5.1777 uses obsolete (PF_INET,SOCK_PACKET) [ 78.349463][ T7948] loop0: detected capacity change from 0 to 128 [ 78.356433][ T29] audit: type=1326 audit(1757933160.325:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1b7deba9 code=0x7ffc0000 [ 78.380468][ T7948] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.405651][ T29] audit: type=1326 audit(1757933160.325:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1b7deba9 code=0x7ffc0000 [ 78.429285][ T29] audit: type=1326 audit(1757933160.325:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fde1b7deba9 code=0x7ffc0000 [ 78.452679][ T29] audit: type=1326 audit(1757933160.325:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1b7deba9 code=0x7ffc0000 [ 78.476123][ T29] audit: type=1326 audit(1757933160.325:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7944 comm="syz.6.1785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1b7deba9 code=0x7ffc0000 [ 78.499609][ T29] audit: type=1400 audit(1757933160.365:1321): avc: denied { create } for pid=7949 comm="syz.2.1786" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.515177][ T7948] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.569731][ T29] audit: type=1400 audit(1757933160.535:1322): avc: denied { mounton } for pid=7949 comm="syz.2.1786" path="/29/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.603536][ T1675] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.622416][ T29] audit: type=1326 audit(1757933160.595:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9275eba9 code=0x7ffc0000 [ 78.780350][ T7995] loop2: detected capacity change from 0 to 1024 [ 78.803090][ T7995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.894929][ T7368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.939688][ T8011] capability: warning: `syz.2.1811' uses 32-bit capabilities (legacy support in use) [ 79.097801][ T8032] loop6: detected capacity change from 0 to 512 [ 79.124602][ T8032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.142141][ T8042] netlink: 642 bytes leftover after parsing attributes in process `syz.2.1825'. [ 79.160624][ T8032] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.213724][ T7051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.250201][ T8049] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1828'. [ 79.318040][ T8063] program syz.6.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.353275][ T8068] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.370853][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1839'. [ 79.483492][ T8091] netlink: 'syz.5.1848': attribute type 10 has an invalid length. [ 79.513771][ T8098] tap0: tun_chr_ioctl cmd 1074025675 [ 79.519138][ T8098] tap0: persist disabled [ 79.524279][ T8091] team0: Device hsr_slave_0 failed to register rx_handler [ 79.603356][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1858'. [ 79.629617][ T8114] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 79.637874][ T8114] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 79.700210][ T8127] program syz.0.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.758483][ T8131] loop0: detected capacity change from 0 to 4096 [ 79.766951][ T8131] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.786598][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1868'. [ 79.798511][ T8131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.861702][ T8131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.065574][ T8181] loop0: detected capacity change from 0 to 1024 [ 80.073755][ T8183] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.075963][ T8181] EXT4-fs: Ignoring removed bh option [ 80.087450][ T8181] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 80.101236][ T8181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.131853][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.186857][ T8201] loop0: detected capacity change from 0 to 512 [ 80.189257][ C0] hrtimer: interrupt took 25760 ns [ 80.199775][ T8201] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.216040][ T8201] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 80.233625][ T8201] EXT4-fs (loop0): 1 truncate cleaned up [ 80.240829][ T8201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.289044][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.309397][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1904'. [ 80.318545][ T8216] ip_vti0: Master is either lo or non-ether device [ 80.423857][ T8235] loop2: detected capacity change from 0 to 512 [ 80.435593][ T8235] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.450406][ T8235] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 80.458655][ T8235] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.465286][ T8235] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.491404][ T8235] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 80.498901][ T8235] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1913: bg 0: block 40: padding at end of block bitmap is not set [ 80.499141][ T8235] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 80.522675][ T8235] EXT4-fs (loop2): 1 truncate cleaned up [ 80.528849][ T8235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.551941][ T8235] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.1913: corrupted xattr block 31: invalid header [ 80.569394][ T8235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 80.579089][ T8235] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #16: comm syz.2.1913: corrupted xattr block 31: invalid header [ 80.593523][ T8235] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 80.602809][ T8235] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1913: bad symlink. [ 80.634635][ T7368] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.685457][ T8267] loop6: detected capacity change from 0 to 2048 [ 80.693913][ T8267] EXT4-fs: Ignoring removed i_version option [ 80.712168][ T8267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.724357][ T8267] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.791013][ T8267] ================================================================== [ 80.799145][ T8267] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 80.806997][ T8267] [ 80.809337][ T8267] write to 0xffffea00049a9d98 of 8 bytes by task 1674 on cpu 1: [ 80.816983][ T8267] __filemap_remove_folio+0x1a5/0x2a0 [ 80.822387][ T8267] folio_unmap_invalidate+0x1dd/0x360 [ 80.827784][ T8267] folio_end_writeback+0x227/0x3d0 [ 80.832929][ T8267] ext4_finish_bio+0x459/0x8c0 [ 80.837728][ T8267] ext4_release_io_end+0x9f/0x1f0 [ 80.842785][ T8267] ext4_end_io_end+0x18d/0x240 [ 80.847578][ T8267] ext4_end_io_rsv_work+0x151/0x1e0 [ 80.852793][ T8267] process_scheduled_works+0x4cb/0x9d0 [ 80.858268][ T8267] worker_thread+0x582/0x770 [ 80.862874][ T8267] kthread+0x489/0x510 [ 80.866946][ T8267] ret_from_fork+0x11f/0x1b0 [ 80.871541][ T8267] ret_from_fork_asm+0x1a/0x30 [ 80.876311][ T8267] [ 80.878635][ T8267] read to 0xffffea00049a9d98 of 8 bytes by task 8267 on cpu 0: [ 80.886176][ T8267] folio_mapping+0xa1/0x120 [ 80.890697][ T8267] folio_wait_writeback+0x43/0x140 [ 80.895819][ T8267] file_write_and_wait_range+0x20b/0x2c0 [ 80.901475][ T8267] generic_buffers_fsync_noflush+0x45/0x120 [ 80.907376][ T8267] ext4_sync_file+0x1ab/0x690 [ 80.912052][ T8267] vfs_fsync_range+0x10d/0x130 [ 80.916822][ T8267] ext4_buffered_write_iter+0x34f/0x3c0 [ 80.922387][ T8267] ext4_file_write_iter+0x383/0xf00 [ 80.927604][ T8267] aio_write+0x2e5/0x410 [ 80.931864][ T8267] io_submit_one+0xacd/0x11d0 [ 80.936568][ T8267] __se_sys_io_submit+0xfb/0x280 [ 80.941518][ T8267] __x64_sys_io_submit+0x43/0x50 [ 80.946467][ T8267] x64_sys_call+0x2d5d/0x2ff0 [ 80.951153][ T8267] do_syscall_64+0xd2/0x200 [ 80.955678][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.961581][ T8267] [ 80.963905][ T8267] value changed: 0xffff8881095f2998 -> 0x0000000000000000 [ 80.971007][ T8267] [ 80.973349][ T8267] Reported by Kernel Concurrency Sanitizer on: [ 80.979506][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.6.1927 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 80.989229][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 80.999284][ T8267] ================================================================== [ 81.070972][ T1674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.132664][ T1674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.222025][ T1674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.350090][ T1674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.406688][ T8266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.443157][ T1674] bridge_slave_1: left allmulticast mode [ 81.448803][ T1674] bridge_slave_1: left promiscuous mode [ 81.454953][ T1674] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.462686][ T1674] bridge_slave_0: left allmulticast mode [ 81.468327][ T1674] bridge_slave_0: left promiscuous mode [ 81.474010][ T1674] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.581817][ T1674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.591536][ T1674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.601122][ T1674] bond0 (unregistering): Released all slaves [ 81.609491][ T1674] bond1 (unregistering): Released all slaves [ 81.669001][ T1674] hsr_slave_0: left promiscuous mode [ 81.674554][ T1674] hsr_slave_1: left promiscuous mode [ 81.680349][ T1674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.687746][ T1674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.695402][ T1674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.702854][ T1674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.712824][ T1674] team_slave_0: left promiscuous mode [ 81.718215][ T1674] team_slave_1: left promiscuous mode [ 81.723711][ T1674] veth1_macvtap: left promiscuous mode [ 81.729246][ T1674] veth0_macvtap: left promiscuous mode [ 81.734853][ T1674] veth1_vlan: left promiscuous mode [ 81.740117][ T1674] veth0_vlan: left promiscuous mode [ 81.804887][ T1674] team0 (unregistering): Port device team_slave_1 removed [ 81.814418][ T1674] team0 (unregistering): Port device team_slave_0 removed [ 82.061782][ T1674] IPVS: stop unused estimator thread 0... [ 82.133647][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.193425][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.262122][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.322318][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.392932][ T51] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.440592][ T51] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.481133][ T51] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.540805][ T51] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.613328][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.641959][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.680777][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.741699][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.803194][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.840846][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.900733][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 82.950478][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 83.033127][ T51] bridge_slave_1: left allmulticast mode [ 83.038773][ T51] bridge_slave_1: left promiscuous mode [ 83.044493][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.052365][ T51] bridge_slave_0: left allmulticast mode [ 83.058061][ T51] bridge_slave_0: left promiscuous mode [ 83.063754][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.072142][ T51] bridge_slave_1: left allmulticast mode [ 83.077774][ T51] bridge_slave_1: left promiscuous mode [ 83.083442][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.090944][ T51] bridge_slave_0: left allmulticast mode [ 83.096612][ T51] bridge_slave_0: left promiscuous mode [ 83.102307][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.110353][ T51] bridge_slave_1: left allmulticast mode [ 83.115984][ T51] bridge_slave_1: left promiscuous mode [ 83.121653][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.129390][ T51] bridge_slave_0: left allmulticast mode [ 83.135042][ T51] bridge_slave_0: left promiscuous mode [ 83.140792][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.148969][ T51] bridge_slave_1: left allmulticast mode [ 83.154612][ T51] bridge_slave_1: left promiscuous mode [ 83.160263][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.167916][ T51] bridge_slave_0: left allmulticast mode [ 83.173583][ T51] bridge_slave_0: left promiscuous mode [ 83.179199][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.262605][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.272415][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.281985][ T51] bond0 (unregistering): Released all slaves [ 83.332502][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.341823][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.350704][ T51] bond0 (unregistering): Released all slaves [ 83.424016][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.433133][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.442953][ T51] bond0 (unregistering): Released all slaves [ 83.491332][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.500604][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.509493][ T51] bond0 (unregistering): Released all slaves [ 83.566629][ T51] tipc: Left network mode [ 83.646888][ T51] hsr_slave_0: left promiscuous mode [ 83.654780][ T51] hsr_slave_1: left promiscuous mode [ 83.661712][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.669098][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.676624][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.684056][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.693910][ T51] hsr_slave_0: left promiscuous mode [ 83.700583][ T51] hsr_slave_1: left promiscuous mode [ 83.706280][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.713883][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.722936][ T51] hsr_slave_0: left promiscuous mode [ 83.728475][ T51] hsr_slave_1: left promiscuous mode [ 83.734112][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.741938][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.750915][ T51] hsr_slave_0: left promiscuous mode [ 83.756435][ T51] hsr_slave_1: left promiscuous mode [ 83.762083][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.769648][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.780511][ T51] veth1_macvtap: left promiscuous mode [ 83.786088][ T51] veth0_macvtap: left promiscuous mode [ 83.791624][ T51] veth1_vlan: left promiscuous mode [ 83.796842][ T51] veth0_vlan: left promiscuous mode [ 83.855572][ T51] team0 (unregistering): Port device team_slave_1 removed [ 83.866720][ T51] team0 (unregistering): Port device team_slave_0 removed [ 83.918935][ T51] team0 (unregistering): Port device team_slave_1 removed [ 83.928948][ T51] team0 (unregistering): Port device team_slave_0 removed [ 83.936381][ T1674] smc: removing ib device !yz! [ 83.982189][ T51] team0 (unregistering): Port device team_slave_1 removed [ 83.991526][ T51] team0 (unregistering): Port device team_slave_0 removed [ 84.040625][ T51] team0 (unregistering): Port device team_slave_1 removed [ 84.050411][ T51] team0 (unregistering): Port device team_slave_0 removed [ 84.875135][ T51] IPVS: stop unused estimator thread 0...