last executing test programs: 36.751323479s ago: executing program 4 (id=553): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, 0x0) 36.667102214s ago: executing program 4 (id=557): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f00000001c0)=0x0) dup3(r0, r1, 0x80000) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) fcntl$setstatus(r0, 0x4, 0x2400) write(r1, 0x0, 0x0) 36.598936967s ago: executing program 4 (id=561): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 35.699420247s ago: executing program 4 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10f18c0, 0x0) 35.698937957s ago: executing program 4 (id=603): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0xff03, 0x3c8, 0xe8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @loopback, 0xffffffff, 0xffffff00, 0x4, 0x10, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'sit0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x5, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 35.503115228s ago: executing program 4 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x7f, 0x32, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x3, 0x0}}, "15944cda148281bb"}}}}}, 0x36) 35.490337069s ago: executing program 32 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x6005}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x88a8, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x7f, 0x32, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x3, 0x0}}, "15944cda148281bb"}}}}}, 0x36) 26.551388922s ago: executing program 0 (id=876): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 26.482629496s ago: executing program 0 (id=880): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a000}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 26.41488782s ago: executing program 0 (id=883): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x3080, 0x1, 0x69}, &(0x7f0000000500)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 26.358902223s ago: executing program 0 (id=886): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x14) 26.283424897s ago: executing program 0 (id=891): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 26.210848981s ago: executing program 0 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 14.504058138s ago: executing program 3 (id=1134): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = dup2(r1, r0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) 14.012480105s ago: executing program 3 (id=1140): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x600000, 0x0, &(0x7f00007fc000/0x600000)=nil) socket$inet_smc(0x2b, 0x1, 0x0) 12.995378842s ago: executing program 3 (id=1149): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1, &(0x7f0000000400)=""/185, 0xb9}, 0xbf}], 0x1, 0x12120, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) 12.131825079s ago: executing program 3 (id=1165): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7c8, &(0x7f0000001280)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x8000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 11.896842912s ago: executing program 3 (id=1171): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x4008821) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000000)=@ccm_128={{0x285}, "803a2cfac8e86208", "21bc33000e84b3d377a8de853555fb3f", "d7233fe3", "e7d152ba4beb13ec"}, 0x28) 11.22282844s ago: executing program 3 (id=1183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "b85922d0edb7d594", "e5f5ad28a34bc428e5a9ac5b8481b87e", "080ae815", "36cfafeb69dcec6d"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="ec", 0x1}, {&(0x7f0000000300)="75ae3314bc2b86e9e2aeb0fe71db9aba27138f40b45eb2dca0c6d2490557bf", 0x1f}], 0x2) 11.185565251s ago: executing program 33 (id=895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 11.183871731s ago: executing program 34 (id=1183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "b85922d0edb7d594", "e5f5ad28a34bc428e5a9ac5b8481b87e", "080ae815", "36cfafeb69dcec6d"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="ec", 0x1}, {&(0x7f0000000300)="75ae3314bc2b86e9e2aeb0fe71db9aba27138f40b45eb2dca0c6d2490557bf", 0x1f}], 0x2) 6.112397292s ago: executing program 2 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x1}, 0xfff7}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='cpu==0~|!?q\xf7\n[\xb6\x10\xe4\xd5\x1aP.\x13\x8fE`\x19\xe5v\xd6\x9f\x14_\x00\x00\xca\xd3>\x82\x818\x8c\x89\xae>\x03\xbbM{+\x89\x84=\xd2zaSDU\xfbBR:\n$\x8fR\xbd\x12\xdcFJ\xb0\xbc[\x03/\x1c\x9a\x005\x8f\xd2\xbf\xfe\x1a\r\x1c\x8bL\xd3$\xca\xa4\xb6\xddjT\xf1\x97\xf8\x16\xf0\xd6M\xd2\xe1\xfeC\xca\x9b\xf2\xdd6\xae\x17h\x12P\v\xaa\xa7\x01\xf0w\xcf\xf2c \x98\x99\x88i\x05m\xe4\r\xbd\x0ex\xc4l\x84\xcd~\xdf\xe3\x925\xec\xf0\xa5\xaeR2y\bY\xdf\xa1Z\x1cg\x9b\xc1\x8c\xee.\x8d\t/\xb5\x8e=J\n\xa1\xe1q\xd3\x1dY\xe2\x13\xc6\xdc\xbbH\xb59=!.\xa6\n\xe5\xcf\xeb\xdc)}\xd8\xcd\x98\x04\xe0c\x02\b\xa5\v\xcfk\xee;\xb7U\x89\x1b\x00\b\tZ\x98\xc8\xec\xec$kml\x83N\xf2\xfa\x9aM\xec\x00G}\xdaw+?\xe2\xd8\xe5r\xb7Y\xa7\xf7\x8e\r\xee\xc2\xc4\'\x11\xce\xd0l)\x95\xbc\xc7\xf2i\xfa\xa1\xb4\xa5nw&\xfc\'\xc4\xf1\xc1G\xbd\xdb1<\xf6\xac\xdf\x8eZC>\x00'/302) 6.042998456s ago: executing program 2 (id=1266): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x6, 0x7f, 0x59, 0x6, 0x3, 0x6, 0x3, 0x165, 0x38, 0x6b, 0x6, 0x4, 0x20, 0x1, 0x8000, 0xffff, 0x8}, [{0x1, 0x40, 0x0, 0x8, 0x1, 0x6, 0xd, 0x6}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x458) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x62, 0x3a, '1\x00', 0x3a, '.)', 0x3a, './file1/file0', 0x3a, [0x46]}, 0x32) write$binfmt_format(r0, &(0x7f00000001c0)='1\x00', 0x2) open(0x0, 0x143142, 0x80) 5.825893608s ago: executing program 2 (id=1271): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044010}, 0x8000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4096, 0x1000}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.691336735s ago: executing program 2 (id=1272): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) sigaltstack(0x0, 0x0) 5.691075865s ago: executing program 2 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5.59844116s ago: executing program 2 (id=1276): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x7, 0x28}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x2000) 5.019988882s ago: executing program 5 (id=1288): socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sync() 4.860911021s ago: executing program 5 (id=1291): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 4.799237394s ago: executing program 5 (id=1292): pipe2$9p(&(0x7f00000000c0), 0x800) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 4.798925995s ago: executing program 5 (id=1293): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2000410, &(0x7f00000006c0)={[{@bsdgroups}, {@jqfmt_vfsv1}, {@errors_remount}, {@quota}, {@jqfmt_vfsold}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4.619498194s ago: executing program 5 (id=1297): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 4.33142612s ago: executing program 5 (id=1299): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="94a13773", 0x4}, {&(0x7f0000002dc0)="f843", 0x2}], 0x2}}], 0x1, 0x0) 4.33129925s ago: executing program 35 (id=1299): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="94a13773", 0x4}, {&(0x7f0000002dc0)="f843", 0x2}], 0x2}}], 0x1, 0x0) 1.356930815s ago: executing program 7 (id=1340): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) 1.083124229s ago: executing program 6 (id=1342): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) socket$kcm(0x10, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.082704289s ago: executing program 6 (id=1344): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r1, 0x0) listen(r1, 0x6) 1.005611254s ago: executing program 6 (id=1346): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 923.342908ms ago: executing program 8 (id=1347): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 552.856719ms ago: executing program 8 (id=1348): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x8, 0x1, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 551.947279ms ago: executing program 1 (id=1358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x21, 0x0, &(0x7f0000000300)) 529.99208ms ago: executing program 1 (id=1349): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xd553, 0x80b, 0x9, 0x2007, 0x8, "d206476a94f3902707f67f8de40100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 451.241455ms ago: executing program 7 (id=1350): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 450.891865ms ago: executing program 8 (id=1351): r0 = syz_io_uring_setup(0x1bc8, &(0x7f0000000340)={0x0, 0x32c9, 0x80, 0x1, 0x19e}, &(0x7f0000000040), &(0x7f0000000180)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xebec93e830f96115, 0x0, {0x0, r1}}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 412.561407ms ago: executing program 8 (id=1352): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=@getpolicy={0x310, 0x15, 0x100, 0x70bd2c, 0x25dfdbfd, {{@in6=@mcast1, @in=@private=0xa010101, 0x4e20, 0x4, 0x4e21, 0xffff, 0x2, 0x20, 0x80}, 0x6e6bb3}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80}, @algo_aead={0x29c, 0x12, {{'aegis128\x00'}, 0x1280, 0x80, "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"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd29, 0x70bd25, 0x70bd2d, 0xfa80000}}]}, 0x310}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000000010000"], 0x170}}, 0x0) 352.38433ms ago: executing program 7 (id=1353): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "bcb097d019faff684b8160b13b469e220b2d5845"}, 0x1f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) 351.95634ms ago: executing program 7 (id=1354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb108b80d9aaaaaaaaaa1d88a8190081000000080045"], 0x2a) 351.14329ms ago: executing program 1 (id=1365): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) r3 = getpid() sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="5f1a20b5bda8", 0x6}], 0x1, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}], 0x20, 0x20008000}, 0x20008800) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 326.197151ms ago: executing program 8 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000080)="a43b2eaab4000000000080006558", 0xe}], 0x3) 243.987746ms ago: executing program 7 (id=1356): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = gettid() tkill(r1, 0x16) 243.435926ms ago: executing program 1 (id=1368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 201.231528ms ago: executing program 8 (id=1357): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000880)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 196.264799ms ago: executing program 7 (id=1359): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 195.647629ms ago: executing program 1 (id=1371): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0xc, 0x10000, 0x0, 0x6, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) 120.835643ms ago: executing program 1 (id=1360): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x1000000000000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 47.314097ms ago: executing program 6 (id=1361): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x29, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xa, 0xfed7, &(0x7f0000000340), 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 46.135497ms ago: executing program 6 (id=1362): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r1, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4910}, 0x2000c800) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 0s ago: executing program 6 (id=1363): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x6, 'syz1\x00'}) fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010d00bd70933200002502"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000014) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) kernel console output (not intermixed with test programs): 2038-01-19 (0x7fffffff) [ 34.069070][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.075554][ T3831] loop1: detected capacity change from 0 to 512 [ 34.081536][ T31] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.081536][ T31] [ 34.097436][ T31] EXT4-fs (loop0): Total free blocks count 0 [ 34.103521][ T31] EXT4-fs (loop0): Free/Dirty block details [ 34.107759][ T3823] syz.3.130 (3823) used greatest stack depth: 10032 bytes left [ 34.109406][ T31] EXT4-fs (loop0): free_blocks=0 [ 34.121879][ T31] EXT4-fs (loop0): dirty_blocks=2101 [ 34.127261][ T31] EXT4-fs (loop0): Block reservation details [ 34.133267][ T31] EXT4-fs (loop0): i_reserved_data_blocks=2101 [ 34.141055][ T1679] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 34.166673][ T3831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.175413][ T3831] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.199878][ T3831] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.133: Allocating blocks 41-42 which overlap fs metadata [ 34.233464][ T3831] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.133: Allocating blocks 41-42 which overlap fs metadata [ 34.250061][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.273202][ T3831] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.133: Failed to acquire dquot type 1 [ 34.292611][ T3845] loop4: detected capacity change from 0 to 1024 [ 34.314249][ T3847] loop0: detected capacity change from 0 to 1024 [ 34.319942][ T3831] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 34.337652][ T3847] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 34.338281][ T3831] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.133: corrupted inode contents [ 34.363151][ T3831] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.133: mark_inode_dirty error [ 34.363846][ T3845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.374603][ T3847] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.400143][ T3831] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.133: corrupted inode contents [ 34.412309][ T3850] loop3: detected capacity change from 0 to 1024 [ 34.418579][ T3851] loop2: detected capacity change from 0 to 164 [ 34.419053][ T3847] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: inode #32: comm syz.0.132: iget: special inode unallocated [ 34.438334][ T3850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.445054][ T3850] EXT4-fs: inline encryption not supported [ 34.451692][ T3831] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.133: mark_inode_dirty error [ 34.463089][ T3847] EXT4-fs (loop0): Remounting filesystem read-only [ 34.469780][ T3847] EXT4-fs (loop0): no journal found [ 34.475015][ T3847] EXT4-fs (loop0): can't get journal size [ 34.494755][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.504036][ T3850] EXT4-fs: Mount option(s) incompatible with ext2 [ 34.511493][ T3831] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.133: corrupted inode contents [ 34.526595][ T3831] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 34.535385][ T3847] EXT4-fs (loop0): filesystem is read-only [ 34.565941][ T3847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.613532][ T3831] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.133: corrupted inode contents [ 34.641846][ T3831] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.133: mark_inode_dirty error [ 34.653472][ T3831] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 34.662909][ T3831] EXT4-fs (loop1): 1 truncate cleaned up [ 34.669546][ T3831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.692207][ T3860] loop4: detected capacity change from 0 to 128 [ 34.703659][ T3831] EXT4-fs: Ignoring removed orlov option [ 34.704518][ T3858] loop3: detected capacity change from 0 to 128 [ 34.710222][ T3860] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 34.728898][ T3831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.737469][ T3831] EXT4-fs (loop1): can't enable nombcache during remount [ 34.747438][ T3860] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.771702][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.775032][ T3831] syz.1.133 (3831) used greatest stack depth: 9968 bytes left [ 34.789545][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.903459][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.998819][ T3883] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 35.006642][ T3883] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.149'. [ 35.120777][ T3890] af_packet: tpacket_rcv: packet too big, clamped from 2920 to 4294967286. macoff=82 [ 35.451055][ T3910] capability: warning: `syz.3.160' uses 32-bit capabilities (legacy support in use) [ 35.487139][ T3912] vhci_hcd vhci_hcd.4: invalid port number 236 [ 35.618715][ T3920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.805663][ T3930] SELinux: failed to load policy [ 35.820835][ T3934] syz.4.171 uses obsolete (PF_INET,SOCK_PACKET) [ 35.846169][ T3934] syzkaller1: entered promiscuous mode [ 35.851698][ T3934] syzkaller1: entered allmulticast mode [ 36.004792][ T3948] loop4: detected capacity change from 0 to 128 [ 36.020910][ T3948] FAT-fs (loop4): Directory bread(block 414) failed [ 36.021493][ T3950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.178'. [ 36.029851][ T3948] FAT-fs (loop4): Directory bread(block 415) failed [ 36.040743][ T3950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.178'. [ 36.097600][ T3948] FAT-fs (loop4): Directory bread(block 416) failed [ 36.114806][ T3948] FAT-fs (loop4): Directory bread(block 417) failed [ 36.124880][ T3948] FAT-fs (loop4): Directory bread(block 418) failed [ 36.131510][ T3948] FAT-fs (loop4): Directory bread(block 419) failed [ 36.163092][ T3948] FAT-fs (loop4): Directory bread(block 420) failed [ 36.169756][ T3948] FAT-fs (loop4): Directory bread(block 421) failed [ 36.178506][ T3966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.185'. [ 36.192369][ T3948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.177'. [ 36.244302][ T36] kernel read not supported for file /ppp (pid: 36 comm: kworker/1:1) [ 36.363449][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 36.478479][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 36.487901][ T3994] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.197'. [ 36.619086][ T4010] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 37.001841][ T4037] Illegal XDP return value 4291440640 on prog (id 27) dev N/A, expect packet loss! [ 37.054024][ T4044] sg_write: process 134 (syz.4.217) changed security contexts after opening file descriptor, this is not allowed. [ 37.673763][ T4079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.695983][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 37.704227][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.713488][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.738437][ T4079] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.815031][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.824408][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 37.824421][ T29] audit: type=1400 audit(1768903424.120:282): avc: denied { write } for pid=4087 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.875950][ T29] audit: type=1400 audit(1768903424.160:283): avc: denied { create } for pid=4091 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.895196][ T29] audit: type=1400 audit(1768903424.160:284): avc: denied { listen } for pid=4091 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.914457][ T29] audit: type=1400 audit(1768903424.160:285): avc: denied { connect } for pid=4091 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.950349][ T4097] netlink: 'syz.1.233': attribute type 27 has an invalid length. [ 37.982538][ T4095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.004685][ T29] audit: type=1400 audit(1768903424.300:286): avc: denied { watch watch_reads } for pid=4094 comm="syz.3.235" path="/32/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.043204][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.109446][ T29] audit: type=1400 audit(1768903424.400:287): avc: denied { bind } for pid=4107 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.128860][ T29] audit: type=1400 audit(1768903424.410:288): avc: denied { setopt } for pid=4107 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.424561][ T29] audit: type=1400 audit(1768903424.720:289): avc: denied { read } for pid=4118 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.630996][ T4123] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.644104][ T4123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.668439][ T4123] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.681897][ T4123] EXT4-fs (loop2): 1 truncate cleaned up [ 38.688105][ T4123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.701717][ T29] audit: type=1400 audit(1768903424.990:290): avc: denied { map } for pid=4122 comm="syz.2.246" path="/47/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.732767][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.783714][ T4131] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.789836][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 38.804916][ T4131] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.818093][ T29] audit: type=1400 audit(1768903425.110:291): avc: denied { read } for pid=4130 comm="syz.2.250" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 38.873594][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.200913][ T4161] set_capacity_and_notify: 6 callbacks suppressed [ 39.200929][ T4161] loop2: detected capacity change from 0 to 1024 [ 39.248436][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.309502][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.321978][ T4178] netlink: 'syz.3.268': attribute type 18 has an invalid length. [ 39.329922][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 39.370589][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.370607][ T4178] netlink: 'syz.3.268': attribute type 18 has an invalid length. [ 39.370629][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 39.397089][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.406459][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.423122][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.460761][ T4191] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 39.476074][ T4191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.496807][ T4191] bond1: (slave geneve2): making interface the new active one [ 39.508438][ T4191] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 40.002769][ T4248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 40.012112][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 40.021005][ T4248] netlink: 'syz.2.295': attribute type 12 has an invalid length. [ 40.036399][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.045536][ T4248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 40.054357][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 40.063261][ T4248] netlink: 'syz.2.295': attribute type 12 has an invalid length. [ 40.082775][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.100559][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.118294][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.189087][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 40.252779][ T4271] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 40.380423][ T4291] SELinux: failed to load policy [ 40.405494][ T4296] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 40.444697][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 40.460158][ T4304] netlink: 44 bytes leftover after parsing attributes in process `syz.4.322'. [ 40.488491][ T4306] netlink: 'syz.0.323': attribute type 14 has an invalid length. [ 40.506851][ T52] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.506865][ T4306] netlink: 'syz.0.323': attribute type 14 has an invalid length. [ 40.530461][ T52] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.549816][ T4313] geneve2: entered promiscuous mode [ 40.555103][ T4313] geneve2: entered allmulticast mode [ 40.561160][ T52] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.570027][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.599652][ T52] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.608562][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.637667][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.676213][ T4322] loop2: detected capacity change from 0 to 512 [ 40.682733][ T4322] EXT4-fs: Ignoring removed orlov option [ 40.689020][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.717819][ T4322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.730041][ T4331] loop0: detected capacity change from 0 to 2048 [ 40.763399][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.792316][ T4338] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 40.798078][ T4331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.820674][ T4338] bond2: (slave ip6gretap1): making interface the new active one [ 40.848031][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.910481][ T4338] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 41.024036][ T4367] loop4: detected capacity change from 0 to 128 [ 41.046229][ T4369] veth2: entered promiscuous mode [ 41.051295][ T4369] veth2: entered allmulticast mode [ 41.299837][ T4383] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 41.307798][ T4383] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 41.665676][ T4413] loop2: detected capacity change from 0 to 8192 [ 41.770824][ T4429] loop2: detected capacity change from 0 to 1024 [ 41.781979][ T4428] loop3: detected capacity change from 0 to 2048 [ 41.813413][ T4429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.827318][ T4428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.850412][ T4428] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.903249][ T4429] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.369: inode #926365495: comm syz.2.369: iget: illegal inode # [ 41.938770][ T4429] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.369: error while reading EA inode 926365495 err=-117 [ 42.047519][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.066261][ T4451] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.370: bg 0: block 345: padding at end of block bitmap is not set [ 42.140362][ T4451] EXT4-fs (loop3): Remounting filesystem read-only [ 42.146985][ T57] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 42.175749][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.229926][ T4467] loop0: detected capacity change from 0 to 1024 [ 42.312238][ T4480] loop3: detected capacity change from 0 to 256 [ 42.740676][ T4530] loop1: detected capacity change from 0 to 512 [ 42.749523][ T4530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.766494][ T4530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 42.781827][ T4530] System zones: 1-12 [ 42.786727][ T4530] EXT4-fs (loop1): 1 truncate cleaned up [ 42.793214][ T4530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.828147][ T4537] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.842613][ T4537] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.866670][ T57] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.878012][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.073704][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 43.073716][ T29] audit: type=1400 audit(1768903429.370:398): avc: denied { write } for pid=4559 comm="syz.1.425" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.107399][ T29] audit: type=1400 audit(1768903429.400:399): avc: denied { ioctl } for pid=4559 comm="syz.1.425" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.358077][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.358077][ T12] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 43.380379][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.380379][ T12] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 43.400683][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.400683][ T12] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 43.414562][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.414562][ T12] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 43.428087][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.428087][ T12] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 43.441721][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.441721][ T12] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 43.455658][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.455658][ T12] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 43.469745][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.469745][ T12] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 43.484213][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.484213][ T12] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 43.497982][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.497982][ T12] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 43.592967][ T29] audit: type=1400 audit(1768903429.880:400): avc: denied { setopt } for pid=4597 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.626320][ T4601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.646592][ T29] audit: type=1400 audit(1768903429.940:401): avc: denied { append } for pid=4604 comm="syz.4.445" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.669770][ T29] audit: type=1400 audit(1768903429.940:402): avc: denied { open } for pid=4604 comm="syz.4.445" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.693225][ T29] audit: type=1400 audit(1768903429.970:403): avc: denied { append } for pid=4600 comm="syz.3.443" path="/101/file0/file0/cpuacct.usage_percpu" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.742764][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.753947][ T29] audit: type=1400 audit(1768903430.050:404): avc: denied { ioctl } for pid=4604 comm="syz.4.445" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.850118][ T29] audit: type=1400 audit(1768903430.140:405): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.039442][ T4630] EXT4-fs: inline encryption not supported [ 44.063607][ T4630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.101106][ T29] audit: type=1400 audit(1768903430.390:406): avc: denied { ioctl } for pid=4636 comm="syz.3.455" path="socket:[8249]" dev="sockfs" ino=8249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.126536][ T4630] EXT4-fs (loop0): shut down requested (1) [ 44.164548][ T29] audit: type=1400 audit(1768903430.430:407): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.196146][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.385983][ T4678] __nla_validate_parse: 8 callbacks suppressed [ 44.386001][ T4678] netlink: 104 bytes leftover after parsing attributes in process `syz.3.468'. [ 44.422801][ T4678] netlink: 104 bytes leftover after parsing attributes in process `syz.3.468'. [ 44.816129][ T4732] xt_hashlimit: max too large, truncated to 1048576 [ 44.829725][ T4732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'. [ 45.008166][ T4751] set_capacity_and_notify: 7 callbacks suppressed [ 45.008180][ T4751] loop0: detected capacity change from 0 to 512 [ 45.036110][ T4751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.052410][ T4751] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.119953][ T4761] random: crng reseeded on system resumption [ 45.187878][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.197779][ T4765] loop2: detected capacity change from 0 to 1024 [ 45.204817][ T4765] EXT4-fs: Ignoring removed orlov option [ 45.222405][ T4765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.252829][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.274566][ T4772] dvmrp6: entered allmulticast mode [ 45.399392][ T4789] loop0: detected capacity change from 0 to 256 [ 45.412692][ T4789] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.449698][ T4793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 45.577669][ T4806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.634072][ T4811] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4811 comm=syz.0.522 [ 45.669243][ T4814] loop2: detected capacity change from 0 to 512 [ 45.677727][ T4814] EXT4-fs: Ignoring removed orlov option [ 45.677925][ T4804] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.700733][ T4814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.723761][ T4814] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.751648][ T4814] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.523: bg 0: block 248: padding at end of block bitmap is not set [ 45.766238][ T4814] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.523: Failed to acquire dquot type 1 [ 45.778062][ T4814] EXT4-fs (loop2): 1 truncate cleaned up [ 45.785891][ T4814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.801225][ T4814] EXT4-fs: Ignoring removed orlov option [ 45.812956][ T4814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.823166][ T4814] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 45.854212][ T4814] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.523: Abort forced by user [ 45.877224][ T4814] EXT4-fs (loop2): Remounting filesystem read-only [ 45.883818][ T4814] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.903143][ T4814] ext4 filesystem being remounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.917028][ T4814] syz.2.523 (4814) used greatest stack depth: 9184 bytes left [ 45.936182][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.000853][ T4839] netlink: 'syz.0.533': attribute type 4 has an invalid length. [ 46.017820][ T4839] netlink: 'syz.0.533': attribute type 4 has an invalid length. [ 46.105646][ T4850] loop4: detected capacity change from 0 to 512 [ 46.171770][ T4850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.202740][ T4850] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.245078][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.271882][ T4868] mmap: syz.4.543 (4868) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.465535][ T4875] loop4: detected capacity change from 0 to 256 [ 46.478105][ T4875] FAT-fs (loop4): Directory bread(block 64) failed [ 46.513005][ T4875] FAT-fs (loop4): Directory bread(block 65) failed [ 46.527591][ T4878] loop0: detected capacity change from 0 to 512 [ 46.542955][ T4875] FAT-fs (loop4): Directory bread(block 66) failed [ 46.549660][ T4875] FAT-fs (loop4): Directory bread(block 67) failed [ 46.563027][ T4875] FAT-fs (loop4): Directory bread(block 68) failed [ 46.569631][ T4875] FAT-fs (loop4): Directory bread(block 69) failed [ 46.603432][ T4875] FAT-fs (loop4): Directory bread(block 70) failed [ 46.613914][ T4878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.630871][ T4875] FAT-fs (loop4): Directory bread(block 71) failed [ 46.641989][ T4875] FAT-fs (loop4): Directory bread(block 72) failed [ 46.654137][ T4878] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.678419][ T4875] FAT-fs (loop4): Directory bread(block 73) failed [ 46.750603][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.774751][ T3486] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.793010][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.801631][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.824250][ T3486] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.849087][ T4891] loop3: detected capacity change from 0 to 1024 [ 46.868592][ T4892] fido_id[4892]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.887757][ T4891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.929644][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.003193][ T4913] ref_ctr_offset mismatch. inode: 0x281 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 47.196224][ T4946] loop3: detected capacity change from 0 to 256 [ 47.204255][ T4946] FAT-fs (loop3): Directory bread(block 517) failed [ 47.210922][ T4946] FAT-fs (loop3): Directory bread(block 518) failed [ 47.217921][ T4946] FAT-fs (loop3): Directory bread(block 519) failed [ 47.224803][ T4946] FAT-fs (loop3): Directory bread(block 520) failed [ 47.231532][ T4946] FAT-fs (loop3): Directory bread(block 521) failed [ 47.238313][ T4946] FAT-fs (loop3): Directory bread(block 522) failed [ 47.245105][ T4946] FAT-fs (loop3): Directory bread(block 523) failed [ 47.251783][ T4946] FAT-fs (loop3): Directory bread(block 524) failed [ 47.258519][ T4946] FAT-fs (loop3): Directory bread(block 525) failed [ 47.265283][ T4946] FAT-fs (loop3): Directory bread(block 526) failed [ 47.274693][ T4946] vfat filesystem being mounted at /126/bus supports timestamps until 2107-12-31 (0x10391447e) [ 47.397800][ T4958] loop1: detected capacity change from 0 to 1024 [ 47.418282][ T4958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.435396][ T4958] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.578: error while reading EA inode 27 err=-116 [ 47.448615][ T4958] EXT4-fs error (device loop1): ext4_xattr_block_find:1879: inode #15: comm syz.1.578: corrupted xattr block 113: invalid header [ 47.471270][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.617378][ T4974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4974 comm=syz.1.583 [ 47.663055][ T4981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.688619][ T3486] kernel write not supported for file bpf-prog (pid: 3486 comm: kworker/0:6) [ 47.713012][ T4985] SELinux: failed to load policy [ 47.732313][ T4989] netlink: 182 bytes leftover after parsing attributes in process `syz.3.590'. [ 47.825355][ T5001] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 47.966439][ T5024] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.989832][ T5024] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.038659][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.053628][ T3486] kernel write not supported for file bpf-prog (pid: 3486 comm: kworker/0:6) [ 48.092281][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 48.092368][ T29] audit: type=1400 audit(3916387082.372:474): avc: denied { read write } for pid=5038 comm="syz.1.610" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.146771][ T29] audit: type=1400 audit(3916387082.372:475): avc: denied { open } for pid=5038 comm="syz.1.610" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.187079][ T5046] EXT4-fs: inline encryption not supported [ 48.209378][ T5046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.222713][ T5046] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.234921][ T5050] msdos filesystem being mounted at /132/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 48.264493][ T29] audit: type=1400 audit(3916387082.552:476): avc: denied { remove_name } for pid=5045 comm="syz.2.617" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.265104][ T5046] EXT4-fs error (device loop2): ext4_empty_dir:3075: inode #12: comm syz.2.617: invalid size [ 48.295969][ T29] audit: type=1400 audit(3916387082.552:477): avc: denied { rmdir } for pid=5045 comm="syz.2.617" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.351419][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.375379][ T5064] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 48.388403][ T5064] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.405112][ T29] audit: type=1400 audit(3916387082.692:478): avc: denied { setattr } for pid=5063 comm="syz.1.620" path="/112/file1/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.438968][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.491430][ T5053] chnl_net:caif_netlink_parms(): no params data found [ 48.545434][ T5053] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.552557][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.560195][ T5053] bridge_slave_0: entered allmulticast mode [ 48.566918][ T5053] bridge_slave_0: entered promiscuous mode [ 48.577142][ T5053] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.584228][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.591519][ T5053] bridge_slave_1: entered allmulticast mode [ 48.599628][ T5053] bridge_slave_1: entered promiscuous mode [ 48.617158][ T5053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.630920][ T5053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.652672][ T5053] team0: Port device team_slave_0 added [ 48.659558][ T5053] team0: Port device team_slave_1 added [ 48.678552][ T5053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.685555][ T5053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.711544][ T5053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.723587][ T5053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.730570][ T5053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.756563][ T5053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.791027][ T5053] hsr_slave_0: entered promiscuous mode [ 48.798623][ T5053] hsr_slave_1: entered promiscuous mode [ 48.804610][ T5053] debugfs: 'hsr0' already exists in 'hsr' [ 48.810362][ T5053] Cannot create hsr debugfs directory [ 48.820197][ T5096] SELinux: failed to load policy [ 48.889858][ T5103] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.633: invalid indirect mapped block 256 (level 2) [ 48.903652][ T5103] EXT4-fs (loop1): 2 truncates cleaned up [ 48.923657][ T5103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.985916][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.993403][ T5053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.017060][ T29] audit: type=1326 audit(3916387083.302:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371f8bacb9 code=0x7ffc0000 [ 49.024089][ T5053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.042130][ T29] audit: type=1326 audit(3916387083.332:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f371f8bacb9 code=0x7ffc0000 [ 49.070248][ T29] audit: type=1326 audit(3916387083.332:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371f8bacb9 code=0x7ffc0000 [ 49.093728][ T29] audit: type=1326 audit(3916387083.332:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371f8bacb9 code=0x7ffc0000 [ 49.117091][ T29] audit: type=1326 audit(3916387083.332:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5115 comm="syz.0.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f371f8bacb9 code=0x7ffc0000 [ 49.146356][ T5053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.159998][ T5053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.252439][ T5053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.265486][ T5133] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.273423][ T5053] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.281126][ T5133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.295545][ T1679] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.302639][ T1679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.304287][ T5133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.332555][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.339812][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.384685][ T5053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.395180][ T5053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.452429][ T5053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.471132][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.624927][ T5163] FAT-fs (loop2): bogus number of directory entries (390) [ 49.632121][ T5163] FAT-fs (loop2): Can't find a valid FAT filesystem [ 49.674669][ T5161] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 49.690235][ T5161] SELinux: failed to load policy [ 49.720147][ T5053] veth0_vlan: entered promiscuous mode [ 49.728474][ T5053] veth1_vlan: entered promiscuous mode [ 49.748828][ T5053] veth0_macvtap: entered promiscuous mode [ 49.765465][ T5053] veth1_macvtap: entered promiscuous mode [ 49.776784][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.790366][ T5053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.802554][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.818206][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.847425][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.914068][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.137459][ T5188] netlink: 240 bytes leftover after parsing attributes in process `syz.5.654'. [ 50.194150][ T5192] set_capacity_and_notify: 7 callbacks suppressed [ 50.194165][ T5192] loop5: detected capacity change from 0 to 128 [ 50.233752][ T5192] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.254910][ T5192] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.276120][ T5199] loop3: detected capacity change from 0 to 512 [ 50.283785][ T5199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.313414][ T5199] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.331029][ T5199] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.660: bg 0: block 248: padding at end of block bitmap is not set [ 50.347333][ T5053] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.382221][ T5199] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.660: Failed to acquire dquot type 1 [ 50.403766][ T5199] EXT4-fs (loop3): 1 truncate cleaned up [ 50.411054][ T5199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.440405][ T5199] EXT4-fs (loop3): shut down requested (0) [ 50.458514][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.485828][ T5214] loop5: detected capacity change from 0 to 128 [ 50.499700][ T5214] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.514866][ T5217] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 50.524700][ T5217] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 50.555513][ T5214] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.678196][ T5053] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.825928][ T5246] sctp: [Deprecated]: syz.5.680 (pid 5246) Use of int in maxseg socket option. [ 50.825928][ T5246] Use struct sctp_assoc_value instead [ 51.040605][ T5261] loop2: detected capacity change from 0 to 1024 [ 51.068836][ T5261] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.686: bad orphan inode 134217728 [ 51.091038][ T5261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.138737][ T5265] loop0: detected capacity change from 0 to 4096 [ 51.293733][ T5265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.348617][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.415658][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.459763][ T5287] loop2: detected capacity change from 0 to 1024 [ 51.590505][ T5297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 51.601282][ T5297] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 51.609101][ T5297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'. [ 51.670783][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x10 [ 51.747584][ T5315] loop1: detected capacity change from 0 to 512 [ 51.754634][ T5315] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.766845][ T5315] EXT4-fs (loop1): 1 truncate cleaned up [ 51.773682][ T5315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.794305][ T5309] loop5: detected capacity change from 0 to 512 [ 51.808883][ T5309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.820477][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.830883][ T5309] EXT4-fs (loop5): 1 truncate cleaned up [ 51.845955][ T5309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.884250][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.916680][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 51.925534][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.711'. [ 51.952198][ T52] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.962293][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 51.971112][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.711'. [ 51.980504][ T52] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.980594][ T52] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.980954][ T52] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.056581][ T5333] netlink: 'syz.5.715': attribute type 1 has an invalid length. [ 52.064318][ T5333] netlink: 'syz.5.715': attribute type 1 has an invalid length. [ 52.072024][ T5333] netlink: 'syz.5.715': attribute type 2 has an invalid length. [ 52.079713][ T5333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.715'. [ 52.091901][ T5336] loop3: detected capacity change from 0 to 256 [ 52.099842][ T5336] vfat filesystem being mounted at /150/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 52.141025][ T5329] loop1: detected capacity change from 0 to 32768 [ 52.414909][ T5362] sctp: [Deprecated]: syz.0.728 (pid 5362) Use of int in maxseg socket option. [ 52.414909][ T5362] Use struct sctp_assoc_value instead [ 52.557289][ T5381] netlink: 277 bytes leftover after parsing attributes in process `syz.2.737'. [ 52.594919][ T5384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.630122][ T5384] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.738: Allocating blocks 385-513 which overlap fs metadata [ 52.648754][ T5384] EXT4-fs (loop2): pa ffff888107a572a0: logic 16, phys. 129, len 24 [ 52.656896][ T5384] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 52.670288][ T5384] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 52.682572][ T5384] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.682572][ T5384] [ 52.692332][ T5384] EXT4-fs (loop2): Total free blocks count 0 [ 52.698418][ T5384] EXT4-fs (loop2): Free/Dirty block details [ 52.704425][ T5384] EXT4-fs (loop2): free_blocks=128 [ 52.709527][ T5384] EXT4-fs (loop2): dirty_blocks=0 [ 52.714578][ T5384] EXT4-fs (loop2): Block reservation details [ 52.720549][ T5384] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 53.335464][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 53.335476][ T29] audit: type=1326 audit(3916387087.622:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 53.385042][ T29] audit: type=1326 audit(3916387087.632:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 53.408429][ T29] audit: type=1326 audit(3916387087.632:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 53.431781][ T29] audit: type=1326 audit(3916387087.632:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 53.455306][ T29] audit: type=1326 audit(3916387087.632:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 53.478833][ T29] audit: type=1326 audit(3916387087.632:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 53.487157][ T5420] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 53.502266][ T29] audit: type=1326 audit(3916387087.632:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5411 comm="syz.1.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 53.556668][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.569723][ T5422] bond0: (slave geneve2): making interface the new active one [ 53.578939][ T5422] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 53.588189][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.609240][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.632161][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.655182][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.733502][ T5435] veth0_to_team: default FDB implementation only supports local addresses [ 53.763151][ T29] audit: type=1326 audit(3916387088.052:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e398cacb9 code=0x7ffc0000 [ 53.852878][ T29] audit: type=1326 audit(3916387088.052:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6e398cacb9 code=0x7ffc0000 [ 53.876234][ T29] audit: type=1326 audit(3916387088.052:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5436 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e398cacb9 code=0x7ffc0000 [ 53.918309][ T5442] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.935682][ T5442] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 1: comm syz.0.763: lblock 1 mapped to illegal pblock 1 (length 5) [ 53.950040][ T5442] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 53.962348][ T5442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.962348][ T5442] [ 53.972961][ T5442] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.763: bg 0: block 112: padding at end of block bitmap is not set [ 53.987325][ T5442] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 3 with error 117 [ 53.999746][ T5442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.999746][ T5442] [ 54.106748][ T1679] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 54.154915][ T1679] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 54.167340][ T1679] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.167340][ T1679] [ 54.321090][ T5476] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.349353][ T5476] vfat filesystem being mounted at /166/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 54.385169][ T5478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.776'. [ 55.397621][ T5547] tmpfs: Bad value for 'mpol' [ 55.505821][ T5559] set_capacity_and_notify: 3 callbacks suppressed [ 55.505833][ T5559] loop3: detected capacity change from 0 to 128 [ 55.532695][ T5559] msdos filesystem being remounted at /174/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 55.584481][ T5563] netlink: 'syz.2.812': attribute type 3 has an invalid length. [ 55.592175][ T5563] netlink: 'syz.2.812': attribute type 4 has an invalid length. [ 55.599923][ T5563] __nla_validate_parse: 7 callbacks suppressed [ 55.599937][ T5563] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.812'. [ 56.005533][ T5618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.833'. [ 56.020763][ T5624] netlink: 'syz.5.835': attribute type 11 has an invalid length. [ 56.028614][ T5624] netlink: 44 bytes leftover after parsing attributes in process `syz.5.835'. [ 56.032213][ T5618] netlink: 'syz.1.833': attribute type 2 has an invalid length. [ 56.045357][ T5618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 56.069095][ T5631] loop2: detected capacity change from 0 to 512 [ 56.078210][ T5624] netlink: 'syz.5.835': attribute type 11 has an invalid length. [ 56.086001][ T5624] netlink: 44 bytes leftover after parsing attributes in process `syz.5.835'. [ 56.095964][ T5631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.143542][ T5642] delete_channel: no stack [ 56.158158][ T5631] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.506158][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 56.525255][ T5697] bridge1: entered promiscuous mode [ 56.530481][ T5697] bridge1: entered allmulticast mode [ 56.544405][ T5697] team0: Port device bridge1 added [ 56.551706][ T5695] bridge_slave_1: left allmulticast mode [ 56.557446][ T5695] bridge_slave_1: left promiscuous mode [ 56.563115][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.578754][ T5695] bridge_slave_0: left allmulticast mode [ 56.584469][ T5695] bridge_slave_0: left promiscuous mode [ 56.590212][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.643009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.655263][ T5697] bridge0: port 3(team0) entered blocking state [ 56.661635][ T5697] bridge0: port 3(team0) entered disabled state [ 56.677166][ T5697] team0: entered allmulticast mode [ 56.682341][ T5697] team_slave_0: entered allmulticast mode [ 56.688361][ T5697] team_slave_1: entered allmulticast mode [ 56.696424][ T5697] team0: entered promiscuous mode [ 56.701524][ T5697] team_slave_0: entered promiscuous mode [ 56.704633][ T5704] sctp: [Deprecated]: syz.0.862 (pid 5704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 56.704633][ T5704] Use struct sctp_sack_info instead [ 56.707404][ T5697] team_slave_1: entered promiscuous mode [ 56.731724][ T5697] bridge0: port 3(team0) entered blocking state [ 56.738112][ T5697] bridge0: port 3(team0) entered forwarding state [ 56.825126][ T5702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.836597][ T5710] loop0: detected capacity change from 0 to 4096 [ 56.851595][ T5702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.002487][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 57.085266][ T5738] loop5: detected capacity change from 0 to 1024 [ 57.091977][ T5738] EXT4-fs: Ignoring removed orlov option [ 57.282822][ T5763] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 57.313324][ T5763] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 57.484616][ T5785] loop5: detected capacity change from 0 to 8192 [ 57.517246][ T5785] vfat filesystem being mounted at /50/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 58.110887][ T5784] syz.5.897 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 58.121882][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz.5.897 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.121985][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.122067][ T5784] Call Trace: [ 58.122075][ T5784] [ 58.122082][ T5784] __dump_stack+0x1d/0x30 [ 58.122166][ T5784] dump_stack_lvl+0x95/0xd0 [ 58.122182][ T5784] dump_stack+0x15/0x1b [ 58.122197][ T5784] dump_header+0x80/0x240 [ 58.122213][ T5784] oom_kill_process+0x295/0x350 [ 58.122297][ T5784] out_of_memory+0x97d/0xb80 [ 58.122321][ T5784] try_charge_memcg+0x62e/0xa10 [ 58.122500][ T5784] charge_memcg+0x51/0xc0 [ 58.122522][ T5784] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 58.122596][ T5784] __read_swap_cache_async+0x17b/0x2d0 [ 58.122625][ T5784] swap_cluster_readahead+0x262/0x3c0 [ 58.122656][ T5784] swapin_readahead+0xde/0x840 [ 58.122677][ T5784] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 58.122696][ T5784] ? lruvec_stat_mod_folio+0xd2/0x110 [ 58.122786][ T5784] ? __rcu_read_unlock+0x4e/0x70 [ 58.122806][ T5784] ? swap_cache_get_folio+0x26f/0x280 [ 58.122846][ T5784] do_swap_page+0x2f4/0x2140 [ 58.122888][ T5784] ? css_rstat_updated+0xbb/0x280 [ 58.122957][ T5784] ? __pfx_default_wake_function+0x10/0x10 [ 58.123069][ T5784] handle_mm_fault+0xb40/0x3030 [ 58.123095][ T5784] ? vma_start_read+0x1c7/0x2c0 [ 58.123116][ T5784] do_user_addr_fault+0x62f/0x1050 [ 58.123282][ T5784] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 58.123305][ T5784] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 58.123328][ T5784] ? irqentry_exit+0x3c/0x510 [ 58.123377][ T5784] exc_page_fault+0x62/0xa0 [ 58.123397][ T5784] asm_exc_page_fault+0x26/0x30 [ 58.123413][ T5784] RIP: 0033:0x7fb9460c5eb8 [ 58.123432][ T5784] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 58.123477][ T5784] RSP: 002b:00007ffcb1a8efa0 EFLAGS: 00010246 [ 58.123497][ T5784] RAX: 0000000000000000 RBX: 00005555593d6500 RCX: 00007fb9460cb58e [ 58.123509][ T5784] RDX: 00007ffcb1a8eff0 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.123519][ T5784] RBP: 00007fb946387da0 R08: 0000000000000000 R09: 0000000000000000 [ 58.123529][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000e389 [ 58.123539][ T5784] R13: 00007fb946385fac R14: 000000000000e0dd R15: 00007ffcb1a8f120 [ 58.123592][ T5784] [ 58.358013][ T5784] memory: usage 307200kB, limit 307200kB, failcnt 150 [ 58.364810][ T5784] memory+swap: usage 311476kB, limit 9007199254740988kB, failcnt 0 [ 58.372759][ T5784] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 58.380090][ T5784] Memory cgroup stats for /syz5: [ 58.441954][ T5784] cache 4096 [ 58.450151][ T5784] rss 0 [ 58.453000][ T5784] shmem 0 [ 58.455931][ T5784] mapped_file 0 [ 58.459384][ T5784] dirty 0 [ 58.462307][ T5784] writeback 0 [ 58.465720][ T5784] workingset_refault_anon 97 [ 58.470298][ T5784] workingset_refault_file 0 [ 58.474827][ T5784] swap 4386816 [ 58.478198][ T5784] swapcached 4096 [ 58.481910][ T5784] pgpgin 10741 [ 58.485333][ T5784] pgpgout 10739 [ 58.488811][ T5784] pgfault 12351 [ 58.492257][ T5784] pgmajfault 14 [ 58.495778][ T5784] inactive_anon 4096 [ 58.499705][ T5784] active_anon 0 [ 58.503220][ T5784] inactive_file 4096 [ 58.507197][ T5784] active_file 0 [ 58.510788][ T5784] unevictable 0 [ 58.514264][ T5784] hierarchical_memory_limit 314572800 [ 58.519631][ T5784] hierarchical_memsw_limit 9223372036854771712 [ 58.525824][ T5784] total_cache 4096 [ 58.529539][ T5784] total_rss 0 [ 58.532900][ T5784] total_shmem 0 [ 58.536372][ T5784] total_mapped_file 0 [ 58.540365][ T5784] total_dirty 0 [ 58.543858][ T5784] total_writeback 0 [ 58.547649][ T5784] total_workingset_refault_anon 97 [ 58.552742][ T5784] total_workingset_refault_file 0 [ 58.557881][ T5784] total_swap 4386816 [ 58.561783][ T5784] total_swapcached 4096 [ 58.566568][ T5784] total_pgpgin 10741 [ 58.570463][ T5784] total_pgpgout 10739 [ 58.574548][ T5784] total_pgfault 12351 [ 58.578518][ T5784] total_pgmajfault 14 [ 58.582488][ T5784] total_inactive_anon 4096 [ 58.586920][ T5784] total_active_anon 0 [ 58.590890][ T5784] total_inactive_file 4096 [ 58.595333][ T5784] total_active_file 0 [ 58.599373][ T5784] total_unevictable 0 [ 58.603369][ T5784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.897,pid=5784,uid=0 [ 58.618197][ T5784] Memory cgroup out of memory: Killed process 5784 (syz.5.897) total-vm:94000kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 58.684703][ T5785] syz.5.897 (5785) used greatest stack depth: 7224 bytes left [ 58.939420][ T3495] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.952806][ T3495] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.312980][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 59.312992][ T29] audit: type=1326 audit(3916387093.602:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5839 comm="syz.2.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7ff8facb9 code=0x0 [ 59.713982][ T29] audit: type=1400 audit(3916387094.002:683): avc: denied { accept } for pid=5851 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.772900][ T29] audit: type=1400 audit(3916387094.052:684): avc: denied { listen } for pid=5856 comm="syz.1.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.794182][ T5861] loop1: detected capacity change from 0 to 128 [ 59.808161][ T5859] loop5: detected capacity change from 0 to 1024 [ 59.818768][ T5861] vfat filesystem being mounted at /180/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 59.855540][ T5859] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.959982][ T5859] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.927: lblock 3 mapped to illegal pblock 3 (length 3) [ 60.023588][ T5859] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 60.030959][ T5861] bio_check_eod: 62 callbacks suppressed [ 60.030976][ T5861] syz.1.928: attempt to access beyond end of device [ 60.030976][ T5861] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 60.035895][ T5859] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.035895][ T5859] [ 60.064585][ T5861] syz.1.928: attempt to access beyond end of device [ 60.064585][ T5861] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 60.093892][ T5865] syz.1.928: attempt to access beyond end of device [ 60.093892][ T5865] loop1: rw=2049, sector=561, nr_sectors = 16 limit=128 [ 60.127020][ T5865] syz.1.928: attempt to access beyond end of device [ 60.127020][ T5865] loop1: rw=2049, sector=585, nr_sectors = 24 limit=128 [ 60.127510][ T5859] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.927: bg 0: block 112: padding at end of block bitmap is not set [ 60.142918][ T5861] syz.1.928: attempt to access beyond end of device [ 60.142918][ T5861] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 60.203380][ T5866] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.927: Freeing blocks not in datazone - block = 3, count = 3 [ 60.233192][ T5865] syz.1.928: attempt to access beyond end of device [ 60.233192][ T5865] loop1: rw=2049, sector=617, nr_sectors = 8 limit=128 [ 60.282997][ T5865] syz.1.928: attempt to access beyond end of device [ 60.282997][ T5865] loop1: rw=2049, sector=633, nr_sectors = 24 limit=128 [ 60.307189][ T5861] syz.1.928: attempt to access beyond end of device [ 60.307189][ T5861] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 60.333015][ T5865] syz.1.928: attempt to access beyond end of device [ 60.333015][ T5865] loop1: rw=2049, sector=665, nr_sectors = 8 limit=128 [ 60.334618][ T5861] syz.1.928: attempt to access beyond end of device [ 60.334618][ T5861] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 60.375123][ T42] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 60.387782][ T42] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.387782][ T42] [ 60.485443][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 60.494547][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 60.538485][ T5884] netlink: 128 bytes leftover after parsing attributes in process `syz.1.937'. [ 60.563213][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 60.928673][ T5898] syzkaller0: entered promiscuous mode [ 60.934265][ T5898] syzkaller0: entered allmulticast mode [ 61.026369][ T29] audit: type=1400 audit(3916387095.302:685): avc: denied { getopt } for pid=5915 comm="syz.1.948" lport=44695 faddr=::ffff:172.30.1.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 61.127701][ T5924] loop5: detected capacity change from 0 to 512 [ 61.162275][ T5928] netlink: 'syz.1.955': attribute type 19 has an invalid length. [ 61.170074][ T5928] __nla_validate_parse: 1 callbacks suppressed [ 61.170087][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 61.189309][ T5924] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.217515][ T5924] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 61.252060][ T5924] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 61.264380][ T5924] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.264380][ T5924] [ 61.274063][ T5924] EXT4-fs (loop5): Total free blocks count 0 [ 61.280087][ T5924] EXT4-fs (loop5): Free/Dirty block details [ 61.286041][ T5924] EXT4-fs (loop5): free_blocks=65280 [ 61.291328][ T5924] EXT4-fs (loop5): dirty_blocks=16 [ 61.296550][ T5924] EXT4-fs (loop5): Block reservation details [ 61.302526][ T5924] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 61.318113][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.318121][ T5928] netlink: 'syz.1.955': attribute type 19 has an invalid length. [ 61.327040][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.334620][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 61.353351][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.370011][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.406228][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 61.445002][ T29] audit: type=1400 audit(3916387095.732:686): avc: denied { bind } for pid=5941 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.491950][ T5946] loop2: detected capacity change from 0 to 128 [ 61.531037][ T5946] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.594940][ T5955] loop1: detected capacity change from 0 to 128 [ 61.632928][ T5955] vfat filesystem being mounted at /190/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 61.758375][ T5962] syzkaller0: entered promiscuous mode [ 61.764473][ T5962] syzkaller0: entered allmulticast mode [ 62.094625][ T5990] loop3: detected capacity change from 0 to 128 [ 62.102000][ T5990] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.133846][ T5990] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.145258][ T5990] vfat filesystem being mounted at /214/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 62.912389][ T6033] loop1: detected capacity change from 0 to 512 [ 62.939233][ T6033] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.974341][ T6033] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 1597403241 (only 1 groups) [ 62.997215][ T6036] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 63.521422][ T6060] loop3: detected capacity change from 0 to 1024 [ 63.526222][ T6058] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 63.541956][ T6058] syzkaller0: linktype set to 768 [ 63.554345][ T6060] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.568219][ T6060] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1006: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.582677][ T6060] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.595010][ T6060] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.595010][ T6060] [ 63.623182][ T6064] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.1006: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.670284][ T6064] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 63.682693][ T6064] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.682693][ T6064] [ 63.695530][ T6060] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm syz.3.1006: lblock 8 mapped to illegal pblock 8 (length 8) [ 63.710831][ T6060] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 63.723205][ T6060] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.723205][ T6060] [ 63.983862][ T29] audit: type=1326 audit(3916387098.272:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 64.032923][ T29] audit: type=1326 audit(3916387098.272:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 64.056266][ T29] audit: type=1326 audit(3916387098.272:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 64.079488][ T29] audit: type=1326 audit(3916387098.272:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 64.102920][ T29] audit: type=1326 audit(3916387098.272:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 64.220176][ T6090] sctp: [Deprecated]: syz.3.1020 (pid 6090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.220176][ T6090] Use struct sctp_sack_info instead [ 64.526320][ T6108] loop3: detected capacity change from 0 to 512 [ 64.553669][ T6108] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1029: invalid indirect mapped block 256 (level 2) [ 64.569594][ T6108] EXT4-fs (loop3): 2 truncates cleaned up [ 64.653738][ T6112] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1029: bg 0: block 5: invalid block bitmap [ 64.687501][ T1601] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.699709][ T1601] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.699709][ T1601] [ 64.699917][ T6114] loop5: detected capacity change from 0 to 1024 [ 64.709375][ T1601] EXT4-fs (loop3): Total free blocks count 0 [ 64.709392][ T1601] EXT4-fs (loop3): Free/Dirty block details [ 64.709404][ T1601] EXT4-fs (loop3): free_blocks=0 [ 64.733028][ T1601] EXT4-fs (loop3): dirty_blocks=2057 [ 64.738310][ T1601] EXT4-fs (loop3): Block reservation details [ 64.744336][ T1601] EXT4-fs (loop3): i_reserved_data_blocks=2057 [ 64.754736][ T6116] loop1: detected capacity change from 0 to 512 [ 64.763814][ T1601] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 64.776395][ T1601] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.776395][ T1601] [ 64.810141][ T6116] ext4 filesystem being mounted at /211/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.900651][ T6123] loop5: detected capacity change from 0 to 1024 [ 64.933298][ T6123] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 64.987052][ T6123] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.013229][ T6123] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.1035: iget: special inode unallocated [ 65.043127][ T6123] EXT4-fs (loop5): Remounting filesystem read-only [ 65.043127][ T6131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.043161][ T6123] EXT4-fs (loop5): no journal found [ 65.049675][ T6131] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.072790][ T6123] EXT4-fs (loop5): can't get journal size [ 65.080783][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 65.080795][ T29] audit: type=1400 audit(3916387099.372:746): avc: denied { mount } for pid=6128 comm="syz.1.1037" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.109170][ T6123] EXT4-fs (loop5): filesystem is read-only [ 65.129614][ T6131] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1036: Allocating blocks 41-42 which overlap fs metadata [ 65.176081][ T6131] Quota error (device loop3): write_blk: dquota write failed [ 65.183562][ T6131] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 65.213179][ T6131] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 65.223282][ T6131] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1036: Failed to acquire dquot type 1 [ 65.244908][ T6131] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 65.279884][ T6131] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1036: corrupted inode contents [ 65.295452][ T6131] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1036: mark_inode_dirty error [ 65.307959][ T6131] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1036: corrupted inode contents [ 65.326176][ T6131] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1036: mark_inode_dirty error [ 65.337776][ T6131] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1036: corrupted inode contents [ 65.350388][ T6131] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 65.359228][ T6131] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1036: corrupted inode contents [ 65.371555][ T6131] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1036: mark_inode_dirty error [ 65.383991][ T6131] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 65.390223][ T6139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.393090][ T6131] EXT4-fs (loop3): 1 truncate cleaned up [ 65.399559][ T6139] EXT4-fs: inline encryption not supported [ 65.419840][ T6139] EXT4-fs: Mount option(s) incompatible with ext2 [ 65.518321][ T6131] EXT4-fs: Ignoring removed orlov option [ 65.525381][ T6131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.535848][ T29] audit: type=1400 audit(3916387099.832:747): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.556017][ T6131] EXT4-fs (loop3): can't enable nombcache during remount [ 65.624104][ T6144] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.679058][ T6150] msdos filesystem being mounted at /80/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 65.778069][ T6156] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 65.785929][ T6156] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1044'. [ 66.286773][ T6183] vhci_hcd vhci_hcd.4: invalid port number 236 [ 67.072733][ T6200] SELinux: failed to load policy [ 67.272118][ T6216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1071'. [ 67.282152][ T6216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1071'. [ 67.307607][ T6219] syzkaller1: entered promiscuous mode [ 67.313226][ T6219] syzkaller1: entered allmulticast mode [ 67.349592][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 67.399757][ T6225] set_capacity_and_notify: 5 callbacks suppressed [ 67.399771][ T6225] loop3: detected capacity change from 0 to 128 [ 67.436899][ T6231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1076'. [ 67.446941][ T6225] FAT-fs (loop3): Directory bread(block 414) failed [ 67.467654][ T6225] FAT-fs (loop3): Directory bread(block 415) failed [ 67.475283][ T6225] FAT-fs (loop3): Directory bread(block 416) failed [ 67.492886][ T6225] FAT-fs (loop3): Directory bread(block 417) failed [ 67.496986][ T3495] kernel read not supported for file /ppp (pid: 3495 comm: kworker/1:8) [ 67.499524][ T6225] FAT-fs (loop3): Directory bread(block 418) failed [ 67.546539][ T6225] FAT-fs (loop3): Directory bread(block 419) failed [ 67.561216][ T6225] FAT-fs (loop3): Directory bread(block 420) failed [ 67.581246][ T6225] FAT-fs (loop3): Directory bread(block 421) failed [ 67.617243][ T6225] vfat filesystem being mounted at /244/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 67.659218][ T29] audit: type=1326 audit(3916387101.942:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 67.693246][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1075'. [ 67.706072][ T29] audit: type=1326 audit(3916387101.942:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 67.729454][ T29] audit: type=1326 audit(3916387101.942:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 67.752780][ T29] audit: type=1326 audit(3916387101.942:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a6b54c0d9 code=0x7ffc0000 [ 67.776043][ T29] audit: type=1326 audit(3916387101.942:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.1.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6b5aacb9 code=0x7ffc0000 [ 67.884327][ T6258] loop5: detected capacity change from 0 to 256 [ 67.892917][ T6258] vfat filesystem being mounted at /95/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 67.940270][ T6253] loop1: detected capacity change from 0 to 8192 [ 67.965850][ T6253] vfat filesystem being mounted at /227/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 68.284088][ T6289] loop5: detected capacity change from 0 to 512 [ 68.302987][ T6289] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.321031][ T6286] loop3: detected capacity change from 0 to 8192 [ 68.332966][ T6289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 68.340807][ T6286] msdos filesystem being mounted at /253/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 68.352454][ T6289] System zones: 1-12 [ 68.372982][ T6289] EXT4-fs (loop5): 1 truncate cleaned up [ 68.392265][ T6289] EXT4-fs mount: 30 callbacks suppressed [ 68.392280][ T6289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.444478][ T6296] veth2: entered promiscuous mode [ 68.449536][ T6296] veth2: entered allmulticast mode [ 68.509104][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.683590][ T6316] loop5: detected capacity change from 0 to 1024 [ 68.693335][ T6312] loop1: detected capacity change from 0 to 2048 [ 68.700529][ T6316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.726883][ T6312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.768023][ T6316] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.1109: inode #926365495: comm syz.5.1109: iget: illegal inode # [ 68.772983][ T6312] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.782370][ T6316] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1109: error while reading EA inode 926365495 err=-117 [ 68.884909][ T6330] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1108: bg 0: block 345: padding at end of block bitmap is not set [ 68.900091][ T6330] EXT4-fs (loop1): Remounting filesystem read-only [ 68.909583][ T1679] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 68.955190][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.977483][ T6335] loop3: detected capacity change from 0 to 1024 [ 68.998370][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.017130][ T6335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.071569][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.146492][ T3405] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 69.163087][ T3405] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.270944][ T6361] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 69.339451][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.379558][ T6365] bond0: (slave geneve2): making interface the new active one [ 69.388347][ T6365] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 69.400048][ T582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.411402][ T582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.420408][ T582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.430165][ T582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.498370][ T6375] loop1: detected capacity change from 0 to 2048 [ 69.528176][ T6375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.602771][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.546186][ T6401] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1143'. [ 70.617882][ T6408] dvmrp6: entered allmulticast mode [ 70.743515][ T6421] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1153'. [ 71.077251][ T6432] loop5: detected capacity change from 0 to 8192 [ 71.133045][ T6432] vfat filesystem being mounted at /116/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 71.596755][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.667130][ T6449] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 71.741544][ T3319] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 71.764388][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 71.764403][ T29] audit: type=1400 audit(3916387106.052:787): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.824732][ T6467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.840217][ T29] audit: type=1400 audit(3916387106.052:788): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 71.862980][ T29] audit: type=1400 audit(3916387106.052:789): avc: denied { unlink } for pid=3319 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.913592][ T4583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.929137][ T6467] EXT4-fs (loop1): 1 truncate cleaned up [ 71.943365][ T6467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.969802][ T6470] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 71.997341][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.024826][ T29] audit: type=1326 audit(3916387106.312:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 72.045228][ T6470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.048355][ T29] audit: type=1326 audit(3916387106.312:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 72.143094][ T29] audit: type=1326 audit(3916387106.372:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 72.166499][ T29] audit: type=1326 audit(3916387106.372:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 72.189836][ T29] audit: type=1326 audit(3916387106.372:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 72.213272][ T29] audit: type=1326 audit(3916387106.382:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 72.236692][ T29] audit: type=1326 audit(3916387106.382:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6476 comm="syz.5.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb94610acb9 code=0x7ffc0000 [ 72.288854][ T6489] EXT4-fs: Ignoring removed orlov option [ 72.314787][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.388217][ T6478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.398554][ T6478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.489719][ T6478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.491728][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.500014][ T6478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.696817][ T6478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.707122][ T6478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.851960][ T6478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.862397][ T6478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.903508][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 72.955158][ T6507] chnl_net:caif_netlink_parms(): no params data found [ 72.981069][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.988333][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.995915][ T6500] bridge_slave_0: entered allmulticast mode [ 73.003694][ T6500] bridge_slave_0: entered promiscuous mode [ 73.019371][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.026480][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.033981][ T6500] bridge_slave_1: entered allmulticast mode [ 73.040623][ T6500] bridge_slave_1: entered promiscuous mode [ 73.068246][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.089139][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.129904][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.137039][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.144778][ T6507] bridge_slave_0: entered allmulticast mode [ 73.151278][ T6507] bridge_slave_0: entered promiscuous mode [ 73.217904][ T6478] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 73.243763][ T6478] bond1 (unregistering): (slave geneve2): Releasing active interface [ 73.258794][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.268869][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.278465][ T6478] bond0 (unregistering): Released all slaves [ 73.286129][ T6478] bond1 (unregistering): Released all slaves [ 73.294958][ T6478] bond2 (unregistering): Released all slaves [ 73.303483][ T6500] team0: Port device team_slave_0 added [ 73.309279][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.316494][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.323874][ T6507] bridge_slave_1: entered allmulticast mode [ 73.330385][ T6507] bridge_slave_1: entered promiscuous mode [ 73.343074][ T6500] team0: Port device team_slave_1 added [ 73.362434][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.374035][ T6478] hsr_slave_0: left promiscuous mode [ 73.379728][ T6478] hsr_slave_1: left promiscuous mode [ 73.385863][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.393276][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.400756][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.408199][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.418164][ T6478] veth1_macvtap: left promiscuous mode [ 73.423677][ T6478] veth0_macvtap: left promiscuous mode [ 73.429209][ T6478] veth1_vlan: left promiscuous mode [ 73.434478][ T6478] veth0_vlan: left promiscuous mode [ 73.496007][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 73.505611][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 73.539859][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.554230][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.561244][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.587231][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.602993][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.609962][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.635932][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.650118][ T6507] team0: Port device team_slave_0 added [ 73.658300][ T6507] team0: Port device team_slave_1 added [ 73.687551][ T6500] hsr_slave_0: entered promiscuous mode [ 73.706497][ T6500] hsr_slave_1: entered promiscuous mode [ 73.725113][ T6500] debugfs: 'hsr0' already exists in 'hsr' [ 73.730962][ T6500] Cannot create hsr debugfs directory [ 73.742657][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.749796][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.775945][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.831314][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.838422][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.864417][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.929957][ T6507] hsr_slave_0: entered promiscuous mode [ 73.936025][ T6507] hsr_slave_1: entered promiscuous mode [ 73.941778][ T6507] debugfs: 'hsr0' already exists in 'hsr' [ 73.947519][ T6507] Cannot create hsr debugfs directory [ 74.049106][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1199'. [ 74.058081][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1199'. [ 74.062228][ T6500] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.067127][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 74.085545][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1199'. [ 74.094547][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1199'. [ 74.103626][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 74.106271][ T6500] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.126752][ T6507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 74.153506][ T6500] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.175605][ T6507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 74.183629][ T6601] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 74.205236][ T6507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 74.234296][ T6507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 74.256237][ T6500] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.318521][ T6478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.328905][ T6478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.414855][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.443729][ T6507] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.484849][ T6478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.495181][ T6478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.507747][ T6642] set_capacity_and_notify: 3 callbacks suppressed [ 74.507761][ T6642] loop5: detected capacity change from 0 to 512 [ 74.563322][ T6642] EXT4-fs: Ignoring removed bh option [ 74.581190][ T6642] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 74.601704][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.613174][ T6642] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 74.623316][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.630449][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.654450][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.654570][ T6642] EXT4-fs (loop5): failed to open journal device unknown-block(8,224) -6 [ 74.661551][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.750151][ T6478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.760503][ T6478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.836559][ T6478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.846869][ T6478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.902686][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.924865][ T582] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.931956][ T582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.954580][ T582] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.961653][ T582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.086076][ T6478] bridge_slave_1: left allmulticast mode [ 75.091755][ T6478] bridge_slave_1: left promiscuous mode [ 75.097475][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.125231][ T6678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6678 comm=syz.2.1217 [ 75.138703][ T6478] bridge_slave_0: left allmulticast mode [ 75.139713][ T6679] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1216'. [ 75.144556][ T6478] bridge_slave_0: left promiscuous mode [ 75.159089][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.235265][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.245315][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.254396][ T6478] bond0 (unregistering): Released all slaves [ 75.479680][ T6727] loop1: detected capacity change from 0 to 512 [ 75.498257][ T6727] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1223: inode has both inline data and extents flags [ 75.511877][ T6727] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1223: couldn't read orphan inode 15 (err -117) [ 75.524882][ T6727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.642814][ T6478] hsr_slave_0: left promiscuous mode [ 75.660161][ T6478] hsr_slave_1: left promiscuous mode [ 75.668110][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.672911][ T6731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 75.689032][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.717263][ T6758] loop2: detected capacity change from 0 to 1024 [ 75.751360][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 75.759313][ T6758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.773331][ T6758] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.795810][ T6478] team0 (unregistering): Port device team_slave_0 removed [ 75.805263][ T6758] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1226: Freeing blocks not in datazone - block = 0, count = 16 [ 75.835640][ T6758] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1226: bg 0: block 112: padding at end of block bitmap is not set [ 75.851679][ T6758] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 75.864176][ T6758] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.864176][ T6758] [ 75.873893][ T6758] EXT4-fs (loop2): Total free blocks count 0 [ 75.879874][ T6758] EXT4-fs (loop2): Free/Dirty block details [ 75.885894][ T6758] EXT4-fs (loop2): free_blocks=0 [ 75.890999][ T6758] EXT4-fs (loop2): dirty_blocks=80 [ 75.896124][ T6758] EXT4-fs (loop2): Block reservation details [ 75.902171][ T6758] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 75.920073][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.936929][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.946925][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.958608][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.975902][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1230'. [ 76.031614][ T6771] bridge0: port 3(team0) entered disabled state [ 76.060388][ T6771] team0 (unregistering): left allmulticast mode [ 76.066734][ T6771] team_slave_0: left allmulticast mode [ 76.072259][ T6771] team_slave_1: left allmulticast mode [ 76.077793][ T6771] team0 (unregistering): left promiscuous mode [ 76.083991][ T6771] team_slave_0: left promiscuous mode [ 76.089433][ T6771] team_slave_1: left promiscuous mode [ 76.095122][ T6771] bridge0: port 3(team0) entered disabled state [ 76.113638][ T6771] team0 (unregistering): Port device team_slave_0 removed [ 76.131887][ T6771] team0 (unregistering): Port device team_slave_1 removed [ 76.142653][ T6771] team0 (unregistering): Port device bridge1 removed [ 76.353736][ T6500] veth0_vlan: entered promiscuous mode [ 76.369014][ T6500] veth1_vlan: entered promiscuous mode [ 76.400028][ T6840] netlink: 'syz.5.1238': attribute type 13 has an invalid length. [ 76.407956][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 76.419393][ T6839] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 76.442380][ T6839] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 76.450729][ T6840] netlink: 'syz.5.1238': attribute type 13 has an invalid length. [ 76.456374][ T6500] veth0_macvtap: entered promiscuous mode [ 76.458601][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1238'. [ 76.483807][ T6507] veth0_vlan: entered promiscuous mode [ 76.494246][ T6500] veth1_macvtap: entered promiscuous mode [ 76.521529][ T6507] veth1_vlan: entered promiscuous mode [ 76.534238][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.590226][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.613138][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.636205][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.650787][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.675576][ T6507] veth0_macvtap: entered promiscuous mode [ 76.699197][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.709331][ T6507] veth1_macvtap: entered promiscuous mode [ 76.740543][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.763740][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.778638][ T5806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.810014][ T5806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.822680][ T6882] loop5: detected capacity change from 0 to 1024 [ 76.832492][ T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.853016][ T6882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.867806][ T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.878457][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 76.878471][ T29] audit: type=1326 audit(3916387367.144:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 76.908157][ T29] audit: type=1326 audit(3916387367.144:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 76.932047][ T29] audit: type=1326 audit(3916387367.144:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 76.955343][ T29] audit: type=1326 audit(3916387367.144:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 76.966925][ T6882] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.978879][ T29] audit: type=1326 audit(3916387367.144:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 76.978934][ T29] audit: type=1326 audit(3916387367.164:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 77.036083][ T29] audit: type=1326 audit(3916387367.164:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 77.059587][ T29] audit: type=1326 audit(3916387367.164:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 77.082815][ T29] audit: type=1326 audit(3916387367.164:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 77.106404][ T29] audit: type=1326 audit(3916387367.164:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.7.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6b8bacb9 code=0x7ffc0000 [ 77.129100][ T6882] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.1249: lblock 3 mapped to illegal pblock 3 (length 3) [ 77.205335][ T6882] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 77.217783][ T6882] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.217783][ T6882] [ 77.249105][ T6911] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm syz.5.1249: lblock 8 mapped to illegal pblock 8 (length 8) [ 77.279930][ T6911] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 77.292378][ T6911] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.292378][ T6911] [ 77.334499][ T5053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.348028][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.360835][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.607723][ T6950] loop2: detected capacity change from 0 to 1024 [ 77.653609][ T6950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.666555][ T6950] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.679312][ T6950] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.1266: lblock 0 mapped to illegal pblock 0 (length 2) [ 77.693412][ T6962] loop7: detected capacity change from 0 to 128 [ 77.703459][ T6962] vfat filesystem being mounted at /6/bus supports timestamps until 2107-12-31 (0x10391447e) [ 77.703658][ T6950] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 77.738168][ T6950] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.1266: lblock 0 mapped to illegal pblock 0 (length 1) [ 77.753508][ T6950] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 77.775247][ T6950] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.1266: lblock 0 mapped to illegal pblock 0 (length 1) [ 77.819963][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.017989][ T7014] loop6: detected capacity change from 0 to 164 [ 78.825919][ T7128] loop5: detected capacity change from 0 to 2048 [ 78.864820][ T7128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 78.899854][ T7127] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.933750][ T7127] EXT4-fs (loop5): Remounting filesystem read-only [ 78.942509][ T7127] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 79.243334][ T7139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 79.729113][ T7146] chnl_net:caif_netlink_parms(): no params data found [ 79.738276][ T7181] loop1: detected capacity change from 0 to 1024 [ 79.779795][ T7181] EXT4-fs: Ignoring removed bh option [ 79.837345][ T7181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 79.871370][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.878465][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.879592][ T7181] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.907644][ T7146] bridge_slave_0: entered allmulticast mode [ 79.935034][ T7146] bridge_slave_0: entered promiscuous mode [ 79.944398][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.951473][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.963061][ T7146] bridge_slave_1: entered allmulticast mode [ 79.969598][ T7146] bridge_slave_1: entered promiscuous mode [ 80.064966][ T7146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.078374][ T7146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.106011][ T7146] team0: Port device team_slave_0 added [ 80.121019][ T57] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 80.123238][ T7146] team0: Port device team_slave_1 added [ 80.150031][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 80.162317][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 80.162317][ T57] [ 80.177062][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.184074][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.186122][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 80.210059][ T7146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.252504][ T7194] SELinux: security policydb version 18 (MLS) not backwards compatible [ 80.260858][ T7194] SELinux: failed to load policy [ 80.267156][ T7146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.274229][ T7146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.300129][ T7146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.331669][ T7146] hsr_slave_0: entered promiscuous mode [ 80.337895][ T7146] hsr_slave_1: entered promiscuous mode [ 80.345350][ T7146] debugfs: 'hsr0' already exists in 'hsr' [ 80.351095][ T7146] Cannot create hsr debugfs directory [ 80.376030][ T7199] loop1: detected capacity change from 0 to 1024 [ 80.377718][ T7200] __nla_validate_parse: 2 callbacks suppressed [ 80.377733][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1316'. [ 80.406776][ T7199] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.427804][ T7199] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 80.438434][ T7199] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.441934][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1316'. [ 80.444852][ T582] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.462451][ T582] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.463789][ T7199] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1315: Failed to acquire dquot type 0 [ 80.471338][ T582] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.471448][ T582] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.546425][ T7199] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1315: Failed to acquire dquot type 0 [ 80.565844][ T7199] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1315: Freeing blocks not in datazone - block = 0, count = 4096 [ 80.579850][ T7199] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1315: Failed to acquire dquot type 0 [ 80.603522][ T7199] EXT4-fs (loop1): 1 orphan inode deleted [ 80.610081][ T7199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.653969][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1320'. [ 80.667435][ T7212] erspan0: entered promiscuous mode [ 80.674411][ T7212] macsec1: entered promiscuous mode [ 80.679954][ T7212] macsec1: entered allmulticast mode [ 80.685304][ T7212] erspan0: entered allmulticast mode [ 80.713825][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.724273][ T7212] erspan0: left allmulticast mode [ 80.729480][ T7212] erspan0: left promiscuous mode [ 80.764113][ T7214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.775552][ T7214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.789538][ T7146] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 80.813800][ T7146] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 80.822781][ T7146] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 80.844002][ T7146] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 80.851916][ T7215] loop6: detected capacity change from 0 to 256 [ 80.861325][ T7214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.871641][ T7214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.887967][ T7215] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 80.934507][ T7214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.944829][ T7214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.041658][ T7214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.052142][ T7214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.090805][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.114187][ T7224] veth0: entered promiscuous mode [ 81.126698][ T7146] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.139698][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.146768][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.166265][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.173432][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.181715][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1323'. [ 81.215176][ T42] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.223425][ T42] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.263639][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.271842][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.315935][ T359] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.324187][ T359] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.379276][ T359] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.387518][ T359] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.469669][ T7237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.505208][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.620187][ T7250] loop1: detected capacity change from 0 to 1024 [ 81.633349][ T7250] EXT4-fs: Ignoring removed bh option [ 81.676832][ T7250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.774074][ T7146] veth0_vlan: entered promiscuous mode [ 81.821143][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.836621][ T7146] veth1_vlan: entered promiscuous mode [ 81.871145][ T7146] veth0_macvtap: entered promiscuous mode [ 81.887698][ T7146] veth1_macvtap: entered promiscuous mode [ 81.926057][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.934015][ T7269] loop1: detected capacity change from 0 to 4096 [ 81.952471][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.953535][ T7269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.982367][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.013816][ T42] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.030756][ T42] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.095047][ T42] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.211517][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1337'. [ 82.220977][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.232730][ T7286] netlink: 'syz.8.1338': attribute type 8 has an invalid length. [ 82.240752][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1338'. [ 82.254982][ T7284] team0 (unregistering): Port device team_slave_0 removed [ 82.288513][ T7288] loop1: detected capacity change from 0 to 1024 [ 82.304450][ T7284] team0 (unregistering): Port device team_slave_1 removed [ 82.313427][ T7288] EXT4-fs: inline encryption not supported [ 82.321106][ T7286] bond0: entered promiscuous mode [ 82.326362][ T7286] bond_slave_0: entered promiscuous mode [ 82.328213][ T7288] EXT4-fs: Ignoring removed bh option [ 82.332414][ T7286] bond_slave_1: entered promiscuous mode [ 82.349739][ T7288] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.352443][ T7286] gretap0: entered promiscuous mode [ 82.374172][ T7286] bond0: left promiscuous mode [ 82.379077][ T7286] bond_slave_0: left promiscuous mode [ 82.384656][ T7286] bond_slave_1: left promiscuous mode [ 82.390910][ T7288] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.398231][ T7288] EXT4-fs error (device loop1): ext4_quota_enable:7177: comm syz.1.1339: inode #2304: comm syz.1.1339: iget: illegal inode # [ 82.412166][ T7288] EXT4-fs (loop1): Remounting filesystem read-only [ 82.418810][ T7288] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 82.419434][ T7286] gretap0: left promiscuous mode [ 82.433867][ T7288] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 82.446071][ T7288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.511205][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.569331][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 82.569346][ T29] audit: type=1400 audit(3916387372.854:911): avc: denied { bind } for pid=7297 comm="syz.6.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.629584][ T29] audit: type=1400 audit(3916387372.894:912): avc: denied { listen } for pid=7297 comm="syz.6.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.716119][ T7308] bridge_slave_0: left allmulticast mode [ 82.721839][ T7308] bridge_slave_0: left promiscuous mode [ 82.727832][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.762887][ T7308] bridge_slave_1: left allmulticast mode [ 82.768653][ T7308] bridge_slave_1: left promiscuous mode [ 82.774396][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.822107][ T7308] bond0: (slave bond_slave_0): Releasing backup interface [ 82.865093][ T7308] bond0: (slave bond_slave_1): Releasing backup interface [ 82.908173][ T7308] team0: Port device team_slave_0 removed [ 82.946146][ T7308] team0: Port device team_slave_1 removed [ 82.954873][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.962297][ T7308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.971426][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.979286][ T7308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.988939][ T7308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.254628][ T7325] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1352'. [ 83.453643][ T7345] loop8: detected capacity change from 0 to 128 [ 83.467596][ T7345] vfat filesystem being mounted at /9/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 83.636804][ T57] ================================================================== [ 83.644915][ T57] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat32_ent_put [ 83.653177][ T57] [ 83.655500][ T57] read-write to 0xffff888121b631f0 of 4 bytes by task 7345 on cpu 1: [ 83.663556][ T57] fat32_ent_put+0x4e/0x90 [ 83.667989][ T57] fat_alloc_clusters+0x57b/0xc50 [ 83.673024][ T57] fat_get_block+0x258/0x5e0 [ 83.677643][ T57] __block_write_begin_int+0x400/0xf90 [ 83.683101][ T57] cont_write_begin+0x5fe/0x970 [ 83.687960][ T57] fat_write_begin+0x4f/0xe0 [ 83.692554][ T57] generic_perform_write+0x183/0x490 [ 83.697834][ T57] __generic_file_write_iter+0x9e/0x120 [ 83.703382][ T57] generic_file_write_iter+0x8d/0x310 [ 83.708751][ T57] vfs_write+0x5a6/0x9f0 [ 83.712977][ T57] ksys_write+0xdc/0x1a0 [ 83.717203][ T57] __x64_sys_write+0x40/0x50 [ 83.721782][ T57] x64_sys_call+0x2847/0x3000 [ 83.726448][ T57] do_syscall_64+0xc0/0x2a0 [ 83.730931][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.736809][ T57] [ 83.739114][ T57] read to 0xffff888121b63000 of 512 bytes by task 57 on cpu 0: [ 83.746656][ T57] copy_folio_from_iter_atomic+0x75f/0x1170 [ 83.752571][ T57] generic_perform_write+0x2c1/0x490 [ 83.757845][ T57] shmem_file_write_iter+0xc5/0xf0 [ 83.762945][ T57] lo_rw_aio+0x67d/0x730 [ 83.767168][ T57] loop_process_work+0x56c/0xac0 [ 83.772088][ T57] loop_workfn+0x31/0x40 [ 83.776312][ T57] process_scheduled_works+0x4cd/0x9d0 [ 83.781754][ T57] worker_thread+0x581/0x770 [ 83.786327][ T57] kthread+0x488/0x510 [ 83.790380][ T57] ret_from_fork+0x148/0x280 [ 83.794955][ T57] ret_from_fork_asm+0x1a/0x30 [ 83.799704][ T57] [ 83.802007][ T57] Reported by Kernel Concurrency Sanitizer on: [ 83.808134][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.817831][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.827869][ T57] Workqueue: loop8 loop_workfn SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 83.832642][ T57] ================================================================== [ 84.082395][ T7352] bio_check_eod: 84 callbacks suppressed [ 84.082460][ T7352] syz.8.1357: attempt to access beyond end of device [ 84.082460][ T7352] loop8: rw=2049, sector=481, nr_sectors = 56 limit=128 [ 84.102776][ T7352] syz.8.1357: attempt to access beyond end of device [ 84.102776][ T7352] loop8: rw=2049, sector=545, nr_sectors = 104 limit=128 [ 84.104208][ T7345] syz.8.1357: attempt to access beyond end of device [ 84.104208][ T7345] loop8: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 84.116571][ T7352] syz.8.1357: attempt to access beyond end of device [ 84.116571][ T7352] loop8: rw=2049, sector=681, nr_sectors = 16 limit=128 [ 84.131562][ T7345] syz.8.1357: attempt to access beyond end of device [ 84.131562][ T7345] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 84.143764][ T7352] syz.8.1357: attempt to access beyond end of device [ 84.143764][ T7352] loop8: rw=2049, sector=705, nr_sectors = 8 limit=128 [ 84.158810][ T7345] syz.8.1357: attempt to access beyond end of device [ 84.158810][ T7345] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 84.183658][ T7352] syz.8.1357: attempt to access beyond end of device [ 84.183658][ T7352] loop8: rw=2049, sector=721, nr_sectors = 16 limit=128 [ 84.185108][ T7345] syz.8.1357: attempt to access beyond end of device [ 84.185108][ T7345] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 84.197316][ T7352] syz.8.1357: attempt to access beyond end of device [ 84.197316][ T7352] loop8: rw=2049, sector=745, nr_sectors = 16 limit=128 [ 84.259554][ T6478] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.345722][ T6478] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.425944][ T6478] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.496428][ T6478] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.593545][ T6478] bridge_slave_1: left allmulticast mode [ 84.599232][ T6478] bridge_slave_1: left promiscuous mode [ 84.604941][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.612829][ T6478] bridge_slave_0: left allmulticast mode [ 84.619025][ T6478] bridge_slave_0: left promiscuous mode [ 84.624648][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.744777][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.754814][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.764616][ T6478] bond0 (unregistering): Released all slaves [ 84.808252][ T6478] hsr_slave_0: left promiscuous mode [ 84.814241][ T6478] hsr_slave_1: left promiscuous mode [ 84.819940][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.827399][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.835163][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.842586][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.853366][ T6478] veth1_macvtap: left promiscuous mode [ 84.858925][ T6478] veth0_macvtap: left promiscuous mode [ 84.864566][ T6478] veth1_vlan: left promiscuous mode [ 84.869822][ T6478] veth0_vlan: left promiscuous mode [ 85.229167][ T6478] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.295566][ T6478] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.336283][ T6478] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.385478][ T6478] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.459231][ T6478] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.469600][ T6478] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.505961][ T6478] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.516330][ T6478] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.556325][ T6478] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.566648][ T6478] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.635839][ T6478] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.646178][ T6478] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.713705][ T6478] bridge_slave_1: left allmulticast mode [ 85.719357][ T6478] bridge_slave_1: left promiscuous mode [ 85.725196][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.733020][ T6478] bridge_slave_0: left allmulticast mode [ 85.738652][ T6478] bridge_slave_0: left promiscuous mode [ 85.744434][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.854492][ T6478] bond0 (unregistering): Released all slaves [ 85.925577][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.935659][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.945200][ T6478] bond0 (unregistering): Released all slaves [ 85.990701][ T6478] hsr_slave_0: left promiscuous mode [ 85.996873][ T6478] hsr_slave_1: left promiscuous mode [ 86.005841][ T6478] hsr_slave_0: left promiscuous mode [ 86.011529][ T6478] hsr_slave_1: left promiscuous mode [ 86.018129][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.025578][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.033860][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.041249][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.054270][ T6478] veth1_macvtap: left promiscuous mode [ 86.059835][ T6478] veth0_macvtap: left promiscuous mode [ 86.065430][ T6478] veth1_vlan: left promiscuous mode [ 86.070802][ T6478] veth0_vlan: left promiscuous mode [ 86.076837][ T6478] veth1_macvtap: left promiscuous mode [ 86.082307][ T6478] veth0_macvtap: left promiscuous mode [ 86.088128][ T6478] veth1_vlan: left promiscuous mode [ 86.093664][ T6478] veth0_vlan: left promiscuous mode [ 86.226653][ T6478] team0 (unregistering): Port device team_slave_1 removed [ 86.236481][ T6478] team0 (unregistering): Port device team_slave_0 removed