last executing test programs: 2m30.985841383s ago: executing program 32 (id=354): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 1m55.150701104s ago: executing program 33 (id=1093): add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0xa, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xc, 0x2a}, 0x90) 1m54.101982547s ago: executing program 34 (id=1452): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m9.866215515s ago: executing program 7 (id=2588): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m9.789690009s ago: executing program 7 (id=2592): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x20}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "65758a70c4c1e8cf3779321f39c7041584faecaee3bf0456", "d21ad758343b9538489271d990c6564e89a03928bd77b7360d5051b7b21726e7"}}}}}}, 0x0) 1m9.784962241s ago: executing program 7 (id=2595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a31000000001800038014000080080003400000002208"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m9.693759394s ago: executing program 7 (id=2598): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0xb3e, 0x2) 1m9.693372694s ago: executing program 7 (id=2601): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) 1m9.644276152s ago: executing program 7 (id=2604): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 1m9.587677995s ago: executing program 5 (id=2606): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$snapshot(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m9.550658996s ago: executing program 5 (id=2607): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="030000000400000004"], 0xc) 1m9.453535362s ago: executing program 5 (id=2611): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0xb, 0xbe, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) 1m9.406303369s ago: executing program 5 (id=2613): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) r0 = timerfd_create(0x7, 0x80000) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001040)={0xc000001c}) 1m9.329613433s ago: executing program 5 (id=2615): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) 1m9.281502461s ago: executing program 6 (id=2617): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f6, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 1m9.268448638s ago: executing program 5 (id=2618): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m9.110005499s ago: executing program 6 (id=2623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) 1m8.998659284s ago: executing program 6 (id=2625): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) 1m8.905508357s ago: executing program 6 (id=2627): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x142) 1m8.905157917s ago: executing program 6 (id=2628): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) 1m8.878184613s ago: executing program 6 (id=2630): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x200000, 0x0, 0x29}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0, 0xb6}, 0x18) 54.369601509s ago: executing program 35 (id=2589): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x40001}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}, 0x1}}, 0x10) 54.35067451s ago: executing program 36 (id=2604): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) 53.837880495s ago: executing program 37 (id=2618): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 53.797574798s ago: executing program 38 (id=2630): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x200000, 0x0, 0x29}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0, 0xb6}, 0x18) 46.642253449s ago: executing program 3 (id=2732): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xfffffc01) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 46.566869392s ago: executing program 3 (id=2734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 46.48513685s ago: executing program 3 (id=2735): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 46.339053814s ago: executing program 3 (id=2736): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180)={[{@bsdgroups}]}, 0x2c, 0x516, &(0x7f0000000740)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) 46.157141928s ago: executing program 3 (id=2738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 45.672727026s ago: executing program 3 (id=2750): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) 45.618488628s ago: executing program 39 (id=2750): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) 44.50081532s ago: executing program 1 (id=2788): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r0, 0x95, &(0x7f0000004140)}, 0x10) 44.439398326s ago: executing program 1 (id=2790): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.298402066s ago: executing program 1 (id=2792): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 44.200210143s ago: executing program 1 (id=2795): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 44.17039077s ago: executing program 1 (id=2796): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='v', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 43.817492433s ago: executing program 1 (id=2802): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) 43.785900581s ago: executing program 40 (id=2802): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) 3.087999836s ago: executing program 0 (id=3883): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0xfffffffe, 0x4) 2.202845425s ago: executing program 0 (id=3915): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 1.496182241s ago: executing program 0 (id=3937): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140), 0x2) 864.247273ms ago: executing program 2 (id=3964): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) 710.585302ms ago: executing program 9 (id=3969): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0x9}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@local}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 653.408695ms ago: executing program 9 (id=3971): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001d40)=[{&(0x7f00000009c0)=""/242, 0xf2}], 0x1, 0xfffffffe, 0x2, 0x1e053c45963db87c) 653.226415ms ago: executing program 9 (id=3972): r0 = socket(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x40, 0x10, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) 644.25972ms ago: executing program 4 (id=3974): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 633.315136ms ago: executing program 0 (id=3975): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f762581", 0x56}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6", 0xa9}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9", 0x1a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x179}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 605.761383ms ago: executing program 9 (id=3976): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10003}, 0x94) 605.261803ms ago: executing program 8 (id=3977): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80320000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 588.243162ms ago: executing program 9 (id=3978): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x90, 0x1}, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 573.547991ms ago: executing program 0 (id=3979): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 517.226773ms ago: executing program 4 (id=3980): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x25dfdbff, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) 517.087943ms ago: executing program 2 (id=3981): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 516.771293ms ago: executing program 4 (id=3982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000019000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a0000ffffffff000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003400000000000000100000000000080b40000000000000005000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000640000000000e0000001000000000000000000000000ffff00004e220000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 478.850856ms ago: executing program 4 (id=3983): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0xa0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 478.260016ms ago: executing program 8 (id=3984): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) r0 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r0, 0xf, 0x7929, 0x1, 0x0, 0x0) 477.743086ms ago: executing program 2 (id=3985): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48844}, 0x40) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 434.499081ms ago: executing program 9 (id=3986): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 434.191011ms ago: executing program 4 (id=3987): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x1, &(0x7f0000000400)=@raw=[@exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 411.156064ms ago: executing program 8 (id=3988): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="140000"], 0x18}}], 0x1, 0xb00) 404.329578ms ago: executing program 2 (id=3989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) 130.850965ms ago: executing program 0 (id=3990): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r0, 0x7) 129.385446ms ago: executing program 2 (id=3991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000400)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000c40)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 129.271756ms ago: executing program 8 (id=3992): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r1 = dup(r0) getsockopt$inet_buf(r1, 0x118, 0x4, 0x0, &(0x7f0000000080)) 127.645627ms ago: executing program 4 (id=3993): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32], 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.302792ms ago: executing program 8 (id=3994): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x30}}}}, 0x32) close(r1) 14.007232ms ago: executing program 2 (id=3995): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0x10cfe, 0x10000000, 0x8000008, 0x10001, 0x4, 0x80000003, 0x0, 0x0, 0x8}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x4, 0x7, 0x0, 0x55a}) 0s ago: executing program 8 (id=3996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) kernel console output (not intermixed with test programs): 91" path="socket:[24728]" dev="sockfs" ino=24728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.441360][ T9729] set_capacity_and_notify: 3 callbacks suppressed [ 141.441379][ T9729] loop5: detected capacity change from 0 to 512 [ 141.457475][ T9729] EXT4-fs: Ignoring removed nobh option [ 141.467336][ T9729] EXT4-fs: Ignoring removed orlov option [ 141.476076][ T9729] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 141.489337][ T9729] EXT4-fs (loop5): orphan cleanup on readonly fs [ 141.496343][ T9729] EXT4-fs error (device loop5): __ext4_iget:5395: inode #11: block 1: comm syz.5.2496: invalid block [ 141.507792][ T9729] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 141.508160][ T9729] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2496: couldn't read orphan inode 11 (err -117) [ 141.511614][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 141.517926][ T9729] loop5: lost filesystem error report for type 5 error -117 [ 141.529292][ C1] EXT4-fs (loop5): initial error at time 2000000310: __ext4_iget:5395: inode 11: block 1 [ 141.553204][ C1] EXT4-fs (loop5): last error at time 2000000310: __ext4_iget:5395: inode 11: block 1 [ 141.565537][ T9729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.590613][ T9722] loop2: detected capacity change from 0 to 32768 [ 141.597724][ T4845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.795932][ T9740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 141.914664][ T9749] loop2: detected capacity change from 0 to 128 [ 141.939600][ T9749] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 142.003149][ T28] audit: type=1400 audit(2000000310.956:1215): avc: denied { ioctl } for pid=9760 comm="syz.5.2503" path="socket:[24769]" dev="sockfs" ino=24769 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.046595][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 142.080676][ T3402] kernel write not supported for file /851/oom_adj (pid: 3402 comm: kworker/1:4) [ 142.230695][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2519'. [ 144.076339][ T9831] loop5: detected capacity change from 0 to 128 [ 144.180807][ T9848] loop2: detected capacity change from 0 to 512 [ 144.206351][ T9853] syz.5.2531: attempt to access beyond end of device [ 144.206351][ T9853] loop5: rw=3, sector=138, nr_sectors = 6 limit=128 [ 144.222646][ T9853] syz.5.2531: attempt to access beyond end of device [ 144.222646][ T9853] loop5: rw=2051, sector=144, nr_sectors = 106 limit=128 [ 144.242601][ T9848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.270839][ T9848] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.394972][ T9869] lo: Caught tx_queue_len zero misconfig [ 144.422105][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.477239][ T9881] loop7: detected capacity change from 0 to 2048 [ 144.489413][ T9883] loop2: detected capacity change from 0 to 128 [ 144.512039][ T9881] loop7: p2 p3 p7 [ 144.538341][ T9883] syz.2.2552: attempt to access beyond end of device [ 144.538341][ T9883] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 144.604963][ T9895] program syz.6.2559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.618154][ T9871] loop5: detected capacity change from 0 to 512 [ 144.641478][ T9871] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.657479][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 144.663862][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 144.670259][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2563'. [ 144.679464][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 144.709931][ T9871] EXT4-fs (loop5): 1 truncate cleaned up [ 144.720251][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 144.720442][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 144.731207][ T9871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.752522][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 144.794317][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2568'. [ 144.805935][ T9910] batman_adv: batadv0: Adding interface: ipvlan2 [ 144.812519][ T9910] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.838430][ T9910] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 144.892779][ T28] audit: type=1326 audit(2000000313.836:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 144.937758][ T28] audit: type=1326 audit(2000000313.836:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 144.971180][ T28] audit: type=1326 audit(2000000313.836:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 144.995595][ T28] audit: type=1326 audit(2000000313.846:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 145.019296][ T28] audit: type=1326 audit(2000000313.846:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb11240d04e code=0x7ffc0000 [ 145.043038][ T28] audit: type=1326 audit(2000000313.846:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 145.068015][ T28] audit: type=1326 audit(2000000313.996:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 145.109357][ T28] audit: type=1326 audit(2000000313.996:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1123edb99 code=0x7ffc0000 [ 145.133486][ T28] audit: type=1326 audit(2000000313.996:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 145.172566][ T28] audit: type=1326 audit(2000000313.996:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.2.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11244c819 code=0x7ffc0000 [ 145.203865][ T9935] netlink: 'syz.0.2578': attribute type 5 has an invalid length. [ 145.320401][ T4845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.357410][ T9945] netem: change failed [ 145.388616][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'. [ 145.415755][ T9950] batman_adv: batadv0: Adding interface: ipvlan2 [ 145.440105][ T9950] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.467786][ T9950] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 145.726959][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2605'. [ 145.780705][ T9988] random: crng reseeded on system resumption [ 145.857429][ T9994] loop6: detected capacity change from 0 to 764 [ 145.869802][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 145.911181][ T9994] rock: directory entry would overflow storage [ 145.941673][ T9994] rock: sig=0x4654, size=5, remaining=4 [ 146.108287][T10010] loop6: detected capacity change from 0 to 512 [ 146.136982][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'. [ 146.154999][T10010] EXT4-fs: Ignoring removed i_version option [ 146.186539][T10010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.250971][ T6932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.178510][ T400] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.265848][ T400] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.329160][ T400] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.387245][ T400] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.464900][T10058] chnl_net:caif_netlink_parms(): no params data found [ 161.657843][T10056] chnl_net:caif_netlink_parms(): no params data found [ 161.678530][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.686222][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.694514][T10058] bridge_slave_0: entered allmulticast mode [ 161.701337][T10058] bridge_slave_0: entered promiscuous mode [ 161.734805][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.742915][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.757276][T10058] bridge_slave_1: entered allmulticast mode [ 161.764050][T10058] bridge_slave_1: entered promiscuous mode [ 161.864937][ T400] bond0 (unregistering): Released all slaves [ 161.904180][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.916891][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.947725][ T400] hsr_slave_0: left promiscuous mode [ 161.954578][ T400] veth1_macvtap: left promiscuous mode [ 161.960261][ T400] veth0_macvtap: left promiscuous mode [ 161.966491][ T400] veth1_vlan: left promiscuous mode [ 161.973846][ T400] veth0_vlan: left promiscuous mode [ 162.041521][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.048847][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.056133][T10056] bridge_slave_0: entered allmulticast mode [ 162.062716][T10056] bridge_slave_0: entered promiscuous mode [ 162.069688][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.076822][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.083993][T10056] bridge_slave_1: entered allmulticast mode [ 162.090416][T10056] bridge_slave_1: entered promiscuous mode [ 162.098004][T10058] team0: Port device team_slave_0 added [ 162.104965][T10058] team0: Port device team_slave_1 added [ 162.130118][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.137717][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.164985][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.195888][T10056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.206648][T10056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.225830][T10126] pimreg: entered allmulticast mode [ 162.232094][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.241672][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.267972][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.288609][T10126] pimreg: left allmulticast mode [ 162.297082][ T3039] 8021q: adding VLAN 0 to HW filter on device eth13 [ 162.325716][T10056] team0: Port device team_slave_0 added [ 162.345381][T10056] team0: Port device team_slave_1 added [ 162.358623][T10058] hsr_slave_0: entered promiscuous mode [ 162.365805][T10058] hsr_slave_1: entered promiscuous mode [ 162.373472][T10058] debugfs: 'hsr0' already exists in 'hsr' [ 162.379251][T10058] Cannot create hsr debugfs directory [ 162.409515][T10056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.418123][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.445314][T10056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.456609][T10056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.463746][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.490062][T10056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.575976][T10056] hsr_slave_0: entered promiscuous mode [ 162.583539][T10056] hsr_slave_1: entered promiscuous mode [ 162.599594][T10056] debugfs: 'hsr0' already exists in 'hsr' [ 162.605606][T10056] Cannot create hsr debugfs directory [ 162.660543][ T400] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.692944][T10087] chnl_net:caif_netlink_parms(): no params data found [ 162.757936][ T400] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.785005][ T3039] 8021q: adding VLAN 0 to HW filter on device eth14 [ 162.813300][ T400] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.840393][T10086] chnl_net:caif_netlink_parms(): no params data found [ 162.854831][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.862113][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.869396][T10087] bridge_slave_0: entered allmulticast mode [ 162.876771][T10087] bridge_slave_0: entered promiscuous mode [ 162.883867][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.891039][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.899277][T10087] bridge_slave_1: entered allmulticast mode [ 162.906377][T10087] bridge_slave_1: entered promiscuous mode [ 162.935707][ T400] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.985411][T10058] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 162.995862][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.004637][T10058] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.017942][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.037991][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.055014][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.095394][T10058] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.107724][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.129920][T10086] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.137365][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.144900][T10086] bridge_slave_0: entered allmulticast mode [ 163.151452][T10086] bridge_slave_0: entered promiscuous mode [ 163.158358][T10086] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.165642][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.172954][T10086] bridge_slave_1: entered allmulticast mode [ 163.179634][T10086] bridge_slave_1: entered promiscuous mode [ 163.191920][T10058] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.201051][T10058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.209006][ T3039] 8021q: adding VLAN 0 to HW filter on device eth15 [ 163.242919][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.262891][T10087] team0: Port device team_slave_0 added [ 163.270103][T10087] team0: Port device team_slave_1 added [ 163.277016][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.336292][T10086] team0: Port device team_slave_0 added [ 163.350245][ T400] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.367859][ T400] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.380325][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.387506][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.415253][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.428113][ T400] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.438707][ T400] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.452807][T10086] team0: Port device team_slave_1 added [ 163.464014][T10056] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 163.473039][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.490044][T10056] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 163.499473][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.510272][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.517968][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.544101][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.560664][ T400] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.571157][ T400] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.582760][T10056] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 163.590877][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.598741][T10056] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 163.607438][T10056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.620692][T10086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.627782][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.654005][T10086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.665397][T10086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.672600][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.700461][T10086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.703755][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 163.703769][ T28] audit: type=1400 audit(2000000332.656:1227): avc: denied { accept } for pid=10198 comm="syz.0.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.740406][ T400] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.751324][ T400] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.805360][T10087] hsr_slave_0: entered promiscuous mode [ 163.811464][T10087] hsr_slave_1: entered promiscuous mode [ 163.817921][T10087] debugfs: 'hsr0' already exists in 'hsr' [ 163.824191][T10087] Cannot create hsr debugfs directory [ 163.865349][T10086] hsr_slave_0: entered promiscuous mode [ 163.872385][T10086] hsr_slave_1: entered promiscuous mode [ 163.879769][T10086] debugfs: 'hsr0' already exists in 'hsr' [ 163.891294][T10086] Cannot create hsr debugfs directory [ 163.926297][T10056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.957934][ T3039] 8021q: adding VLAN 0 to HW filter on device eth16 [ 164.023062][T10056] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.047207][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.054325][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.068048][ T400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.093523][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.109273][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.116468][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.137014][ T400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.174993][ T400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.187788][T10058] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.221356][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.228485][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.245073][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.252283][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.274980][ T400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.288139][T10241] netlink: 538 bytes leftover after parsing attributes in process `syz.0.2662'. [ 164.387028][ T400] bridge_slave_1: left promiscuous mode [ 164.397881][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.412300][ T400] bridge_slave_0: left allmulticast mode [ 164.418185][ T400] bridge_slave_0: left promiscuous mode [ 164.424315][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.523218][ T400] bond0 (unregistering): Released all slaves [ 164.564829][ T400] bond0 (unregistering): Released all slaves [ 164.614247][ T400] bond0 (unregistering): left promiscuous mode [ 164.620746][ T400] bond_slave_0: left promiscuous mode [ 164.626308][ T400] bond_slave_1: left promiscuous mode [ 164.632493][ T400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.642915][ T400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.653369][ T400] bond0 (unregistering): Released all slaves [ 164.664835][ T3039] 8021q: adding VLAN 0 to HW filter on device eth17 [ 164.687222][T10056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.716853][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.731420][ T400] hsr_slave_0: left promiscuous mode [ 164.745418][ T400] hsr_slave_1: left promiscuous mode [ 164.753746][ T400] batman_adv: batadv0: Removing interface: ipvlan2 [ 164.763350][ T400] hsr_slave_0: left promiscuous mode [ 164.769118][ T400] hsr_slave_1: left promiscuous mode [ 164.774945][ T400] batman_adv: batadv0: Removing interface: ipvlan2 [ 164.782582][ T400] batadv0: left promiscuous mode [ 164.789341][ T400] hsr_slave_0: left promiscuous mode [ 164.795344][ T400] hsr_slave_1: left promiscuous mode [ 164.801175][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.809148][ T400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.816883][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.824500][ T400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.834701][ T400] veth1_macvtap: left promiscuous mode [ 164.840237][ T400] veth0_macvtap: left promiscuous mode [ 164.845991][ T400] veth1_vlan: left promiscuous mode [ 164.851266][ T400] veth0_vlan: left promiscuous mode [ 164.856747][ T400] veth0_macvtap: left promiscuous mode [ 164.862340][ T400] veth1_vlan: left promiscuous mode [ 164.867655][ T400] veth0_vlan: left promiscuous mode [ 164.873158][ T400] veth1_macvtap: left promiscuous mode [ 164.878736][ T400] veth0_macvtap: left promiscuous mode [ 164.884430][ T400] veth1_vlan: left promiscuous mode [ 164.889756][ T400] veth0_vlan: left promiscuous mode [ 165.069641][ T400] team0 (unregistering): Port device team_slave_1 removed [ 165.079509][ T400] team0 (unregistering): Port device team_slave_0 removed [ 165.265444][ T28] audit: type=1326 audit(2000000334.216:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.0.2674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49ba6c819 code=0x0 [ 165.325884][T10056] veth0_vlan: entered promiscuous mode [ 165.338063][T10056] veth1_vlan: entered promiscuous mode [ 165.355999][T10058] veth0_vlan: entered promiscuous mode [ 165.370313][T10058] veth1_vlan: entered promiscuous mode [ 165.380299][ T3039] 8021q: adding VLAN 0 to HW filter on device eth18 [ 165.389858][T10056] veth0_macvtap: entered promiscuous mode [ 165.402211][T10056] veth1_macvtap: entered promiscuous mode [ 165.416844][T10058] veth0_macvtap: entered promiscuous mode [ 165.424433][T10058] veth1_macvtap: entered promiscuous mode [ 165.438276][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.450504][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.458941][T10056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.467685][T10056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.484542][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.493408][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.506904][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.515879][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.525021][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.543426][ T9632] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.552517][ T9632] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.567211][ T9632] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.588963][ T28] audit: type=1400 audit(2000000334.536:1229): avc: denied { mount } for pid=10058 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.720498][ T3039] 8021q: adding VLAN 0 to HW filter on device eth19 [ 165.845989][T10086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.867634][T10086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.882230][T10086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.896393][T10086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.912766][T10086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.928648][T10086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.941957][T10086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.952988][T10377] netlink: 'syz.8.2682': attribute type 1 has an invalid length. [ 165.961335][T10086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.974707][ T3039] 8021q: adding VLAN 0 to HW filter on device eth20 [ 166.038064][T10087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.053187][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.066049][T10087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.082854][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.097983][T10087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.114846][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.129231][T10087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.149565][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.250146][T10086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.295022][T10086] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.332988][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.340221][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.364630][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.371750][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.447795][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.489890][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.514541][ T3039] 8021q: adding VLAN 0 to HW filter on device eth21 [ 166.538708][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.546045][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.576947][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.584104][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.617936][T10432] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 166.632823][T10432] bond2 (unregistering): Released all slaves [ 166.689332][T10086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.799952][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2696'. [ 166.874936][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.926454][T10086] veth0_vlan: entered promiscuous mode [ 166.938906][T10086] veth1_vlan: entered promiscuous mode [ 166.982009][T10086] veth0_macvtap: entered promiscuous mode [ 166.994598][T10473] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2700'. [ 166.999905][T10086] veth1_macvtap: entered promiscuous mode [ 167.026784][T10086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.039623][T10086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.070139][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.108190][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.132063][ T3039] 8021q: adding VLAN 0 to HW filter on device eth22 [ 167.145140][T10483] loop9: detected capacity change from 0 to 512 [ 167.162526][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.187037][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.198972][T10483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.222105][T10483] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.237381][T10087] veth0_vlan: entered promiscuous mode [ 167.272695][T10087] veth1_vlan: entered promiscuous mode [ 167.306443][T10087] veth0_macvtap: entered promiscuous mode [ 167.314582][T10087] veth1_macvtap: entered promiscuous mode [ 167.329370][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.349566][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.377863][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.408841][T10494] loop1: detected capacity change from 0 to 512 [ 167.409380][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.457646][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.491777][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.522991][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.783646][ T3039] 8021q: adding VLAN 0 to HW filter on device eth23 [ 167.825882][T10528] loop3: detected capacity change from 0 to 1024 [ 167.854000][T10528] EXT4-fs: Ignoring removed bh option [ 167.897488][T10528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.949889][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2714'. [ 168.025978][T10087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.214964][ T3039] 8021q: adding VLAN 0 to HW filter on device eth24 [ 168.498122][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 168.885304][T10630] netlink: 'syz.3.2735': attribute type 21 has an invalid length. [ 168.901808][T10630] netlink: 'syz.3.2735': attribute type 6 has an invalid length. [ 168.924437][T10630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2735'. [ 169.041166][T10640] loop3: detected capacity change from 0 to 512 [ 169.064644][T10640] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.084019][T10640] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 169.106118][T10640] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 169.121800][T10640] System zones: 0-2, 18-18, 34-35 [ 169.134060][T10640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 169.160245][ T28] audit: type=1400 audit(2000000338.106:1230): avc: denied { mounton } for pid=10639 comm="syz.3.2736" path="/9/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.199006][T10087] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /9/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 169.239242][T10087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.390237][ T3039] 8021q: adding VLAN 0 to HW filter on device eth8 [ 169.525828][T10684] loop1: detected capacity change from 0 to 128 [ 169.557123][T10684] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.572762][T10684] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.639336][ T3039] 8021q: adding VLAN 0 to HW filter on device eth25 [ 169.684556][ T400] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.685496][T10086] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.707914][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2749'. [ 169.935670][ T28] audit: type=1400 audit(2000000338.876:1231): avc: denied { setopt } for pid=10728 comm="syz.9.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.959640][ T400] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.020480][T10740] loop9: detected capacity change from 0 to 128 [ 170.069717][T10740] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.092780][T10740] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.096444][ T400] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.237872][T10058] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.252623][ T3039] 8021q: adding VLAN 0 to HW filter on device eth26 [ 170.295716][ T400] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.307823][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2767'. [ 170.525844][ T400] bridge_slave_1: left allmulticast mode [ 170.550916][ T400] bridge_slave_1: left promiscuous mode [ 170.557077][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.568599][ T400] bridge_slave_0: left allmulticast mode [ 170.580906][ T400] bridge_slave_0: left promiscuous mode [ 170.587338][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.641631][T10807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=10807 comm=syz.1.2783 [ 170.713868][ T400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.723919][ T400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.733939][ T400] bond0 (unregistering): Released all slaves [ 170.746568][ T3039] 8021q: adding VLAN 0 to HW filter on device eth27 [ 170.773044][T10713] chnl_net:caif_netlink_parms(): no params data found [ 170.796026][T10814] loop8: detected capacity change from 0 to 512 [ 170.804410][T10814] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.832538][T10814] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 170.846136][ T400] hsr_slave_0: left promiscuous mode [ 170.861087][ T400] hsr_slave_1: left promiscuous mode [ 170.863951][T10814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e840e028, mo2=0002] [ 170.867773][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.884112][ T400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.892510][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.900292][ T400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.904711][T10814] System zones: 1-12 [ 170.914570][T10814] EXT4-fs (loop8): orphan cleanup on readonly fs [ 170.921800][T10814] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2784: bg 0: block 361: padding at end of block bitmap is not set [ 170.936304][T10814] loop8: lost filesystem error report for type 5 error -117 [ 170.937902][T10814] EXT4-fs (loop8): Remounting filesystem read-only [ 170.938030][ T400] veth1_macvtap: left promiscuous mode [ 170.957478][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 170.957723][T10814] EXT4-fs (loop8): 1 truncate cleaned up [ 170.963947][ C1] EXT4-fs (loop8): initial error at time 2000000339: ext4_validate_block_bitmap:441 [ 170.963976][ C1] EXT4-fs (loop8): last error at time 2000000339: ext4_validate_block_bitmap:441 [ 170.985713][T10814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 170.991273][ T400] veth0_macvtap: left promiscuous mode [ 171.005854][ T400] veth1_vlan: left promiscuous mode [ 171.011224][ T400] veth0_vlan: left promiscuous mode [ 171.067684][T10814] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.2784: error -117 reading directory block [ 171.082599][T10814] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.2784: error -117 reading directory block [ 171.134256][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 171.176360][ T400] team0 (unregistering): Port device team_slave_1 removed [ 171.181973][ T28] audit: type=1400 audit(2000000340.126:1232): avc: denied { unmount } for pid=10086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.220656][ T400] team0 (unregistering): Port device team_slave_0 removed [ 171.333309][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.340535][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.348899][T10713] bridge_slave_0: entered allmulticast mode [ 171.355586][T10713] bridge_slave_0: entered promiscuous mode [ 171.369669][T10713] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.379697][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.391785][T10713] bridge_slave_1: entered allmulticast mode [ 171.402532][T10713] bridge_slave_1: entered promiscuous mode [ 171.413744][T10851] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2800'. [ 171.468459][T10713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.496736][T10865] netlink: 'syz.9.2801': attribute type 83 has an invalid length. [ 171.522260][T10713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.586104][T10713] team0: Port device team_slave_0 added [ 171.604044][T10713] team0: Port device team_slave_1 added [ 171.641459][T10713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.649250][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.678620][T10713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.710228][T10713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.727530][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.756848][T10713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.791036][ T400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.845222][ T400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.876186][T10713] hsr_slave_0: entered promiscuous mode [ 171.883522][T10713] hsr_slave_1: entered promiscuous mode [ 171.891436][T10713] debugfs: 'hsr0' already exists in 'hsr' [ 171.905878][T10713] Cannot create hsr debugfs directory [ 171.951185][ T400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.061681][ T400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.245917][T10884] chnl_net:caif_netlink_parms(): no params data found [ 172.323081][ T400] bridge_slave_1: left allmulticast mode [ 172.339352][ T400] bridge_slave_1: left promiscuous mode [ 172.351207][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.372554][ T400] bridge_slave_0: left allmulticast mode [ 172.391433][ T400] bridge_slave_0: left promiscuous mode [ 172.397712][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.646007][ T400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.669023][ T400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.683611][ T400] bond0 (unregistering): Released all slaves [ 172.745791][T10884] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.754566][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.762017][T10884] bridge_slave_0: entered allmulticast mode [ 172.772917][T11031] SELinux: failed to load policy [ 172.775949][T10884] bridge_slave_0: entered promiscuous mode [ 172.785812][ T28] audit: type=1400 audit(2000000341.726:1233): avc: denied { load_policy } for pid=11030 comm="syz.9.2843" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 172.827715][T10884] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.851285][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.876845][T10884] bridge_slave_1: entered allmulticast mode [ 172.895805][T10884] bridge_slave_1: entered promiscuous mode [ 172.910002][ T400] hsr_slave_0: left promiscuous mode [ 172.916939][ T400] hsr_slave_1: left promiscuous mode [ 172.930942][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.938680][ T400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.964529][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.972199][ T400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.991670][ T400] veth1_macvtap: left promiscuous mode [ 172.998470][ T400] veth0_macvtap: left promiscuous mode [ 173.005032][ T400] veth1_vlan: left promiscuous mode [ 173.013726][ T400] veth0_vlan: left promiscuous mode [ 173.118505][ T400] team0 (unregistering): Port device team_slave_1 removed [ 173.129959][ T400] team0 (unregistering): Port device team_slave_0 removed [ 173.210545][T10884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.230858][T10884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.266282][T10884] team0: Port device team_slave_0 added [ 173.274199][T10884] team0: Port device team_slave_1 added [ 173.312274][T10884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.319520][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.348682][T10884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.382959][T10884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.393221][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.419942][ T28] audit: type=1400 audit(2000000342.356:1234): avc: denied { write } for pid=11075 comm="syz.8.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.430312][T10884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.453131][T11078] loop8: detected capacity change from 0 to 256 [ 173.480721][T11078] FAT-fs (loop8): Directory bread(block 64) failed [ 173.508582][T10713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.508871][T11078] FAT-fs (loop8): Directory bread(block 65) failed [ 173.523807][T11078] FAT-fs (loop8): Directory bread(block 66) failed [ 173.532159][T10713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.539310][T11078] FAT-fs (loop8): Directory bread(block 67) failed [ 173.559599][T10884] hsr_slave_0: entered promiscuous mode [ 173.566451][T10884] hsr_slave_1: entered promiscuous mode [ 173.573340][T10884] debugfs: 'hsr0' already exists in 'hsr' [ 173.573929][T11078] FAT-fs (loop8): Directory bread(block 68) failed [ 173.579140][T10884] Cannot create hsr debugfs directory [ 173.592816][T10713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.600574][T11078] FAT-fs (loop8): Directory bread(block 69) failed [ 173.602058][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'. [ 173.613685][T11078] FAT-fs (loop8): Directory bread(block 70) failed [ 173.619945][T11084] netlink: 'syz.0.2868': attribute type 20 has an invalid length. [ 173.632799][T10713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.633842][T11078] FAT-fs (loop8): Directory bread(block 71) failed [ 173.640850][T10713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.647104][T11078] FAT-fs (loop8): Directory bread(block 72) failed [ 173.653428][T11084] netlink: 'syz.0.2868': attribute type 21 has an invalid length. [ 173.668218][T11078] FAT-fs (loop8): Directory bread(block 73) failed [ 173.673030][T10713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.722995][T10713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.733684][ T28] audit: type=1400 audit(2000000342.686:1235): avc: denied { module_load } for pid=11077 comm="syz.8.2865" path="/39/file0/bus" dev="loop8" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 173.757479][T11078] syz.8.2865: attempt to access beyond end of device [ 173.757479][T11078] loop8: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 173.759987][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 173.782379][T10713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.852095][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2873'. [ 173.913028][T11103] loop9: detected capacity change from 0 to 128 [ 173.983991][T10713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.014039][T10713] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.034449][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.041832][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.051199][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2877'. [ 174.060704][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2877'. [ 174.077601][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.084811][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.114382][T11110] erspan0: entered promiscuous mode [ 174.124980][T11110] gretap0: entered promiscuous mode [ 174.204577][T10884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.303300][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.312656][T10884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.428311][T11152] loop8: detected capacity change from 0 to 128 [ 175.017308][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.038488][T10884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.048766][ T28] audit: type=1400 audit(2000000343.996:1236): avc: denied { bind } for pid=11168 comm="syz.8.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.076010][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.082862][T11173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11173 comm=syz.9.2887 [ 175.092168][T10884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.105374][T10884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.122679][T10713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.163592][T11185] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 175.219292][T11197] loop9: detected capacity change from 0 to 512 [ 175.244128][T11197] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2891: inode has both inline data and extents flags [ 175.263745][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.277991][T11197] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.280410][T10884] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.281834][T11206] netlink: 'syz.8.2892': attribute type 10 has an invalid length. [ 175.289820][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 175.298440][T11197] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2891: couldn't read orphan inode 15 (err -117) [ 175.304308][ C0] EXT4-fs (loop9): initial error at time 2000000344: ext4_orphan_get:1397: inode 15 [ 175.304346][ C0] EXT4-fs (loop9): last error at time 2000000344: ext4_orphan_get:1397 [ 175.332039][T11197] loop9: lost filesystem error report for type 5 error -117 [ 175.332413][ C0] : inode 15 [ 175.340859][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2892'. [ 175.347997][ C0] [ 175.367924][T11197] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.410842][T10884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.421378][ T28] audit: type=1400 audit(2000000344.356:1237): avc: denied { create } for pid=11195 comm="syz.9.2891" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 175.442689][T10884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.454273][ T28] audit: type=1400 audit(2000000344.366:1238): avc: denied { setattr } for pid=11195 comm="syz.9.2891" name="file0" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 175.454268][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.458037][T11206] : entered promiscuous mode [ 175.493835][T11206] bridge0: port 3() entered blocking state [ 175.500039][T11206] bridge0: port 3() entered disabled state [ 175.508125][T11206] : entered allmulticast mode [ 175.523973][T11206] bridge0: entered allmulticast mode [ 175.530081][T11206] : left allmulticast mode [ 175.538245][T11206] bridge0: left allmulticast mode [ 175.556276][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.563596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.573087][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.580297][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.699345][T10884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.750805][T10713] veth0_vlan: entered promiscuous mode [ 175.783789][T11255] bond1: invalid ARP target 0.0.0.0 specified for addition [ 175.793793][T11255] bond1: option arp_ip_target: invalid value (0) [ 175.820576][T11255] bond1 (unregistering): Released all slaves [ 175.856191][T10713] veth1_vlan: entered promiscuous mode [ 175.901191][T10713] veth0_macvtap: entered promiscuous mode [ 175.929936][T10713] veth1_macvtap: entered promiscuous mode [ 175.976265][T10713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.995507][T10713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.015455][ T1080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.034966][ T1080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.054079][T11293] IPv6: Can't replace route, no match found [ 176.093406][T11287] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.100815][T11287] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.130741][T11287] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.148375][ T400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.158627][ T400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.221953][T10884] veth0_vlan: entered promiscuous mode [ 176.243375][T10884] veth1_vlan: entered promiscuous mode [ 176.291285][T10884] veth0_macvtap: entered promiscuous mode [ 176.311342][T10884] veth1_macvtap: entered promiscuous mode [ 176.342720][T10884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.373842][T10884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.408861][ T9632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.432282][ T9632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.470717][ T9632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.494318][ T9632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.228508][ T28] audit: type=1400 audit(2000000346.176:1239): avc: denied { getopt } for pid=11396 comm="syz.4.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.379324][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2933'. [ 177.457485][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2936'. [ 177.485861][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 177.490990][T11418] netlink: 'syz.8.2936': attribute type 15 has an invalid length. [ 177.515748][T11418] netlink: 'syz.8.2936': attribute type 25 has an invalid length. [ 177.531048][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 177.533095][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2936'. [ 177.596908][ T28] audit: type=1400 audit(2000000346.546:1240): avc: denied { ioctl } for pid=11428 comm="syz.2.2938" path="socket:[31869]" dev="sockfs" ino=31869 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.665939][T11433] loop8: detected capacity change from 0 to 256 [ 177.689121][T11433] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.736270][T11433] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.765905][T11433] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 177.905145][T11461] loop9: detected capacity change from 0 to 512 [ 177.935890][T11461] EXT4-fs (loop9): 1 truncate cleaned up [ 177.951797][T11461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.067865][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.075180][T11462] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.117430][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.170812][T11491] loop9: detected capacity change from 0 to 512 [ 178.194539][T11491] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 178.220202][T11491] EXT4-fs (loop9): orphan file too big: 4294967295 [ 178.223649][T11462] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.227882][T11491] EXT4-fs (loop9): mount failed [ 178.326966][T11495] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2959'. [ 178.360442][T11495] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2959'. [ 178.435860][T11507] loop8: detected capacity change from 0 to 128 [ 178.456112][T11507] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.484185][T11507] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.609246][T10056] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.708061][ T28] audit: type=1400 audit(2000000347.656:1241): avc: denied { connect } for pid=11532 comm="syz.8.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 178.791615][ T28] audit: type=1326 audit(2000000347.736:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49ba6c819 code=0x7ffc0000 [ 178.839080][T11546] loop8: detected capacity change from 0 to 1024 [ 178.850321][ T28] audit: type=1326 audit(2000000347.736:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49ba6c819 code=0x7ffc0000 [ 178.860254][T11546] EXT4-fs: quotafile must be on filesystem root [ 178.931709][ T28] audit: type=1326 audit(2000000347.746:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49ba6c819 code=0x7ffc0000 [ 178.946311][T11546] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2973'. [ 178.997633][ T28] audit: type=1326 audit(2000000347.746:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.0.2971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49ba6c819 code=0x7ffc0000 [ 179.206283][T11584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2981'. [ 179.372004][T11602] loop8: detected capacity change from 0 to 2048 [ 179.391462][T11607] vlan2: entered allmulticast mode [ 179.410851][T11607] macvtap0: entered allmulticast mode [ 179.438068][T11607] veth0_macvtap: entered allmulticast mode [ 180.520459][T11722] loop8: detected capacity change from 0 to 1024 [ 180.553636][T11722] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.600787][T11722] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 180.613438][T11722] EXT4-fs (loop8): orphan cleanup on readonly fs [ 180.634922][T11722] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.3003: Freeing blocks not in datazone - block = 0, count = 4096 [ 180.648971][T11722] loop8: lost filesystem error report for type 5 error -117 [ 180.649671][T11722] EXT4-fs (loop8): Remounting filesystem read-only [ 180.657248][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 180.657268][ C1] EXT4-fs (loop8): initial error at time 2000000349: ext4_free_blocks:6724 [ 180.657287][ C1] EXT4-fs (loop8): last error at time 2000000349: ext4_free_blocks:6724 [ 180.688059][T11722] EXT4-fs (loop8): 1 orphan inode deleted [ 180.694868][T11722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.722621][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.950712][T11769] __nla_validate_parse: 1 callbacks suppressed [ 180.950841][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3020'. [ 180.980655][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3021'. [ 180.998938][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3020'. [ 181.088465][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 181.109593][T11787] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 181.144150][T11787] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3028'. [ 181.180731][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 181.180803][ T28] audit: type=1400 audit(2000000350.126:1263): avc: denied { lock } for pid=11798 comm="syz.8.3033" path="socket:[33198]" dev="sockfs" ino=33198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 181.290403][ T28] audit: type=1326 audit(2000000350.236:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.376411][ T28] audit: type=1326 audit(2000000350.236:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.450313][ T28] audit: type=1326 audit(2000000350.236:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.486045][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'. [ 181.515049][ T28] audit: type=1326 audit(2000000350.236:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.561431][T11834] loop2: detected capacity change from 0 to 128 [ 181.585541][ T28] audit: type=1326 audit(2000000350.236:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.623502][T11834] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 181.637546][ T28] audit: type=1326 audit(2000000350.236:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.642863][T11834] FAT-fs (loop2): Filesystem has been set read-only [ 181.682931][ T28] audit: type=1326 audit(2000000350.266:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.732655][ T28] audit: type=1326 audit(2000000350.266:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.756617][T11834] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 181.796427][ T28] audit: type=1326 audit(2000000350.266:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75116c819 code=0x7ffc0000 [ 181.979736][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'. [ 181.999368][T11869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3050'. [ 182.009713][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3051'. [ 182.016878][T11869] vlan2: entered promiscuous mode [ 182.025204][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3051'. [ 182.050110][T11869] gretap0: entered promiscuous mode [ 182.055687][T11869] vlan2: entered allmulticast mode [ 182.069723][T11869] gretap0: entered allmulticast mode [ 182.093157][T11883] loop8: detected capacity change from 0 to 256 [ 182.132707][T11883] FAT-fs (loop8): Directory bread(block 64) failed [ 182.162592][T11883] FAT-fs (loop8): Directory bread(block 65) failed [ 182.191222][T11883] FAT-fs (loop8): Directory bread(block 66) failed [ 182.210830][T11883] FAT-fs (loop8): Directory bread(block 67) failed [ 182.233704][T11883] FAT-fs (loop8): Directory bread(block 68) failed [ 182.255053][T11883] FAT-fs (loop8): Directory bread(block 69) failed [ 182.272696][T11883] FAT-fs (loop8): Directory bread(block 70) failed [ 182.286737][T11883] FAT-fs (loop8): Directory bread(block 71) failed [ 182.307715][T11883] FAT-fs (loop8): Directory bread(block 72) failed [ 182.328528][T11883] FAT-fs (loop8): Directory bread(block 73) failed [ 182.357423][T11883] syz.8.3054: attempt to access beyond end of device [ 182.357423][T11883] loop8: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 182.475767][T11932] loop4: detected capacity change from 0 to 512 [ 182.521649][T11932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.564024][T11932] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3064: bad orphan inode 131083 [ 182.582213][T11932] loop4: lost filesystem error report for type 5 error -117 [ 182.583700][T11932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.605578][T11946] loop2: detected capacity change from 0 to 512 [ 182.618064][T11946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.639515][T11946] EXT4-fs (loop2): 1 truncate cleaned up [ 182.654015][T11946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.683023][T10713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.794544][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.303688][T12031] netlink: 'syz.4.3094': attribute type 4 has an invalid length. [ 184.308799][T12163] Cannot find add_set index 46338 as target [ 184.445369][T12177] loop2: detected capacity change from 0 to 1024 [ 184.462190][T12177] EXT4-fs: Ignoring removed bh option [ 184.519491][T12177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.588080][T12177] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.3133: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 184.618517][T12177] EXT4-fs (loop2): Remounting filesystem read-only [ 184.695130][ T3039] 8021q: adding VLAN 0 to HW filter on device eth28 [ 184.792230][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.105626][T12239] loop9: detected capacity change from 0 to 8192 [ 185.369112][T12268] loop9: detected capacity change from 0 to 512 [ 185.405787][T12268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.434429][T12268] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.629921][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.736153][T12296] loop9: detected capacity change from 0 to 512 [ 185.797286][T12296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.850551][T12311] n: the hash_elasticity option has been deprecated and is always 16 [ 185.858825][T12311] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 185.875171][T12311] n: the hash_elasticity option has been deprecated and is always 16 [ 185.883542][T12311] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 186.116528][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.122313][T12337] loop4: detected capacity change from 0 to 1024 [ 186.146797][T12337] EXT4-fs: Ignoring removed i_version option [ 186.164705][T12337] EXT4-fs: inline encryption not supported [ 186.199203][T12337] EXT4-fs: Ignoring removed i_version option [ 186.225044][T12337] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (40042!=35945) [ 186.269897][T12337] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.318005][T12337] EXT4-fs (loop4): failed to initialize system zone (-117) [ 186.343143][T12337] EXT4-fs (loop4): mount failed [ 186.514733][T12378] loop4: detected capacity change from 0 to 512 [ 186.554556][T12378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.578366][T12378] EXT4-fs (loop4): 1 truncate cleaned up [ 186.590245][T12378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.635771][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 186.635787][ T28] audit: type=1400 audit(2000000355.586:1319): avc: denied { module_load } for pid=12376 comm="syz.4.3167" path="/36/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 186.665961][T12378] Invalid ELF header magic: != ELF [ 186.703730][T10713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.803106][ T3039] 8021q: adding VLAN 0 to HW filter on device eth1 [ 186.867073][T12401] netlink: 'syz.2.3169': attribute type 4 has an invalid length. [ 186.990728][T12421] loop2: detected capacity change from 0 to 1024 [ 187.001828][T12421] EXT4-fs: Ignoring removed bh option [ 187.020710][T12421] EXT4-fs: inline encryption not supported [ 187.027623][T12419] loop4: detected capacity change from 0 to 512 [ 187.044511][T12421] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.075743][T12419] EXT4-fs (loop4): 1 truncate cleaned up [ 187.081701][T12421] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.3175: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.109659][T12419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.121872][T12421] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 187.125038][T12421] EXT4-fs (loop2): Remounting filesystem read-only [ 187.134143][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 187.134168][ C0] EXT4-fs (loop2): initial error at time 2000000356: ext4_map_blocks:791: inode 3: block 2 [ 187.134212][ C0] EXT4-fs (loop2): last error at time 2000000356: ext4_map_blocks:791: inode 3: block 2 [ 187.172112][ T3039] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.201666][T12421] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 187.203363][T12419] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3173: invalid indirect mapped block 4294901760 (level 0) [ 187.219983][T12421] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 187.252544][T12419] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 187.253985][T12419] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3173: invalid indirect mapped block 4294967295 (level 1) [ 187.263862][T12421] EXT4-fs (loop2): 1 orphan inode deleted [ 187.323194][T12421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.329145][ T28] audit: type=1400 audit(2000000356.276:1320): avc: denied { rmdir } for pid=12416 comm="syz.4.3173" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.358153][T12419] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 187.378244][T12419] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3173: invalid indirect mapped block 65535 (level 2) [ 187.401341][T12419] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 187.513063][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.532700][T10713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.553119][ T28] audit: type=1400 audit(2000000356.496:1321): avc: denied { ioctl } for pid=12452 comm="syz.9.3184" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.686088][ T3039] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.797101][T12487] program syz.4.3195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.823941][T12488] loop2: detected capacity change from 0 to 1024 [ 187.861015][T12488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.959473][T12509] __nla_validate_parse: 5 callbacks suppressed [ 187.959488][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 187.995394][ T28] audit: type=1400 audit(2000000356.946:1322): avc: denied { rename } for pid=12486 comm="syz.2.3194" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 187.995451][T12488] EXT4-fs warning (device loop2): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 188.063783][ T3039] 8021q: adding VLAN 0 to HW filter on device eth4 [ 188.121953][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.173653][ T28] audit: type=1400 audit(2000000357.116:1323): avc: denied { setcheckreqprot } for pid=12526 comm="syz.2.3204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 188.200402][T12529] loop2: detected capacity change from 0 to 2048 [ 188.225616][T12529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.299996][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.442923][T12560] batman_adv: batadv0: Adding interface: macsec2 [ 188.457468][T12560] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 188.486747][T12560] batman_adv: batadv0: Interface activated: macsec2 [ 188.521621][ T28] audit: type=1326 audit(2000000357.466:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.0.3215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc49ba6c819 code=0x0 [ 188.680083][T12586] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3216'. [ 188.724809][ T28] audit: type=1400 audit(2000000357.676:1325): avc: denied { shutdown } for pid=12592 comm="syz.9.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.776976][ T28] audit: type=1400 audit(2000000357.726:1326): avc: denied { connect } for pid=12599 comm="syz.9.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.953166][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 188.960626][T12628] rock: directory entry would overflow storage [ 188.967180][T12628] rock: sig=0x5245, size=8, remaining=5 [ 189.115018][ T3039] 8021q: adding VLAN 0 to HW filter on device eth6 [ 189.244932][ T3039] 8021q: adding VLAN 0 to HW filter on device eth7 [ 189.464189][T12694] set_capacity_and_notify: 1 callbacks suppressed [ 189.464225][T12694] loop2: detected capacity change from 0 to 512 [ 189.515779][T12694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.566526][T12694] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.589462][T12714] loop8: detected capacity change from 0 to 128 [ 189.606409][T12714] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 189.617069][T12714] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.660018][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.670569][T12714] ext2 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.876480][T10056] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.030208][T12759] program syz.2.3247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.652267][T12817] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 190.685777][T12817] syzkaller1: linktype set to 272 [ 191.022208][T12842] loop8: detected capacity change from 0 to 512 [ 191.072127][T12842] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 191.081316][T12846] team0: Device gtp0 is of different type [ 191.099731][T12842] EXT4-fs error (device loop8): ext4_iget_extra_inode:5042: inode #15: comm syz.8.3266: corrupted in-inode xattr: e_value size too large [ 191.122134][T12842] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.122266][T12842] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3266: couldn't read orphan inode 15 (err -117) [ 191.131624][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 191.131647][ C1] EXT4-fs (loop8): initial error at time 2000000360: ext4_iget_extra_inode:5042: inode 15 [ 191.131687][ C1] EXT4-fs (loop8): last error at time 2000000360: ext4_iget_extra_inode:5042: inode 15 [ 191.177826][T12842] loop8: lost filesystem error report for type 5 error -117 [ 191.179876][T12842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.326992][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.371126][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 191.402479][T12867] loop8: detected capacity change from 0 to 512 [ 191.409369][T12864] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3274'. [ 191.422167][T12867] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 191.437190][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 191.459520][T12867] EXT4-fs (loop8): orphan file too big: 4294967295 [ 191.472282][T12867] EXT4-fs (loop8): mount failed [ 191.524467][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3273'. [ 191.585396][T12880] loop4: detected capacity change from 0 to 256 [ 191.642495][ T28] kauditd_printk_skb: 5931 callbacks suppressed [ 191.642513][ T28] audit: type=1326 audit(2000000360.596:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.9.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed99c819 code=0x50000 [ 191.707170][ T28] audit: type=1326 audit(2000000360.596:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.9.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed99c819 code=0x50000 [ 191.736861][ T28] audit: type=1326 audit(2000000360.596:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.9.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed99c819 code=0x50000 [ 191.805727][T12895] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.815799][ T28] audit: type=1326 audit(2000000360.596:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.9.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed99c819 code=0x50000 [ 191.829072][T12895] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 191.883633][T12895] audit: backlog limit exceeded [ 191.896268][ T28] audit: type=1326 audit(2000000360.596:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.9.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed99c819 code=0x50000 [ 191.934266][ T28] audit: type=1326 audit(2000000360.596:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.9.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed99c819 code=0x50000 [ 191.994072][T12908] loop4: detected capacity change from 0 to 164 [ 192.000584][ T28] audit: type=1326 audit(2000000360.596:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.9.3237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed99c819 code=0x50000 [ 192.037224][T12908] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 192.094375][T12911] loop8: detected capacity change from 0 to 1024 [ 192.115419][T12911] EXT4-fs: Ignoring removed orlov option [ 192.146844][T12911] EXT4-fs: Ignoring removed nobh option [ 192.184492][T12911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.270300][T12911] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3293: bg 0: block 312: padding at end of block bitmap is not set [ 192.343650][T12911] EXT4-fs (loop8): Remounting filesystem read-only [ 192.417894][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.967457][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3309'. [ 193.436205][T12976] loop9: detected capacity change from 0 to 8192 [ 193.440672][T12986] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 193.454611][T12976] vfat: Unknown parameter './file2' [ 193.460953][T12986] pim6reg1: group set to 0 [ 193.589281][T12990] SELinux: failed to load policy [ 193.721242][T12998] loop4: detected capacity change from 0 to 256 [ 193.741919][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3333'. [ 193.769422][T13000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3333'. [ 193.886279][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3339'. [ 194.024074][T13014] loop9: detected capacity change from 0 to 8192 [ 194.449128][T13062] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.465466][T13067] program syz.2.3365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.478235][T13062] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.539003][T13071] set_capacity_and_notify: 2 callbacks suppressed [ 194.539021][T13071] loop2: detected capacity change from 0 to 512 [ 194.542669][T13062] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3364: bg 0: block 112: padding at end of block bitmap is not set [ 194.569789][T13071] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3367: inode has both inline data and extents flags [ 194.592788][T13071] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.592896][T13071] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3367: couldn't read orphan inode 15 (err -117) [ 194.602144][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 194.602178][ C0] EXT4-fs (loop2): initial error at time 2000000363: ext4_orphan_get:1397: inode 15 [ 194.602218][ C0] EXT4-fs (loop2): last error at time 2000000363: ext4_orphan_get:1397: inode 15 [ 194.631027][ T30] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm kworker/u8:1: lblock 3 mapped to illegal pblock 3 (length 3) [ 194.654916][T13071] loop2: lost filesystem error report for type 5 error -117 [ 194.657177][T13071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.666933][ T30] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 194.701751][ T30] EXT4-fs (loop9): This should not happen!! Data will be lost [ 194.701751][ T30] [ 194.713622][ T30] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 5) [ 194.744776][ T30] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 194.757188][ T30] EXT4-fs (loop9): This should not happen!! Data will be lost [ 194.757188][ T30] [ 194.770840][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.788107][T10058] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 194.800334][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.820412][T13087] loop2: detected capacity change from 0 to 512 [ 194.865425][T13087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.879288][T13087] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.934844][ T9632] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 194.968385][ T9632] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 194.980980][ T9632] EXT4-fs (loop2): This should not happen!! Data will be lost [ 194.980980][ T9632] [ 194.990824][ T9632] EXT4-fs (loop2): Total free blocks count 0 [ 194.997153][ T9632] EXT4-fs (loop2): Free/Dirty block details [ 195.003102][ T9632] EXT4-fs (loop2): free_blocks=65280 [ 195.011762][ T9632] EXT4-fs (loop2): dirty_blocks=31 [ 195.021657][ T9632] EXT4-fs (loop2): Block reservation details [ 195.033008][ T9632] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 195.048393][T10884] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 195.063114][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.078787][T13115] loop8: detected capacity change from 0 to 512 [ 195.121194][T13115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.154472][T13115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.172764][T13115] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.227092][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.332938][T13146] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3390'. [ 195.497812][T13172] loop4: detected capacity change from 0 to 512 [ 195.514053][T13172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.580283][T13172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.603302][T13172] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.665695][T13188] program syz.8.3404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.738641][T10713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.761712][T13198] loop5: detected capacity change from 0 to 7 [ 195.944270][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.958910][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.968188][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 195.976065][ C0] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.985430][ C0] Buffer I/O error on dev loop5, logical block 1, async page read [ 195.993388][ C0] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.002642][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 196.010521][ C0] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.010774][T13217] sctp: [Deprecated]: syz.0.3410 (pid 13217) Use of int in max_burst socket option deprecated. [ 196.010774][T13217] Use struct sctp_assoc_value instead [ 196.019950][ C0] Buffer I/O error on dev loop5, logical block 3, async page read [ 196.019982][ C0] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.020005][ C0] Buffer I/O error on dev loop5, logical block 4, async page read [ 196.020050][ C0] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.069988][ C0] Buffer I/O error on dev loop5, logical block 5, async page read [ 196.077941][ C0] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.087093][ C0] Buffer I/O error on dev loop5, logical block 6, async page read [ 196.116947][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.126341][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 196.134347][ C0] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.143516][ C0] Buffer I/O error on dev loop5, logical block 1, async page read [ 196.151451][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 196.208494][T13225] loop8: detected capacity change from 0 to 764 [ 196.818649][T13310] Cannot find add_set index 0 as target [ 197.069744][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3439'. [ 197.080548][T13344] netlink: 'syz.4.3439': attribute type 5 has an invalid length. [ 197.212117][T13368] netlink: 'syz.2.3444': attribute type 10 has an invalid length. [ 197.228443][T13368] veth0_vlan: entered allmulticast mode [ 197.241012][T13368] veth0_vlan: left promiscuous mode [ 197.247758][T13368] veth0_vlan: entered promiscuous mode [ 197.263135][T13368] team0: Device veth0_vlan failed to register rx_handler [ 198.043659][ T28] kauditd_printk_skb: 3328 callbacks suppressed [ 198.043678][ T28] audit: type=1400 audit(2000000366.996:10593): avc: denied { read } for pid=13412 comm="syz.0.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.312174][T13373] can0: slcan on ttyS3. [ 200.381640][T13373] can0 (unregistered): slcan off ttyS3. [ 200.459315][T13434] program syz.8.3467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.490856][T13437] netlink: 'syz.8.3468': attribute type 6 has an invalid length. [ 201.627957][T13493] loop9: detected capacity change from 0 to 4096 [ 201.651884][T13503] loop4: detected capacity change from 0 to 2048 [ 201.660385][T13493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.694541][T13503] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 201.752875][T13503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.759609][T13493] Quota error (device loop9): do_check_range: Getting block 327680 out of range 0-5 [ 201.849873][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.892261][T10713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.905188][T13539] loop2: detected capacity change from 0 to 4096 [ 201.920497][T13539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.007683][T13539] Quota error (device loop2): do_check_range: Getting block 327680 out of range 0-5 [ 202.037711][T13557] macvlan2: entered allmulticast mode [ 202.043427][T13557] bridge0: entered allmulticast mode [ 202.050388][T13557] bridge0: port 3(macvlan2) entered blocking state [ 202.057329][T13557] bridge0: port 3(macvlan2) entered disabled state [ 202.076118][T13557] bridge0: left allmulticast mode [ 202.120933][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.263609][T13585] loop9: detected capacity change from 0 to 512 [ 202.275260][T13585] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.333590][T13596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3512'. [ 202.344768][T13596] netlink: 'syz.2.3512': attribute type 12 has an invalid length. [ 202.353849][T13596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3512'. [ 202.375695][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.608081][T13628] loop9: detected capacity change from 0 to 128 [ 202.737122][T13646] loop2: detected capacity change from 0 to 128 [ 202.880506][T13670] loop9: detected capacity change from 0 to 128 [ 202.897364][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.907569][T13670] FAT-fs (loop9): Filesystem has been set read-only [ 202.914641][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.924257][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.938142][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.950432][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.962459][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.971334][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.990038][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.998823][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.007618][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.021707][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.033434][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.042476][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.055928][ T28] audit: type=1400 audit(2000000372.006:10594): avc: denied { create } for pid=13680 comm="syz.8.3534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 203.078642][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.113972][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.123163][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.131872][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.165998][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.182486][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.183596][T13691] sd 0:0:1:0: device reset [ 203.211259][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.238079][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.261586][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.281608][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.308195][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.325220][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.334598][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.362935][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.379780][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.399281][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.416263][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.465768][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.498075][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.528217][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.548749][T13737] loop2: detected capacity change from 0 to 512 [ 203.559908][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.568690][T13738] sock: sock_set_timeout: `syz.8.3549' (pid 13738) tries to set negative timeout [ 203.578564][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.587932][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.598095][T13737] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 203.609133][T13737] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.3550: inode has both inline data and extents flags [ 203.639183][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.652400][T13737] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 203.654394][T13737] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3550: couldn't read orphan inode 13 (err -117) [ 203.663602][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 203.663623][ C0] EXT4-fs (loop2): initial error at time 2000000372: ext4_orphan_get:1397: inode 13 [ 203.663655][ C0] EXT4-fs (loop2): last error at time 2000000372: ext4_orphan_get:1397: inode 13 [ 203.711042][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.723350][T13670] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.757888][ T28] audit: type=1400 audit(2000000372.706:10595): avc: denied { unmount } for pid=10058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 203.799766][T13737] loop2: lost filesystem error report for type 5 error -117 [ 203.800594][T13737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.839634][ T28] audit: type=1400 audit(2000000372.786:10596): avc: denied { write } for pid=13734 comm="syz.2.3550" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 203.926359][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.043258][ T28] audit: type=1400 audit(2000000372.996:10597): avc: denied { ioctl } for pid=13756 comm="syz.8.3558" path="socket:[37260]" dev="sockfs" ino=37260 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.865876][T13814] loop2: detected capacity change from 0 to 256 [ 204.913613][T13814] FAT-fs (loop2): Directory bread(block 64) failed [ 204.935859][T13814] FAT-fs (loop2): Directory bread(block 65) failed [ 204.960495][T13814] FAT-fs (loop2): Directory bread(block 66) failed [ 204.980340][T13814] FAT-fs (loop2): Directory bread(block 67) failed [ 204.995429][T13814] FAT-fs (loop2): Directory bread(block 68) failed [ 205.005593][T13814] FAT-fs (loop2): Directory bread(block 69) failed [ 205.012659][T13814] FAT-fs (loop2): Directory bread(block 70) failed [ 205.019384][T13814] FAT-fs (loop2): Directory bread(block 71) failed [ 205.026661][T13814] FAT-fs (loop2): Directory bread(block 72) failed [ 205.033542][T13814] FAT-fs (loop2): Directory bread(block 73) failed [ 205.044518][ T28] audit: type=1400 audit(2000000373.996:10598): avc: denied { mount } for pid=13813 comm="syz.2.3574" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 205.559544][T13834] loop4: detected capacity change from 0 to 1024 [ 205.590737][T13834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.632289][T13834] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.690783][ T9632] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 205.728907][ T9632] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 205.764921][ T9632] EXT4-fs (loop4): This should not happen!! Data will be lost [ 205.764921][ T9632] [ 205.778098][T10713] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 205.801166][T10713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.975618][T13867] program syz.2.3597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.061758][T13877] GUP no longer grows the stack in syz.9.3601 (13877): 200000009000-20000000a000 (200000005000) [ 206.081846][T13877] CPU: 0 UID: 0 PID: 13877 Comm: syz.9.3601 Not tainted syzkaller #0 PREEMPT(full) [ 206.081878][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 206.081891][T13877] Call Trace: [ 206.081897][T13877] [ 206.081907][T13877] __dump_stack+0x1d/0x30 [ 206.081935][T13877] dump_stack_lvl+0x95/0xd0 [ 206.081962][T13877] dump_stack+0x15/0x1b [ 206.081986][T13877] __get_user_pages+0x1b26/0x1f10 [ 206.082077][T13877] ? __memcg_slab_free_hook+0xde/0x2f0 [ 206.082106][T13877] ? percpu_counter_add_batch+0xb6/0x130 [ 206.082198][T13877] ? __mt_destroy+0xce/0xe0 [ 206.082288][T13877] __gup_longterm_locked+0x8d7/0xe30 [ 206.082318][T13877] ? __rcu_read_lock+0x36/0x50 [ 206.082369][T13877] ? try_grab_folio_fast+0x208/0x5a0 [ 206.082397][T13877] ? __pte_offset_map+0xef/0x150 [ 206.082418][T13877] gup_fast_fallback+0x1f2/0x1410 [ 206.082512][T13877] get_user_pages_fast+0x5f/0x90 [ 206.082618][T13877] __iov_iter_get_pages_alloc+0x24c/0x640 [ 206.082655][T13877] iov_iter_get_pages2+0x5e/0xa0 [ 206.082683][T13877] __se_sys_vmsplice+0x50b/0x1050 [ 206.082822][T13877] __x64_sys_vmsplice+0x55/0x70 [ 206.082908][T13877] x64_sys_call+0x28e9/0x3020 [ 206.082936][T13877] do_syscall_64+0x12c/0x3b0 [ 206.083025][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.083046][T13877] RIP: 0033:0x7efeed99c819 [ 206.083071][T13877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.083092][T13877] RSP: 002b:00007efeec3ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 206.083144][T13877] RAX: ffffffffffffffda RBX: 00007efeedc15fa0 RCX: 00007efeed99c819 [ 206.083158][T13877] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 206.083246][T13877] RBP: 00007efeeda32c91 R08: 0000000000000000 R09: 0000000000000000 [ 206.083259][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.083271][T13877] R13: 00007efeedc16038 R14: 00007efeedc15fa0 R15: 00007fff0c0e6f18 [ 206.083288][T13877] [ 206.311384][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3605'. [ 206.390048][T13890] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3609'. [ 206.676342][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3621'. [ 206.704698][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3621'. [ 206.756057][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3621'. [ 206.794011][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3621'. [ 206.816511][T13918] netlink: 'syz.0.3621': attribute type 6 has an invalid length. [ 206.926614][T13935] ªªªªªª: renamed from vlan0 (while UP) [ 206.955554][T13933] loop8: detected capacity change from 0 to 4096 [ 206.974971][T13933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.001283][ T28] audit: type=1400 audit(2000000375.946:10599): avc: denied { add_name } for pid=13932 comm="syz.8.3628" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 207.023462][ T28] audit: type=1400 audit(2000000375.946:10600): avc: denied { rename } for pid=13932 comm="syz.8.3628" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.046682][ T28] audit: type=1400 audit(2000000375.946:10601): avc: denied { reparent } for pid=13932 comm="syz.8.3628" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.069800][ T28] audit: type=1400 audit(2000000375.946:10602): avc: denied { remove_name } for pid=13932 comm="syz.8.3628" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 207.101655][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.324036][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3644'. [ 207.373530][T13972] loop9: detected capacity change from 0 to 512 [ 207.395718][T13976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3648'. [ 207.506336][T13984] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3652'. [ 207.523799][T13984] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3652'. [ 207.538296][T13984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3652'. [ 207.769999][ T28] audit: type=1400 audit(2000000376.716:10603): avc: denied { accept } for pid=14018 comm="syz.9.3669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 207.888279][T14032] netem: change failed [ 208.132843][T14064] loop4: detected capacity change from 0 to 256 [ 208.140707][T14064] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.175951][T14063] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 208.184673][T14063] FAT-fs (loop4): Filesystem has been set read-only [ 208.191416][T14063] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 208.200548][T14063] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 208.208931][T14063] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 208.355899][T14084] tun0: tun_chr_ioctl cmd 1074025681 [ 208.377981][T14088] pim6reg: entered allmulticast mode [ 208.385082][T14088] pim6reg: left allmulticast mode [ 208.464355][T14096] loop8: detected capacity change from 0 to 512 [ 208.472313][T14096] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 208.484240][T14096] EXT4-fs (loop8): 1 truncate cleaned up [ 208.492547][T14096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.519387][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.554511][T14104] loop8: detected capacity change from 0 to 128 [ 208.561492][T14104] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 208.579409][T14104] VFS: Lookup of 'file0' in vfat loop8 would have caused loop [ 208.600868][ T49] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 208.621265][T14110] sch_fq: defrate 0 ignored. [ 208.667951][T14116] bridge0: entered promiscuous mode [ 208.673327][T14116] macvlan2: entered allmulticast mode [ 208.678717][T14116] bridge0: entered allmulticast mode [ 208.685996][T14116] bridge0: port 3(macvlan2) entered blocking state [ 208.693370][T14116] bridge0: port 3(macvlan2) entered disabled state [ 208.701739][T14116] bridge0: left allmulticast mode [ 208.707067][T14116] bridge0: left promiscuous mode [ 208.773775][T14123] loop2: detected capacity change from 0 to 1024 [ 208.780540][T14123] EXT4-fs: Ignoring removed orlov option [ 208.790954][T14123] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.3717: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 208.811210][T14123] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 208.811375][T14123] EXT4-fs error (device loop2): ext4_quota_enable:7222: comm syz.2.3717: Bad quota inode: 4, type: 1 [ 208.820802][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 208.820844][ C0] EXT4-fs (loop2): initial error at time 2000000000: ext4_ext_check_inode:521: inode 4 [ 208.820874][ C0] EXT4-fs (loop2): last error at time 2000000000: ext4_ext_check_inode:521: inode 4 [ 208.858237][T14123] loop2: lost filesystem error report for type 5 error -117 [ 208.861576][T14123] EXT4-fs warning (device loop2): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.884002][T14123] EXT4-fs (loop2): mount failed [ 208.922755][T14123] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3717'. [ 208.939466][T14137] loop9: detected capacity change from 0 to 128 [ 209.176690][T14166] bond1 (unregistering): Released all slaves [ 209.248489][ T28] audit: type=1400 audit(2000000001.190:10604): avc: denied { watch watch_reads } for pid=14181 comm="syz.9.3744" path="/210/file1" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 209.383549][T14197] netlink: 4556 bytes leftover after parsing attributes in process `syz.9.3751'. [ 209.583241][ T28] audit: type=1400 audit(2000000001.530:10605): avc: denied { shutdown } for pid=14220 comm="syz.8.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.822504][T14252] loop8: detected capacity change from 0 to 512 [ 209.832327][T14252] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 209.851967][T14252] EXT4-fs (loop8): 1 orphan inode deleted [ 209.874293][T14252] EXT4-fs (loop8): 1 truncate cleaned up [ 209.899070][T14252] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.973973][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.039934][T14261] loop8: detected capacity change from 0 to 1024 [ 210.073105][T14261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.103589][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.319889][T14287] netlink: 'syz.0.3792': attribute type 2 has an invalid length. [ 210.328042][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3792'. [ 210.490016][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3804'. [ 210.499534][T14308] loop8: detected capacity change from 0 to 1764 [ 210.524665][T14312] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 210.532701][T14314] program syz.9.3805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.546446][T14312] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 210.571002][ T28] audit: type=1400 audit(2000000002.510:10606): avc: denied { getopt } for pid=14316 comm="syz.9.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.823008][T14353] EXT4-fs: Ignoring removed bh option [ 210.850764][T14353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.869775][T14353] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.904870][T14353] EXT4-fs (loop2): re-mounted 00000000-0000-0006-0000-000000000000. [ 210.917062][T14371] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.937845][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.958549][T14370] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 210.963559][T14373] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.977824][T14370] FAT-fs (loop8): Filesystem has been set read-only [ 210.987255][T14370] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 210.995516][T14370] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 211.003692][T14370] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 211.016253][T14373] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 211.124260][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.186130][ T28] audit: type=1400 audit(2000000003.130:10607): avc: denied { nlmsg_read } for pid=14402 comm="syz.9.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 211.211689][T14399] Falling back ldisc for ttyS3. [ 211.322850][T14418] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3852'. [ 211.538636][T14420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.552586][T14420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.639072][T14443] program syz.8.3864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.703075][T14451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3868'. [ 211.723693][T14451] ipvlan2: entered allmulticast mode [ 211.731336][T14451] syz_tun: entered allmulticast mode [ 211.891843][T14462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.916289][T14464] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.975078][T14468] set_capacity_and_notify: 6 callbacks suppressed [ 211.975094][T14468] loop8: detected capacity change from 0 to 256 [ 212.119481][T14480] loop9: detected capacity change from 0 to 512 [ 212.122576][T14476] loop2: detected capacity change from 0 to 8192 [ 212.151460][T14480] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 212.174598][T14480] EXT4-fs error (device loop9): ext4_iget_extra_inode:5042: inode #15: comm syz.9.3880: corrupted in-inode xattr: e_value size too large [ 212.189354][T14480] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.189613][T14480] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3880: couldn't read orphan inode 15 (err -117) [ 212.199030][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 212.199053][ C0] EXT4-fs (loop9): initial error at time 2000000004: ext4_iget_extra_inode:5042: inode 15 [ 212.199090][ C0] EXT4-fs (loop9): last error at time 2000000004: ext4_iget_extra_inode:5042: inode 15 [ 212.237216][T14480] loop9: lost filesystem error report for type 5 error -117 [ 212.239348][T14480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.273188][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.379477][T14504] syz.2.3892 (14504): /proc/14503/oom_adj is deprecated, please use /proc/14503/oom_score_adj instead. [ 212.401365][T14506] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 212.408639][T14508] loop2: detected capacity change from 0 to 7 [ 212.419571][T14506] __nla_validate_parse: 2 callbacks suppressed [ 212.419589][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3894'. [ 212.561326][T14524] loop2: detected capacity change from 0 to 1024 [ 212.574348][T14524] ext3: Unknown parameter 'noacl' [ 212.877967][T14545] loop2: detected capacity change from 0 to 512 [ 212.890309][T14545] EXT4-fs: Ignoring removed bh option [ 212.907692][T14545] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 212.919714][T14545] EXT4-fs error (device loop2): ext4_iget_extra_inode:5042: inode #15: comm syz.2.3911: corrupted in-inode xattr: e_value size too large [ 212.945503][T14548] loop8: detected capacity change from 0 to 2048 [ 212.953520][T14545] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.953709][T14545] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3911: couldn't read orphan inode 15 (err -117) [ 212.963048][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 212.963071][ C0] EXT4-fs (loop2): initial error at time 2000000004: ext4_iget_extra_inode:5042: inode 15 [ 212.963122][ C0] EXT4-fs (loop2): last error at time 2000000004: ext4_iget_extra_inode:5042: inode 15 [ 213.003080][T14545] loop2: lost filesystem error report for type 5 error -117 [ 213.005723][T14545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.036172][T14548] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.051157][T10884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.094467][T14548] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.119855][ T28] audit: type=1400 audit(2000000005.060:10608): avc: denied { write } for pid=14554 comm="syz.2.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.159809][ T28] audit: type=1400 audit(2000000005.090:10609): avc: denied { setattr } for pid=14546 comm="syz.8.3912" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 213.190704][T10056] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.675824][T14589] bond1: option miimon: invalid value (18446744073709551615) [ 213.707077][T14589] bond1: option miimon: allowed values 0 - 2147483647 [ 213.715611][T14589] bond1 (unregistering): Released all slaves [ 213.988665][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 214.516392][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3963'. [ 214.582465][ T28] audit: type=1400 audit(2000000006.530:10610): avc: denied { audit_write } for pid=14671 comm="syz.9.3966" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.584514][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 214.615503][T14676] tipc: Started in network mode [ 214.620436][T14676] tipc: Node identity 2, cluster identity 6 [ 214.624314][ T28] audit: type=1107 audit(2000000006.530:10611): pid=14671 uid=0 auid=0 ses=1 subj=root:sysadm_r:sysadm_t msg='' [ 214.626505][T14676] tipc: Node number set to 2 [ 214.800002][ T3480] IPVS: starting estimator thread 0... [ 214.901622][T14700] IPVS: using max 2352 ests per chain, 117600 per kthread [ 214.932159][T14714] loop9: detected capacity change from 0 to 512 [ 214.951079][T14714] ------------[ cut here ]------------ [ 214.956872][T14714] EA inode 11 i_nlink=2 [ 214.956887][T14714] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.9.3986/14714 [ 214.972103][T14714] Modules linked in: [ 214.976041][T14714] CPU: 1 UID: 0 PID: 14714 Comm: syz.9.3986 Not tainted syzkaller #0 PREEMPT(full) [ 214.985524][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.995688][T14714] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 215.002497][T14714] Code: 14 cd 98 ff 4c 8d 2d dd 09 5d 05 49 8d 7e 40 e8 a4 73 b6 ff 49 8b 6e 40 4c 89 e7 e8 d8 6e b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 04 dd 03 66 66 66 66 66 66 2e [ 215.022443][T14714] RSP: 0018:ffffc900038db778 EFLAGS: 00010246 [ 215.028626][T14714] RAX: ffff8881019a2cf8 RBX: ffff888107dd1298 RCX: ffffffff81c07228 [ 215.036985][T14714] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d7bf0 [ 215.045849][T14714] RBP: 000000000000000b R08: 0001888107dd124b R09: 0000000000000000 [ 215.053922][T14714] R10: ffffc900038db6a8 R11: 0001c900038db6a8 R12: ffff888107dd1248 [ 215.062119][T14714] R13: ffffffff871d7bf0 R14: ffff888107dd1200 R15: 0000000000000001 [ 215.070237][T14714] FS: 00007efeec3ef6c0(0000) GS:ffff8882ae9d4000(0000) knlGS:0000000000000000 [ 215.079266][T14714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.085994][T14714] CR2: 00007f676ad91000 CR3: 0000000113ce0000 CR4: 00000000003506f0 [ 215.094110][T14714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.102144][T14714] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 215.110244][T14714] Call Trace: [ 215.114078][T14714] [ 215.117028][T14714] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 215.123024][T14714] ? errseq_check+0x2c/0x50 [ 215.127776][T14714] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 215.133383][T14714] ? ext4_truncate+0x92b/0xaa0 [ 215.138248][T14714] ext4_evict_inode+0xb16/0xe30 [ 215.143188][T14714] ? __pfx_ext4_evict_inode+0x10/0x10 [ 215.148681][T14714] evict+0x2af/0x510 [ 215.152679][T14714] ? __dquot_initialize+0x146/0x7c0 [ 215.157950][T14714] iput+0x41a/0x580 [ 215.161960][T14714] ext4_process_orphan+0x1a9/0x1c0 [ 215.167110][T14714] ext4_orphan_cleanup+0x6a2/0xa00 [ 215.172356][T14714] ext4_fill_super+0x3408/0x37c0 [ 215.177325][T14714] ? set_blocksize+0x14c/0x270 [ 215.182145][T14714] ? setup_bdev_super+0x30e/0x370 [ 215.187252][T14714] ? __pfx_ext4_fill_super+0x10/0x10 [ 215.192703][T14714] get_tree_bdev_flags+0x291/0x300 [ 215.197841][T14714] ? __pfx_ext4_fill_super+0x10/0x10 [ 215.203308][T14714] get_tree_bdev+0x1f/0x30 [ 215.207758][T14714] ext4_get_tree+0x1c/0x30 [ 215.212346][T14714] vfs_get_tree+0x57/0x1d0 [ 215.217045][T14714] do_new_mount+0x288/0x8d0 [ 215.221687][T14714] path_mount+0x4d0/0xbc0 [ 215.226413][T14714] __se_sys_mount+0x28c/0x2e0 [ 215.231600][T14714] __x64_sys_mount+0x67/0x80 [ 215.236277][T14714] x64_sys_call+0x2d61/0x3020 [ 215.241027][T14714] do_syscall_64+0x12c/0x3b0 [ 215.245705][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.251705][T14714] RIP: 0033:0x7efeed99da8a [ 215.256258][T14714] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.256262][ T28] audit: type=1400 audit(2000000007.190:10612): avc: denied { getopt } for pid=14729 comm="syz.8.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 215.256364][T14714] ================================================================== [ 215.256398][T14714] BUG: KCSAN: data-race in data_push_tail / string [ 215.256438][T14714] [ 215.256454][T14714] write to 0xffffffff893be288 of 1 bytes by task 28 on cpu 0: [ 215.256472][T14714] string+0x187/0x220 [ 215.256502][T14714] vsnprintf+0x532/0x860 [ 215.256532][T14714] vscnprintf+0x41/0x90 [ 215.256566][T14714] printk_sprint+0x30/0x2b0 [ 215.256592][T14714] vprintk_store+0x57b/0x910 [ 215.256617][T14714] vprintk_emit+0x1a4/0x600 [ 215.256638][T14714] vprintk_default+0x26/0x30 [ 215.256664][T14714] vprintk+0x1d/0x30 [ 215.256697][T14714] _printk+0x79/0xa0 [ 215.256716][T14714] kauditd_hold_skb+0x1b1/0x1c0 [ 215.256744][T14714] kauditd_send_queue+0x273/0x2c0 [ 215.256771][T14714] kauditd_thread+0x444/0x670 [ 215.256802][T14714] kthread+0x22a/0x280 [ 215.256827][T14714] ret_from_fork+0x146/0x330 [ 215.256847][T14714] ret_from_fork_asm+0x1a/0x30 [ 215.256874][T14714] [ 215.256883][T14714] read to 0xffffffff893be288 of 8 bytes by task 14714 on cpu 1: [ 215.256903][T14714] data_push_tail+0x100/0x470 [ 215.256928][T14714] data_alloc+0x11b/0x390 [ 215.256950][T14714] prb_reserve+0x8d7/0xae0 [ 215.256972][T14714] vprintk_store+0x54a/0x910 [ 215.256998][T14714] vprintk_emit+0x1a4/0x600 [ 215.257024][T14714] vprintk_default+0x26/0x30 [ 215.257049][T14714] vprintk+0x1d/0x30 [ 215.257077][T14714] _printk+0x79/0xa0 [ 215.257099][T14714] show_opcodes+0xfd/0x120 [ 215.257118][T14714] show_iret_regs+0x12/0x40 [ 215.257143][T14714] __show_regs+0x2a/0x430 [ 215.257171][T14714] __show_trace_log_lvl+0x38f/0x560 [ 215.257203][T14714] __warn+0x159/0x330 [ 215.257219][T14714] __report_bug+0x241/0x490 [ 215.257241][T14714] report_bug_entry+0xb2/0x100 [ 215.257269][T14714] handle_bug+0xce/0x200 [ 215.257296][T14714] exc_invalid_op+0x1a/0x50 [ 215.257323][T14714] asm_exc_invalid_op+0x1a/0x20 [ 215.257340][T14714] ext4_xattr_inode_update_ref+0x332/0x350 [ 215.257362][T14714] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 215.257400][T14714] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 215.257428][T14714] ext4_evict_inode+0xb16/0xe30 [ 215.257465][T14714] evict+0x2af/0x510 [ 215.257490][T14714] iput+0x41a/0x580 [ 215.257508][T14714] ext4_process_orphan+0x1a9/0x1c0 [ 215.257534][T14714] ext4_orphan_cleanup+0x6a2/0xa00 [ 215.257562][T14714] ext4_fill_super+0x3408/0x37c0 [ 215.257586][T14714] get_tree_bdev_flags+0x291/0x300 [ 215.257621][T14714] get_tree_bdev+0x1f/0x30 [ 215.257651][T14714] ext4_get_tree+0x1c/0x30 [ 215.257673][T14714] vfs_get_tree+0x57/0x1d0 [ 215.257703][T14714] do_new_mount+0x288/0x8d0 [ 215.257722][T14714] path_mount+0x4d0/0xbc0 [ 215.257751][T14714] __se_sys_mount+0x28c/0x2e0 [ 215.257771][T14714] __x64_sys_mount+0x67/0x80 [ 215.257787][T14714] x64_sys_call+0x2d61/0x3020 [ 215.257811][T14714] do_syscall_64+0x12c/0x3b0 [ 215.257831][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.257849][T14714] [ 215.257854][T14714] value changed: 0x00000000ffffea06 -> 0x747865746e6f6373 [ 215.257866][T14714] [ 215.257871][T14714] Reported by Kernel Concurrency Sanitizer on: [ 215.257882][T14714] CPU: 1 UID: 0 PID: 14714 Comm: syz.9.3986 Not tainted syzkaller #0 PREEMPT(full) [ 215.257904][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.257916][T14714] ================================================================== [ 215.626906][T14714] RSP: 002b:00007efeec3eee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.635643][T14714] RAX: ffffffffffffffda RBX: 00007efeec3eeee0 RCX: 00007efeed99da8a [ 215.643844][T14714] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007efeec3eeea0 [ 215.651925][T14714] RBP: 00002000000009c0 R08: 00007efeec3eeee0 R09: 0000000000800718 [ 215.660012][T14714] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 215.668035][T14714] R13: 00007efeec3eeea0 R14: 000000000000048d R15: 0000200000000200 [ 215.676101][T14714] [ 215.679244][T14714] ---[ end trace 0000000000000000 ]--- [ 215.685551][T14714] EXT4-fs (loop9): 1 orphan inode deleted [ 215.691917][T14714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.727611][T10058] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.