last executing test programs: 4m31.278543581s ago: executing program 32 (id=7722): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) 4m30.734152422s ago: executing program 33 (id=7728): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 2m44.119048461s ago: executing program 34 (id=11262): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m36.263633251s ago: executing program 5 (id=13784): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x0, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) semtimedop(0x0, &(0x7f0000000040), 0x5d, 0x0) 1m36.114730339s ago: executing program 5 (id=13786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000d0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r0, &(0x7f00000001c0), 0x0}, 0x20) 1m36.075520302s ago: executing program 5 (id=13789): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffff7, 0x2003ff, 0xfffffffd, 0xc4cf, 0x90, "000008ecff000000150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) 1m36.039983714s ago: executing program 5 (id=13791): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) 1m35.982130797s ago: executing program 5 (id=13793): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') 1m35.748662471s ago: executing program 5 (id=13798): unshare(0x22020400) r0 = socket$packet(0x11, 0x3, 0x300) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000dc0)) 1m25.183466692s ago: executing program 7 (id=14023): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0x0, 0xee01, 0x0) 1m24.737480868s ago: executing program 7 (id=14032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m24.69766083s ago: executing program 7 (id=14033): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 1m24.681676461s ago: executing program 7 (id=14034): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 1m23.773991814s ago: executing program 7 (id=14041): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m23.68671266s ago: executing program 7 (id=14043): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 1m22.15409778s ago: executing program 35 (id=13765): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000d80)=""/235}, 0x20) 1m20.687495766s ago: executing program 36 (id=13798): unshare(0x22020400) r0 = socket$packet(0x11, 0x3, 0x300) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000dc0)) 1m15.218574828s ago: executing program 1 (id=14177): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x9, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 1m15.18478481s ago: executing program 1 (id=14180): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1m15.108402504s ago: executing program 1 (id=14184): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgrp(0xffffffffffffffff) 1m14.655447281s ago: executing program 1 (id=14201): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m14.514261279s ago: executing program 1 (id=14203): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m14.476613691s ago: executing program 1 (id=14205): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000002640)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}, 0x40000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000300)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m8.600941567s ago: executing program 37 (id=14043): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 59.459678404s ago: executing program 38 (id=14205): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000002640)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}, 0x40000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000300)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 37.730736512s ago: executing program 0 (id=15204): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 37.618887859s ago: executing program 0 (id=15208): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 37.448479618s ago: executing program 0 (id=15215): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 37.404355191s ago: executing program 0 (id=15217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe4a}}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 36.870483312s ago: executing program 0 (id=15221): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0xa, 0x4}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) 36.484141925s ago: executing program 0 (id=15228): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) setns(r1, 0x6c020000) 36.442666227s ago: executing program 39 (id=15228): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) setns(r1, 0x6c020000) 23.971607841s ago: executing program 3 (id=15651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 23.971214751s ago: executing program 3 (id=15654): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23.919551614s ago: executing program 3 (id=15658): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 23.836966049s ago: executing program 3 (id=15662): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 23.826700909s ago: executing program 3 (id=15664): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffff, 0x4}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="10"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.609469572s ago: executing program 3 (id=15669): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x12) 23.609373122s ago: executing program 40 (id=15669): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001600)=""/4081, 0x7, 0x12) 1.286992505s ago: executing program 8 (id=16456): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040), 0x6, 0x50c, &(0x7f0000000a40)="$eJzs3c9vG1kdAPDvOHGTZt1NF/YACNiyLBRU6vzobrRaDnQvILRaCVEhIXFoQ+JGUew6ipPShBzSI3ckKnGCP4EbB6SeOHDjBjcu5YBUIAI1SBwGzXiauPlRhzaJt/bnI01m3hvX3/fGfe/NvNR9AQysSxGxFRHnIuJWRIwX+UmxxfX2lr3uyfbm3M725lwSaXrjH0l+PsuLjj+Tea14z9GI+P53In6cHIzbWt9Ymq3XaytFemK1sTzRWt+4ulgqcqZnpmYm37/23vSJ1fWtxm8ef3vxox/87rdfePTHra//NCtW5WcX8nOd9ThJ7aqXo9KRNxwRH51GsB4ZLv7+8OrJWtunIuLtvP2Px1D+aQIA/SxNxyMd70wDAP0ue/6vRFKqFnMBlSiVqtX2HN6bMVaqN1urV8aba3fmI5/Duhjl0u3Fem2ymCu8GOUkS0/lx3vp6X3paxHxRkT8fOR8nq7ONevzvbzxAYAB9tq+8f/fI+3xHwDoc6O9LgAAcOaM/wAweIz/ADB4/o/x37cDAaBPeP4HgMFj/AeAwdN1/L9/NuUAAM7E9z7+ONvSneL/v56/u772zcrdq/O11lK1sTZXnWuuLFcXms2Feq06l6bd3q/ebC5PvbubbK1v3Gw01+6s3lxszC7UbtbKp1wfAKC7N956+OckIrY+OJ9v0bGWg7Ea+lvpmXZ+yEI9QN8a6nUBgJ7xfR4YXMd4xjcNAH2u25P/kf9E6IHFX+FVdfmz5v9hUJV6XQCgZ15s/v9bJ14O4OyZ/4fBlaaJNf8BYMCY4wde5Pf/P4zi9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwoCr5lpSq+VrgW9nPUrUacSEiLkY5ub1Yr01GxOsR8aeR8kiWnup1oQGAl1T6W1Ks/3V5/J3K/rPnkv+M5PuI+Mkvb/zi3uzq6spUlv/P3fzVB0X+9LleVAAA6HT9YFZ7nC72HQ/yT7Y3555uZ1nExx+2FxfN4u4UW/vMcAzn+9EoR8TYv5Ii3ZbdrwydQPyt+xHxmb363+uIUMnnQNorn+6Pn8W+cArx965/EmmapnvxS8/EL+Vly/bl/Fp8+gTKAoPm4YftfjJrd+e3N7MmVrS/UlzK94e3/9G8h3p5T/u/nQP9X2m3/xs6ED/J2/yl3fTzS/L43d9/90BmOt4+dz/ic8OHxU924ydH9L/vHLOOf/n8F98+6lz6q4jLcXj8tkbezU6sNpYnWusbVxcbswu1hdqd6emZqZnJ96+9Nz2Rz1G3f/7hsBh//+DK60fFz+o/dkT80S71/8ox6//r/9760ZeeE/9rXz7883/zOfGzMfGrx4w/O3b9sOW7d+PPH1H/bp//lWPGf/TXjfljvhQAOAOt9Y2l2Xq9ttLlILvX7PYaB6/mQWxFnHHQb4zu3t9/Qi5Cnx1kV/bl3qe3/RJw+vYafa9LAgAAAAAAAAAAAAAAHKW1vrE0Eqf7baRe1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+9b8AAAD//6pLzBE=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1.225576328s ago: executing program 4 (id=16460): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) 1.130245483s ago: executing program 4 (id=16463): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) 810.503852ms ago: executing program 6 (id=16468): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@tcp6, 0x2}, 0x20) 810.086443ms ago: executing program 6 (id=16469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0)=0x7, 0x4) 792.582873ms ago: executing program 6 (id=16470): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x80000001}]}) 731.117327ms ago: executing program 9 (id=16472): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 665.212241ms ago: executing program 6 (id=16473): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_usbip_server_init(0x1) 664.992871ms ago: executing program 9 (id=16474): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8704, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7b94}, 0x10, 0x3, 0x8, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 589.394955ms ago: executing program 8 (id=16475): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x646, &(0x7f0000006a80)="$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") 524.709329ms ago: executing program 9 (id=16476): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 441.561164ms ago: executing program 2 (id=16477): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) 441.358524ms ago: executing program 4 (id=16478): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) 441.238074ms ago: executing program 9 (id=16479): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 348.34755ms ago: executing program 9 (id=16480): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) 337.9065ms ago: executing program 8 (id=16481): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500200000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 325.034301ms ago: executing program 2 (id=16482): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 298.631423ms ago: executing program 4 (id=16483): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x188}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0xf2ba, 0x2, 0x0, 0x0) 219.750377ms ago: executing program 2 (id=16484): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, &(0x7f0000000180)=0x3ff, 0xc, 0x0) 210.322747ms ago: executing program 8 (id=16485): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 204.622478ms ago: executing program 4 (id=16486): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x217, 0x5, 0x0, 0x43c}) 190.815729ms ago: executing program 9 (id=16487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e34, 0x80000000, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x80000b, @empty, 0x3}, 0x1c) 128.247883ms ago: executing program 8 (id=16488): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 96.104304ms ago: executing program 2 (id=16489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 95.586525ms ago: executing program 4 (id=16490): r0 = semget(0x1, 0x4, 0x3c4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) semop(r0, &(0x7f0000000040)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 67.005496ms ago: executing program 2 (id=16491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400202024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r2], 0x22c}, 0x1, 0x0, 0x0, 0x40250c5}, 0x0) 49.193667ms ago: executing program 8 (id=16492): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") r0 = open(&(0x7f0000000c00)='./file0\x00', 0x400, 0x0) lseek(r0, 0x7ff, 0x1) getdents64(r0, 0x0, 0x10) 11.466659ms ago: executing program 6 (id=16493): r0 = gettid() r1 = eventfd(0xffffffff) r2 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000080)={r2, r2, 0x10000}) 11.142739ms ago: executing program 2 (id=16494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4004014) 0s ago: executing program 6 (id=16495): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): ass=netlink_xfrm_socket permissive=1 [ 431.387604][ T29] audit: type=1400 audit(687.378:5806): avc: denied { mount } for pid=4920 comm="syz.6.14626" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 431.479158][ T4680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.504892][ T4937] program syz.9.14629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.577974][ T29] audit: type=1400 audit(687.568:5807): avc: denied { execute } for pid=4947 comm="syz.9.14632" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 431.644533][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14634'. [ 431.695395][ T4680] veth0_vlan: entered promiscuous mode [ 431.708651][ T4680] veth1_vlan: entered promiscuous mode [ 431.735202][ T4680] veth0_macvtap: entered promiscuous mode [ 431.760352][ T4680] veth1_macvtap: entered promiscuous mode [ 431.796383][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.810716][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.830480][ T806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.866169][ T2119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.878490][ T2119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.891789][ T2119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.374263][ T29] audit: type=1400 audit(688.358:5808): avc: denied { create } for pid=5046 comm="syz.2.14660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 432.448662][ T29] audit: type=1400 audit(688.388:5809): avc: denied { sys_admin } for pid=5046 comm="syz.2.14660" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 432.569869][ T29] audit: type=1326 audit(688.558:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.8.14670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 432.597527][ T5074] loop0: detected capacity change from 0 to 256 [ 432.635786][ T29] audit: type=1326 audit(688.588:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.8.14670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 432.658773][ T29] audit: type=1326 audit(688.588:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.8.14670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 432.681771][ T29] audit: type=1326 audit(688.588:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.8.14670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 432.704781][ T29] audit: type=1326 audit(688.588:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.8.14670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 433.146539][ T5151] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.267054][ T5161] loop8: detected capacity change from 0 to 128 [ 433.500481][ T5182] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 433.762611][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.776765][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.893939][ T5240] loop6: detected capacity change from 0 to 512 [ 433.919432][ T5240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.017892][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.280125][ T3168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.359509][ T3168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.389661][ T5301] loop8: detected capacity change from 0 to 512 [ 434.426144][ T5301] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #12: comm syz.8.14725: corrupted in-inode xattr: bad e_name length [ 434.453577][ T3168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.466226][ T5301] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.14725: couldn't read orphan inode 12 (err -117) [ 434.501416][ T5301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.525313][ T3168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.583793][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.654332][ T3168] bridge_slave_1: left allmulticast mode [ 434.660084][ T3168] bridge_slave_1: left promiscuous mode [ 434.666356][ T3168] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.694245][ T3168] bridge_slave_0: left allmulticast mode [ 434.700617][ T3168] bridge_slave_0: left promiscuous mode [ 434.706441][ T3168] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.863433][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14735'. [ 434.900526][ T3168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.917048][ T5351] loop0: detected capacity change from 0 to 512 [ 434.925714][ T3168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.942724][ T3168] bond0 (unregistering): Released all slaves [ 434.970049][ T5351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.029672][ T3168] hsr_slave_0: left promiscuous mode [ 435.052332][ T3168] hsr_slave_1: left promiscuous mode [ 435.071621][ T4680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.073311][ T3168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.088026][ T3168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.130856][ T3168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.138421][ T3168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.178983][ T3168] veth1_macvtap: left promiscuous mode [ 435.184511][ T3168] veth0_macvtap: left promiscuous mode [ 435.190449][ T3168] veth1_vlan: left promiscuous mode [ 435.200355][ T3168] veth0_vlan: left promiscuous mode [ 435.342196][ T3168] team0 (unregistering): Port device team_slave_1 removed [ 435.355192][ T3168] team0 (unregistering): Port device team_slave_0 removed [ 435.451445][ T5397] loop6: detected capacity change from 0 to 512 [ 435.460945][ T5397] EXT4-fs (loop6): blocks per group (8192) and clusters per group (2304) inconsistent [ 435.627966][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14751'. [ 435.649658][ T5308] chnl_net:caif_netlink_parms(): no params data found [ 435.750535][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14756'. [ 435.826990][ T5308] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.834079][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.857279][ T5308] bridge_slave_0: entered allmulticast mode [ 435.868967][ T5308] bridge_slave_0: entered promiscuous mode [ 435.886172][ T5308] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.893344][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.911316][ T5308] bridge_slave_1: entered allmulticast mode [ 435.926323][ T5308] bridge_slave_1: entered promiscuous mode [ 435.965891][ T5308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.976542][ T5308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.032341][ T5308] team0: Port device team_slave_0 added [ 436.059095][ T5308] team0: Port device team_slave_1 added [ 436.092712][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.099701][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.126332][ T5308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.214951][ T5308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.222586][ T5308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.249157][ T5308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.586143][ T5308] hsr_slave_0: entered promiscuous mode [ 436.616152][ T5308] hsr_slave_1: entered promiscuous mode [ 436.642667][ T5308] debugfs: 'hsr0' already exists in 'hsr' [ 436.648460][ T5308] Cannot create hsr debugfs directory [ 437.009603][ T5308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.024418][ T5308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.046639][ T5308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.067823][ T5515] loop8: detected capacity change from 0 to 1024 [ 437.078214][ T5308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.092012][ T5515] EXT4-fs: Ignoring removed bh option [ 437.097725][ T5515] EXT4-fs: inline encryption not supported [ 437.105256][ T5515] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 437.119670][ T5515] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.14772: lblock 2 mapped to illegal pblock 2 (length 1) [ 437.140265][ T5515] __quota_error: 5 callbacks suppressed [ 437.140277][ T5515] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 437.164572][ T5515] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.14772: lblock 0 mapped to illegal pblock 48 (length 1) [ 437.168641][ T5308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.187108][ T5515] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 437.196244][ T5515] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.14772: Failed to acquire dquot type 0 [ 437.210482][ T5308] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.237252][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.244374][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.253612][ T5515] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 437.264457][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.271623][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.280899][ T5515] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.14772: mark_inode_dirty error [ 437.316127][ T5515] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 437.329677][ T5308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.343085][ T5515] EXT4-fs (loop8): 1 orphan inode deleted [ 437.351170][ T5515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.363832][ T52] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 437.379875][ T52] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 437.388438][ T52] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 437.404954][ T5515] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm syz.8.14772: lblock 1 mapped to illegal pblock 1 (length 1) [ 437.423149][ T5515] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 1 [ 437.432309][ T5515] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 255 [ 437.441952][ T5515] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.14772: Failed to acquire dquot type 0 [ 437.467932][ T5548] loop0: detected capacity change from 0 to 128 [ 437.481457][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.497064][ T2986] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 437.511837][ T2986] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 437.521941][ T2986] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 437.561362][ T5308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.711805][ T5308] veth0_vlan: entered promiscuous mode [ 437.739064][ T5308] veth1_vlan: entered promiscuous mode [ 437.762990][ T5308] veth0_macvtap: entered promiscuous mode [ 437.789901][ T5308] veth1_macvtap: entered promiscuous mode [ 437.823088][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.836680][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.848683][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.862334][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.877808][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.903308][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.912162][ T5585] loop0: detected capacity change from 0 to 8192 [ 438.005659][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14794'. [ 438.023421][ T5601] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14794'. [ 438.037342][ T5603] loop2: detected capacity change from 0 to 1024 [ 438.054108][ T5603] EXT4-fs: Ignoring removed nobh option [ 438.077792][ T5603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.227609][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.344988][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14810'. [ 438.370592][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14810'. [ 438.377851][ T5641] loop9: detected capacity change from 0 to 512 [ 438.416816][ T5641] msdos: Unknown parameter '7' [ 438.464087][ T5650] loop6: detected capacity change from 0 to 128 [ 438.480028][ T5650] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.510856][ T5650] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.564635][ T5660] loop0: detected capacity change from 0 to 512 [ 438.574767][ T5660] EXT4-fs: Ignoring removed oldalloc option [ 438.588206][ T37] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.598310][ T5660] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 438.663709][ T29] audit: type=1326 audit(2000000002.740:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.0.14821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd061cacb9 code=0x0 [ 438.711051][ T29] audit: type=1400 audit(2000000002.790:5821): avc: denied { write } for pid=5673 comm="syz.9.14826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 438.764738][ T5681] netlink: 72 bytes leftover after parsing attributes in process `syz.8.14827'. [ 438.775454][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14827'. [ 438.880095][ T5695] loop9: detected capacity change from 0 to 512 [ 438.902870][ T5695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.956331][ T5695] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.033842][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.135547][ T5711] loop6: detected capacity change from 0 to 8192 [ 439.280970][ T5738] program syz.9.14842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.372685][ T29] audit: type=1400 audit(2000000003.450:5822): avc: denied { lock } for pid=5743 comm="syz.6.14844" path="socket:[117504]" dev="sockfs" ino=117504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 439.405746][ T5752] loop9: detected capacity change from 0 to 128 [ 439.453536][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14846'. [ 439.490465][ T5761] loop9: detected capacity change from 0 to 128 [ 439.526515][ T5768] tap0: tun_chr_ioctl cmd 1074025675 [ 439.531850][ T5768] tap0: persist disabled [ 439.671843][ T5780] loop2: detected capacity change from 0 to 256 [ 439.702615][ T5780] FAT-fs (loop2): Directory bread(block 64) failed [ 439.718428][ T5780] FAT-fs (loop2): Directory bread(block 65) failed [ 439.731131][ T5780] FAT-fs (loop2): Directory bread(block 66) failed [ 439.743419][ T5780] FAT-fs (loop2): Directory bread(block 67) failed [ 439.767998][ T5780] FAT-fs (loop2): Directory bread(block 68) failed [ 439.781225][ T5780] FAT-fs (loop2): Directory bread(block 69) failed [ 439.797013][ T29] audit: type=1326 audit(2000000003.880:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.6.14858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 439.820627][ T29] audit: type=1326 audit(2000000003.880:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.6.14858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 439.855092][ T5780] FAT-fs (loop2): Directory bread(block 70) failed [ 439.866046][ T5780] FAT-fs (loop2): Directory bread(block 71) failed [ 439.882977][ T5780] FAT-fs (loop2): Directory bread(block 72) failed [ 439.892784][ T5780] FAT-fs (loop2): Directory bread(block 73) failed [ 439.925982][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 439.934542][ T5780] FAT-fs (loop2): Filesystem has been set read-only [ 439.947597][ T5791] loop6: detected capacity change from 0 to 128 [ 439.955893][ T5780] syz.2.14855: attempt to access beyond end of device [ 439.955893][ T5780] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 439.970040][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 439.979203][ T5791] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.002356][ T5791] ext4 filesystem being mounted at /1557/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 440.016187][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 440.025388][ T5780] syz.2.14855: attempt to access beyond end of device [ 440.025388][ T5780] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 440.062571][ T5780] syz.2.14855: attempt to access beyond end of device [ 440.062571][ T5780] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 440.077119][ T5780] syz.2.14855: attempt to access beyond end of device [ 440.077119][ T5780] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 440.085913][T20700] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.091290][ T5780] syz.2.14855: attempt to access beyond end of device [ 440.091290][ T5780] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 440.114891][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 440.123955][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 440.134920][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 440.144382][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 440.153065][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 440.172608][ T5780] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 440.293512][ T5809] loop2: detected capacity change from 0 to 512 [ 440.873682][ T5865] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 440.893054][ T5866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.907100][ T5865] EXT4-fs (loop8): invalid journal inode [ 440.912878][ T5865] EXT4-fs (loop8): can't get journal size [ 440.929856][ T5865] EXT4-fs (loop8): 1 truncate cleaned up [ 440.946140][ T5865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.960142][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.965408][ T5865] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 1073741833 (only 1 groups) [ 440.994444][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.198894][ T5879] team0: Device gtp0 is of different type [ 441.378710][ T5893] rock: directory entry would overflow storage [ 441.385090][ T5893] rock: sig=0x4654, size=5, remaining=4 [ 441.408444][ T5889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.515207][ T5889] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.14903: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 441.578165][ T5904] FAT-fs (loop6): Directory bread(block 64) failed [ 441.605086][ T5904] FAT-fs (loop6): Directory bread(block 65) failed [ 441.625082][ T5904] FAT-fs (loop6): Directory bread(block 66) failed [ 441.631773][ T5904] FAT-fs (loop6): Directory bread(block 67) failed [ 441.632634][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.638339][ T5904] FAT-fs (loop6): Directory bread(block 68) failed [ 441.638361][ T5904] FAT-fs (loop6): Directory bread(block 69) failed [ 441.638455][ T5904] FAT-fs (loop6): Directory bread(block 70) failed [ 441.638470][ T5904] FAT-fs (loop6): Directory bread(block 71) failed [ 441.638495][ T5904] FAT-fs (loop6): Directory bread(block 72) failed [ 441.638510][ T5904] FAT-fs (loop6): Directory bread(block 73) failed [ 441.814789][ T5914] block device autoloading is deprecated and will be removed. [ 441.869600][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14917'. [ 441.904444][ T5923] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 441.916388][ T5928] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 441.950492][ T5928] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.14918: bg 0: block 384: padding at end of block bitmap is not set [ 441.966971][ T5923] bond1 (unregistering): Released all slaves [ 441.976352][ T5928] EXT4-fs (loop2): Remounting filesystem read-only [ 441.982997][ T5928] EXT4-fs (loop2): 1 truncate cleaned up [ 441.989383][ T5928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.005415][ T5928] EXT4-fs (loop2): shut down requested (2) [ 442.050944][ T5933] EXT4-fs: inline encryption not supported [ 442.060242][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.085904][ T5933] EXT4-fs (loop9): 1 orphan inode deleted [ 442.092142][ T5933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.116343][ T3147] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 1 [ 442.138118][ T5933] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.298787][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.388633][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.425275][ T5957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.435347][ T5955] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.485256][ T5957] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.663290][ T5985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.686965][ T5978] bond1 (unregistering): Released all slaves [ 442.730036][ T5988] netlink: 'syz.0.14943': attribute type 2 has an invalid length. [ 442.737913][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14943'. [ 442.975802][ T6016] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 442.987440][ T6016] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 442.997573][ T6016] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.14956: Corrupt directory, running e2fsck is recommended [ 443.012826][ T6016] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 443.021201][ T6016] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.14956: corrupted in-inode xattr: e_name out of bounds [ 443.035981][ T6016] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.14956: couldn't read orphan inode 15 (err -117) [ 443.051636][ T6019] netlink: 'syz.0.14957': attribute type 8 has an invalid length. [ 443.108508][ T6023] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.279269][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 443.279286][ T29] audit: type=1400 audit(2000000007.360:5855): avc: denied { name_bind } for pid=6046 comm="syz.8.14968" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 443.497117][ T6062] program syz.2.14976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.665452][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14985'. [ 443.675587][ T6082] tipc: Enabling of bearer rejected, failed to enable media [ 443.707822][ T6086] tap0: tun_chr_ioctl cmd 1074025677 [ 443.721694][ T6086] tap0: linktype set to 0 [ 443.763311][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14991'. [ 443.912818][ T29] audit: type=1400 audit(2000000007.990:5856): avc: denied { shutdown } for pid=6111 comm="syz.0.15000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.955307][ T6116] set_capacity_and_notify: 12 callbacks suppressed [ 443.955321][ T6116] loop8: detected capacity change from 0 to 128 [ 443.983711][ T6116] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 443.991296][ T6116] FAT-fs (loop8): Filesystem has been set read-only [ 444.014871][ T6116] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 444.054530][ T6124] loop2: detected capacity change from 0 to 256 [ 444.257019][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15014'. [ 444.334761][ T6151] netlink: 'syz.6.15018': attribute type 3 has an invalid length. [ 444.397065][ T29] audit: type=1400 audit(2000000008.480:5857): avc: denied { write } for pid=6155 comm="syz.6.15021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 444.469062][ T6163] option changes via remount are deprecated (pid=6162 comm=syz.6.15024) [ 444.477474][ T6163] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 444.486426][ T29] audit: type=1400 audit(2000000008.550:5858): avc: denied { remount } for pid=6162 comm="syz.6.15024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 444.579329][ T29] audit: type=1400 audit(2000000008.660:5859): avc: denied { unmount } for pid=20700 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 444.727063][ T6174] loop2: detected capacity change from 0 to 128 [ 444.838622][ T6184] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 444.846520][ T6184] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 444.885257][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15033'. [ 444.921576][ T6187] hsr_slave_1 (unregistering): left promiscuous mode [ 445.003260][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15037'. [ 445.025211][ T29] audit: type=1326 audit(2000000009.110:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 445.028584][ T6194] bond0: entered promiscuous mode [ 445.053783][ T6194] bond_slave_0: entered promiscuous mode [ 445.060202][ T6194] bond_slave_1: entered promiscuous mode [ 445.069883][ T6194] bond0: left promiscuous mode [ 445.074709][ T6194] bond_slave_0: left promiscuous mode [ 445.079664][ T29] audit: type=1326 audit(2000000009.140:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 445.080451][ T6194] bond_slave_1: left promiscuous mode [ 445.103587][ T29] audit: type=1326 audit(2000000009.140:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 445.103687][ T29] audit: type=1326 audit(2000000009.140:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.2.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 445.185998][ T6201] loop2: detected capacity change from 0 to 1024 [ 445.213788][ T6201] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 445.223528][ T6201] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.15039: Failed to acquire dquot type 0 [ 445.246853][ T6201] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 445.264565][ T6201] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.15039: corrupted inode contents [ 445.277628][ T6201] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #13: comm syz.2.15039: mark_inode_dirty error [ 445.289783][ T6201] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.15039: corrupted inode contents [ 445.302764][ T6201] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.15039: mark_inode_dirty error [ 445.315380][ T6201] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.15039: corrupted inode contents [ 445.329044][ T6201] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 445.338648][ T6201] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #13: comm syz.2.15039: corrupted inode contents [ 445.350777][ T6201] EXT4-fs error (device loop2): ext4_truncate:4635: inode #13: comm syz.2.15039: mark_inode_dirty error [ 445.362116][ T6201] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 445.383134][ T6201] EXT4-fs (loop2): 1 truncate cleaned up [ 445.392717][ T6201] EXT4-fs mount: 6 callbacks suppressed [ 445.392730][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.422201][ T6201] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 445.431876][ T6201] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 445.441998][ T6201] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 445.461090][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.548285][ T6213] veth1_vlan: entered allmulticast mode [ 445.622794][ T6219] loop9: detected capacity change from 0 to 512 [ 445.650712][ T6219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.687014][ T6219] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.730394][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.763282][ T6229] loop9: detected capacity change from 0 to 128 [ 445.782196][ T6229] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.814951][ T6229] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.861761][ T53] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.954350][ T6234] loop9: detected capacity change from 0 to 512 [ 445.985558][ T6234] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 446.026781][ T6234] EXT4-fs (loop9): 1 truncate cleaned up [ 446.032847][ T6234] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.077502][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15056'. [ 446.087173][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15056'. [ 446.139099][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.173074][ T6247] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 446.202096][ T6249] loop6: detected capacity change from 0 to 1024 [ 446.229379][ T6249] EXT4-fs: Ignoring removed orlov option [ 446.235221][ T6249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.288923][ T6249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.364848][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.568502][ T6272] netlink: 92 bytes leftover after parsing attributes in process `syz.8.15068'. [ 446.754782][ T6295] loop8: detected capacity change from 0 to 1024 [ 446.767730][ T6295] EXT4-fs: Ignoring removed orlov option [ 446.770911][ T6297] loop6: detected capacity change from 0 to 2048 [ 446.792380][ T6295] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 446.815854][ T6295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.826288][ T6297] Alternate GPT is invalid, using primary GPT. [ 446.834751][ T6297] loop6: p2 p3 p7 [ 446.853003][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.948517][T29306] udevd[29306]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 446.959797][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 447.002471][T29292] udevd[29292]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 447.014062][T29218] udevd[29218]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 447.025430][ T6311] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.088917][ T6325] bond1: invalid ARP target 0.0.0.0 specified for addition [ 447.096213][ T6325] bond1: option arp_ip_target: invalid value (0) [ 447.106362][ T6325] bond1 (unregistering): Released all slaves [ 447.139286][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 447.280559][ T6344] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 447.282184][ T6344] @0: renamed from bond_slave_1 (while UP) [ 447.476425][ T5802] kernel write not supported for file /ppp (pid: 5802 comm: kworker/1:8) [ 447.734990][ T6376] netlink: 'syz.8.15113': attribute type 1 has an invalid length. [ 447.743571][ T6376] netlink: 'syz.8.15113': attribute type 2 has an invalid length. [ 447.850303][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.959640][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.388093][ T6444] Falling back ldisc for ptm0. [ 448.428289][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 448.428373][ T29] audit: type=1400 audit(2000000012.510:5871): avc: denied { setopt } for pid=6448 comm="syz.0.15146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 448.470251][ T6454] __nla_validate_parse: 2 callbacks suppressed [ 448.470264][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15147'. [ 448.485574][ T6454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15147'. [ 448.494612][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15147'. [ 448.522140][ T6454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15147'. [ 448.576279][ T6461] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 449.089920][ T806] bridge_slave_1: left allmulticast mode [ 449.095831][ T806] bridge_slave_1: left promiscuous mode [ 449.101689][ T806] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.119918][ T806] bridge_slave_0: left allmulticast mode [ 449.125905][ T806] bridge_slave_0: left promiscuous mode [ 449.131648][ T806] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.389457][ T806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.405171][ T29] audit: type=1400 audit(2000000013.490:5872): avc: denied { accept } for pid=6525 comm="syz.9.15181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 449.427074][ T806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.441590][ T806] bond0 (unregistering): Released all slaves [ 449.449651][ T806] bond1 (unregistering): Released all slaves [ 449.553463][ T806] hsr_slave_0: left promiscuous mode [ 449.584385][ T806] hsr_slave_1: left promiscuous mode [ 449.602431][ T6544] set_capacity_and_notify: 4 callbacks suppressed [ 449.602519][ T6544] loop9: detected capacity change from 0 to 512 [ 449.607138][ T806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.622687][ T806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.652124][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15189'. [ 449.675911][ T806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.683337][ T806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.710348][ T806] veth1_macvtap: left promiscuous mode [ 449.721524][ T806] veth0_macvtap: left promiscuous mode [ 449.733107][ T806] veth1_vlan: left promiscuous mode [ 449.749152][ T806] veth0_vlan: left promiscuous mode [ 449.853701][ T806] team0 (unregistering): Port device team_slave_1 removed [ 449.869114][ T806] team0 (unregistering): Port device team_slave_0 removed [ 450.043829][ T6596] loop9: detected capacity change from 0 to 128 [ 450.419106][ T3168] Bluetooth: hci0: Frame reassembly failed (-84) [ 450.443303][ T6648] Bluetooth: hci0: Frame reassembly failed (-84) [ 450.490435][ T6658] loop6: detected capacity change from 0 to 256 [ 450.519957][ T6663] loop2: detected capacity change from 0 to 1024 [ 450.527608][ T6661] loop0: detected capacity change from 0 to 512 [ 450.535798][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.544570][ T6658] FAT-fs (loop6): Filesystem has been set read-only [ 450.549137][ T6663] EXT4-fs: Ignoring removed nobh option [ 450.554530][ T6661] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 450.556896][ T6663] EXT4-fs: Ignoring removed bh option [ 450.565671][ T6661] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 450.565814][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.565839][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.566462][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.608489][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.614716][ T6663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0002-000000000000 r/w without journal. Quota mode: writeback. [ 450.617396][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.635791][ T6661] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.15217: Allocating blocks 41-42 which overlap fs metadata [ 450.652685][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.662213][ T6661] Quota error (device loop0): write_blk: dquota write failed [ 450.667430][ T6663] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 18: block 177: [ 450.669734][ T6661] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 450.670702][ T6661] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.15217: Allocating blocks 41-42 which overlap fs metadata [ 450.679101][ T6663] freeing already freed block (bit 11); block bitmap corrupt. [ 450.694281][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.702611][ T6663] EXT4-fs (loop2): Remounting filesystem read-only [ 450.709903][ T6661] Quota error (device loop0): write_blk: dquota write failed [ 450.718665][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.718866][ T6658] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 450.725858][ T6661] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 450.760828][ T6661] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.15217: Failed to acquire dquot type 1 [ 450.772543][ T6661] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 450.788168][ T6661] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.15217: corrupted inode contents [ 450.788689][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0002-000000000000. [ 450.800708][ T6661] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.15217: mark_inode_dirty error [ 450.821578][ T6661] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.15217: corrupted inode contents [ 450.833758][ T6661] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.15217: mark_inode_dirty error [ 450.859424][ T6661] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.15217: corrupted inode contents [ 450.877058][ T6661] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 450.885818][ T6661] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.15217: corrupted inode contents [ 450.898107][ T6661] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.15217: mark_inode_dirty error [ 450.910114][ T6661] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 450.922112][ T6661] EXT4-fs (loop0): 1 truncate cleaned up [ 450.928847][ T29] audit: type=1400 audit(2000000015.020:5873): avc: denied { map } for pid=6671 comm="syz.2.15219" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 450.954102][ T6661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.980951][ T29] audit: type=1400 audit(2000000015.060:5874): avc: denied { mounton } for pid=6660 comm="syz.0.15217" path="/126/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.044353][ T4680] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 451.069429][ T29] audit: type=1400 audit(2000000015.110:5875): avc: denied { map } for pid=6671 comm="syz.2.15219" path="socket:[119972]" dev="sockfs" ino=119972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 451.093062][ T29] audit: type=1400 audit(2000000015.110:5876): avc: denied { read } for pid=6671 comm="syz.2.15219" path="socket:[119972]" dev="sockfs" ino=119972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 451.119358][ T4680] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 451.190616][ T6680] loop2: detected capacity change from 0 to 512 [ 451.198709][ T6674] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.214519][ T6680] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.15224: bad orphan inode 15 [ 451.226733][ T6680] ext4_test_bit(bit=14, block=5) = 0 [ 451.244091][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.287061][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.349188][ T6674] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.366473][ T4680] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.384620][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.406095][ T6686] loop2: detected capacity change from 0 to 256 [ 451.434191][ T6674] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.488457][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.528900][ T6674] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.568818][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.632431][ T3161] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.659740][ T3161] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.680388][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.716701][ T2124] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.739370][ T2124] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.805815][ T52] bridge_slave_1: left allmulticast mode [ 451.811514][ T52] bridge_slave_1: left promiscuous mode [ 451.817301][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.840310][ T52] bridge_slave_0: left allmulticast mode [ 451.846122][ T52] bridge_slave_0: left promiscuous mode [ 451.851875][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.018369][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.033691][ T52] bond0 (unregistering): (slave c@0): Releasing backup interface [ 452.050561][ T52] bond0 (unregistering): Released all slaves [ 452.060135][ T6736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15247'. [ 452.104731][ T52] hsr_slave_0: left promiscuous mode [ 452.123788][ T52] hsr_slave_1: left promiscuous mode [ 452.150406][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.157842][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.196752][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.204162][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.232055][ T52] veth1_macvtap: left promiscuous mode [ 452.237055][ T6752] loop2: detected capacity change from 0 to 512 [ 452.240020][ T52] veth0_macvtap: left promiscuous mode [ 452.249698][ T52] veth1_vlan: left promiscuous mode [ 452.254945][ T52] veth0_vlan: left promiscuous mode [ 452.266580][ T6752] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 452.307382][ T6752] EXT4-fs (loop2): 1 truncate cleaned up [ 452.328164][ T6752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.364605][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.434634][ T52] team0 (unregistering): Port device team_slave_1 removed [ 452.445758][ T52] team0 (unregistering): Port device team_slave_0 removed [ 452.449520][ T3848] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 452.555332][ T6782] loop2: detected capacity change from 0 to 512 [ 452.594459][ T6782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.620480][ T6695] chnl_net:caif_netlink_parms(): no params data found [ 452.771499][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.778723][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.786396][ T6695] bridge_slave_0: entered allmulticast mode [ 452.792949][ T6695] bridge_slave_0: entered promiscuous mode [ 452.800826][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.807944][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.815464][ T6695] bridge_slave_1: entered allmulticast mode [ 452.822202][ T6695] bridge_slave_1: entered promiscuous mode [ 452.844823][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.856679][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.886243][ T6695] team0: Port device team_slave_0 added [ 452.893953][ T6817] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 452.901335][ T6817] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 452.936478][ T6695] team0: Port device team_slave_1 added [ 452.948072][ T6821] netlink: 256 bytes leftover after parsing attributes in process `syz.9.15278'. [ 452.957321][ T6821] netlink: 72 bytes leftover after parsing attributes in process `syz.9.15278'. [ 452.970955][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.994558][ T6827] loop2: detected capacity change from 0 to 256 [ 453.028528][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.036232][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.062293][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.092526][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.100291][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.109243][ T6827] FAT-fs (loop2): Directory bread(block 64) failed [ 453.128118][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.171192][ T6827] FAT-fs (loop2): Directory bread(block 65) failed [ 453.200637][ T6827] FAT-fs (loop2): Directory bread(block 66) failed [ 453.235170][ T6695] hsr_slave_0: entered promiscuous mode [ 453.241692][ T6827] FAT-fs (loop2): Directory bread(block 67) failed [ 453.249603][ T6695] hsr_slave_1: entered promiscuous mode [ 453.264297][ T6827] FAT-fs (loop2): Directory bread(block 68) failed [ 453.271694][ T6695] debugfs: 'hsr0' already exists in 'hsr' [ 453.278153][ T6695] Cannot create hsr debugfs directory [ 453.283684][ T6827] FAT-fs (loop2): Directory bread(block 69) failed [ 453.307073][ T6827] FAT-fs (loop2): Directory bread(block 70) failed [ 453.313751][ T6827] FAT-fs (loop2): Directory bread(block 71) failed [ 453.376337][ T6827] FAT-fs (loop2): Directory bread(block 72) failed [ 453.403292][ T6827] FAT-fs (loop2): Directory bread(block 73) failed [ 453.638366][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.653645][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.703907][ T6695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.714126][ T6695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.732490][ T6695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.746247][ T6695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 453.834784][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.870050][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.890823][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.898080][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.933211][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.940324][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.961750][ T6921] SELinux: failed to load policy [ 454.090405][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15304'. [ 454.102743][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.230158][ T6695] veth0_vlan: entered promiscuous mode [ 454.258101][ T6695] veth1_vlan: entered promiscuous mode [ 454.280093][ T6695] veth0_macvtap: entered promiscuous mode [ 454.302280][ T6695] veth1_macvtap: entered promiscuous mode [ 454.330945][ T6974] pimreg3: entered allmulticast mode [ 454.371496][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.402655][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.471488][ T3161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.516392][ T3161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.552984][ T3161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.582130][ T3161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.739576][ T7016] program syz.6.15321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.871661][ T7031] loop8: detected capacity change from 0 to 1024 [ 454.909601][ T7031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.961381][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.079039][ T7061] loop8: detected capacity change from 0 to 512 [ 455.118383][ T7061] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.15332: corrupted in-inode xattr: invalid ea_ino [ 455.134019][ T7061] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.15332: couldn't read orphan inode 15 (err -117) [ 455.147969][ T7061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.201383][ T7061] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.15332: bad entry in directory: inode out of bounds - offset=0, inode=150994946, rec_len=1024, size=1024 fake=1 [ 455.243387][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.256772][ T7077] loop6: detected capacity change from 0 to 128 [ 455.266489][ T7080] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 455.391104][ T7097] netlink: 104 bytes leftover after parsing attributes in process `syz.8.15340'. [ 455.776313][ T7153] program syz.9.15355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.858303][ T7162] loop3: detected capacity change from 0 to 1024 [ 455.880918][ T7162] EXT4-fs: Ignoring removed bh option [ 455.886401][ T7162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 455.928157][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.000828][ T7167] loop9: detected capacity change from 0 to 8192 [ 456.023045][ T7167] syz.9.15358: attempt to access beyond end of device [ 456.023045][ T7167] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 456.038550][ T6695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.074236][ T7167] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 456.082173][ T7167] FAT-fs (loop9): Filesystem has been set read-only [ 456.267115][ T7207] program syz.9.15366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.322948][ T7212] loop6: detected capacity change from 0 to 512 [ 456.517344][ T7238] loop9: detected capacity change from 0 to 512 [ 456.544352][ T7238] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.559941][ T7238] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.573918][ T7238] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 456.588680][ T7238] __quota_error: 20 callbacks suppressed [ 456.588695][ T7238] Quota error (device loop9): write_blk: dquota write failed [ 456.602414][ T7238] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 456.612344][ T7238] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.15376: Failed to acquire dquot type 0 [ 456.637220][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.718027][ T7258] netlink: 'syz.2.15380': attribute type 4 has an invalid length. [ 456.782900][ T29] audit: type=1400 audit(2000000020.860:5897): avc: denied { map } for pid=7267 comm="syz.9.15383" path="socket:[123004]" dev="sockfs" ino=123004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 456.850612][ T29] audit: type=1400 audit(2000000020.860:5898): avc: denied { accept } for pid=7267 comm="syz.9.15383" path="socket:[123004]" dev="sockfs" ino=123004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 456.903160][ T7279] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 456.951297][ T7280] loop9: detected capacity change from 0 to 1764 [ 456.996362][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15391'. [ 457.007114][ T7280] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 457.019080][ T7280] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 457.039913][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15391'. [ 457.053504][ T7295] loop8: detected capacity change from 0 to 128 [ 457.273905][ T7326] netlink: 488 bytes leftover after parsing attributes in process `syz.8.15401'. [ 457.283149][ T7326] netlink: 488 bytes leftover after parsing attributes in process `syz.8.15401'. [ 457.364807][ T7337] netlink: 83 bytes leftover after parsing attributes in process `syz.6.15405'. [ 457.762425][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15412'. [ 457.843110][ T7360] netlink: 'syz.6.15414': attribute type 29 has an invalid length. [ 457.914909][ T7370] loop6: detected capacity change from 0 to 1024 [ 457.927305][ T7370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.955971][ T29] audit: type=1400 audit(2000000022.030:5899): avc: denied { rename } for pid=7368 comm="syz.6.15418" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 457.991121][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.245095][ T7416] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.15439'. [ 458.260378][ T7414] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 458.269123][ T7414] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.306438][ T7414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.15438: Allocating blocks 41-42 which overlap fs metadata [ 458.320236][ T7427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 458.340168][ T7414] Quota error (device loop3): write_blk: dquota write failed [ 458.348334][ T7414] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 458.363808][ T7414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.15438: Allocating blocks 41-42 which overlap fs metadata [ 458.365717][ T7429] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.390177][ T7414] Quota error (device loop3): write_blk: dquota write failed [ 458.397665][ T7414] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 458.415472][ T7414] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.15438: Failed to acquire dquot type 1 [ 458.444950][ T7414] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 458.469465][ T7429] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.500224][ T7414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.15438: corrupted inode contents [ 458.515858][ T7414] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.15438: mark_inode_dirty error [ 458.529863][ T7414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.15438: corrupted inode contents [ 458.544964][ T7414] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.15438: mark_inode_dirty error [ 458.558781][ T7414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.15438: corrupted inode contents [ 458.565824][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15449'. [ 458.588509][ T7429] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.600351][ T7414] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 458.617253][ T7414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.15438: corrupted inode contents [ 458.629525][ T7414] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.15438: mark_inode_dirty error [ 458.641630][ T7414] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 458.650937][ T7437] syz.8.15447: attempt to access beyond end of device [ 458.650937][ T7437] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 458.651032][ T7414] EXT4-fs (loop3): 1 truncate cleaned up [ 458.679896][ T7429] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.697248][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.703233][ T7437] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 458.717674][ T7437] FAT-fs (loop8): Filesystem has been set read-only [ 458.735457][ T6695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.802933][ T52] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.821483][ T52] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.846840][ T7456] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.854920][ T52] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.867601][ T29] audit: type=1400 audit(2000000022.950:5900): avc: denied { watch } for pid=7455 comm="syz.8.15456" path="/329/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 458.922253][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.933668][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.057785][ T7476] vlan2: entered allmulticast mode [ 459.249817][ T7497] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 459.276385][ T7497] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 459.487473][ T7522] program syz.3.15486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.536436][ T7526] __nla_validate_parse: 5 callbacks suppressed [ 459.536453][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15488'. [ 459.685429][ T7542] EXT4-fs: Ignoring removed bh option [ 459.708904][ T7542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.763934][ T7542] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 459.786632][ T7548] EXT4-fs (loop9): 1 orphan inode deleted [ 459.792929][ T7548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.805716][ T7548] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.826901][ T12] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 459.853872][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.891782][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.123538][ T7575] set_capacity_and_notify: 8 callbacks suppressed [ 460.123556][ T7575] loop9: detected capacity change from 0 to 512 [ 460.166356][ T7575] netlink: 2 bytes leftover after parsing attributes in process `syz.9.15509'. [ 460.419427][T18991] hid_parser_main: 22 callbacks suppressed [ 460.419516][T18991] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 460.445975][ T7609] loop2: detected capacity change from 0 to 512 [ 460.459265][ T7609] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.15525: inode has both inline data and extents flags [ 460.465563][T18991] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 460.545356][ T7609] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.15525: couldn't read orphan inode 15 (err -117) [ 460.601048][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.678769][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.694432][ T7619] loop8: detected capacity change from 0 to 8192 [ 461.271072][ T7666] loop9: detected capacity change from 0 to 128 [ 461.294751][ T7666] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.307546][ T7666] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 461.357584][ T3161] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 461.418931][ T7672] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 461.437977][ T7672] vhci_hcd vhci_hcd.2: invalid port number 96 [ 461.444104][ T7672] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 461.494347][ T7676] loop6: detected capacity change from 0 to 2048 [ 461.506659][ T7676] EXT4-fs: Ignoring removed oldalloc option [ 461.527670][ T7676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 461.546612][ T7676] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #12: comm syz.6.15553: corrupted in-inode xattr: invalid size in ea xattr [ 461.613895][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 461.796273][ T7706] siw: device registration error -23 [ 462.146784][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 462.146803][ T29] audit: type=1326 audit(2000000026.230:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.278356][ T29] audit: type=1326 audit(2000000026.260:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.302003][ T29] audit: type=1326 audit(2000000026.260:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.325569][ T29] audit: type=1326 audit(2000000026.260:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.349108][ T29] audit: type=1326 audit(2000000026.260:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.372627][ T29] audit: type=1326 audit(2000000026.260:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.396194][ T29] audit: type=1326 audit(2000000026.260:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.419826][ T29] audit: type=1326 audit(2000000026.260:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.443456][ T29] audit: type=1326 audit(2000000026.260:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.467045][ T29] audit: type=1326 audit(2000000026.260:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.15582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 462.493401][ T7750] netlink: 'syz.2.15584': attribute type 5 has an invalid length. [ 462.697520][ T7778] loop2: detected capacity change from 0 to 512 [ 462.715097][ T7778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.740848][ T7778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 462.779443][ T7778] System zones: 0-2, 18-18, 34-34 [ 462.784832][ T7778] EXT4-fs (loop2): orphan cleanup on readonly fs [ 462.790891][ T7786] program syz.8.15600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.801363][ T7778] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.15598: bg 0: block 248: padding at end of block bitmap is not set [ 462.894290][ T7778] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.15598: Failed to acquire dquot type 1 [ 462.969885][ T7778] EXT4-fs (loop2): 1 truncate cleaned up [ 462.981012][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.024175][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.094284][ T7803] netlink: 15 bytes leftover after parsing attributes in process `syz.9.15609'. [ 463.253588][ T7823] Set syz1 is full, maxelem 2 reached [ 463.343768][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.352498][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.426689][ T3498] kernel write not supported for file /input/event2 (pid: 3498 comm: kworker/1:6) [ 463.460286][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15628'. [ 463.608284][ T7871] loop6: detected capacity change from 0 to 1024 [ 463.619732][ T7871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.648244][ T7871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.692140][ T7885] loop2: detected capacity change from 0 to 512 [ 463.699370][ T7885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.717796][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.743780][ T7885] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.15643: bad orphan inode 16 [ 463.754140][ T7885] ext4_test_bit(bit=15, block=4) = 0 [ 463.759545][ T7885] EXT4-fs (loop2): 1 orphan inode deleted [ 463.765920][ T7885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.791477][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.832334][ T7892] loop6: detected capacity change from 0 to 1024 [ 463.846636][ T7892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.903448][ T7901] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 463.916403][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.003697][ T7915] erspan0: entered promiscuous mode [ 464.107579][ T7926] loop6: detected capacity change from 0 to 4096 [ 464.117748][ T7926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.147324][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.260565][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.289376][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.348646][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.416488][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.501363][ T53] bridge_slave_1: left allmulticast mode [ 464.507065][ T53] bridge_slave_1: left promiscuous mode [ 464.512877][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.521604][ T53] bridge_slave_0: left allmulticast mode [ 464.527367][ T53] bridge_slave_0: left promiscuous mode [ 464.533157][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.637432][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.648587][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.659624][ T53] bond0 (unregistering): Released all slaves [ 464.667143][ T7894] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 464.704908][ T7963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.731550][ T7967] netlink: 182 bytes leftover after parsing attributes in process `syz.2.15678'. [ 464.740953][ T53] hsr_slave_0: left promiscuous mode [ 464.760879][ T53] hsr_slave_1: left promiscuous mode [ 464.771157][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.779267][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.796052][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.803455][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.821688][ T53] veth1_macvtap: left promiscuous mode [ 464.828218][ T53] veth0_macvtap: left promiscuous mode [ 464.833475][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.834400][ T53] veth1_vlan: left promiscuous mode [ 464.858948][ T53] veth0_vlan: left promiscuous mode [ 465.066371][ T53] team0 (unregistering): Port device team_slave_1 removed [ 465.091912][ T53] team0 (unregistering): Port device team_slave_0 removed [ 465.140297][ T3407] IPVS: starting estimator thread 0... [ 465.167880][ T3504] infiniband syz1: ib_query_port failed (-19) [ 465.235786][ T8013] IPVS: using max 2496 ests per chain, 124800 per kthread [ 465.343683][ T7942] chnl_net:caif_netlink_parms(): no params data found [ 465.398676][ T8042] option changes via remount are deprecated (pid=8041 comm=syz.2.15705) [ 465.500276][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.507485][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.514903][ T7942] bridge_slave_0: entered allmulticast mode [ 465.522409][ T7942] bridge_slave_0: entered promiscuous mode [ 465.556832][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.563922][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.591525][ T7942] bridge_slave_1: entered allmulticast mode [ 465.603979][ T7942] bridge_slave_1: entered promiscuous mode [ 465.658754][ T7942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.670534][ T8081] netlink: 'syz.6.15717': attribute type 2 has an invalid length. [ 465.678453][ T8081] netlink: 132 bytes leftover after parsing attributes in process `syz.6.15717'. [ 465.698151][ T7942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.741337][ T7942] team0: Port device team_slave_0 added [ 465.751851][ T7942] team0: Port device team_slave_1 added [ 465.780016][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.787115][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.813055][ T7942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.835811][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.842769][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.868730][ T7942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.928806][ T7942] hsr_slave_0: entered promiscuous mode [ 465.935307][ T7942] hsr_slave_1: entered promiscuous mode [ 465.941278][ T7942] debugfs: 'hsr0' already exists in 'hsr' [ 465.947074][ T7942] Cannot create hsr debugfs directory [ 466.023314][ T8116] set_capacity_and_notify: 1 callbacks suppressed [ 466.023330][ T8116] loop6: detected capacity change from 0 to 256 [ 466.316173][ T7942] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.338476][ T7942] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.353362][ T7942] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.416421][ T7942] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.546624][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.592794][ T7942] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.611076][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.618216][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.666843][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.673938][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.720215][ T7942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.790718][ T8202] loop2: detected capacity change from 0 to 1024 [ 466.876101][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.957722][ T8226] sock: sock_set_timeout: `syz.9.15749' (pid 8226) tries to set negative timeout [ 467.046403][ T8236] loop2: detected capacity change from 0 to 512 [ 467.065003][ T8236] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 467.077536][ T8236] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 467.087748][ T8236] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.15751: Corrupt directory, running e2fsck is recommended [ 467.128264][ T8236] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 467.136596][ T8236] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.15751: corrupted in-inode xattr: invalid ea_ino [ 467.152654][ T8236] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.15751: couldn't read orphan inode 15 (err -117) [ 467.165968][ T8236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.228831][ T8236] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 467.240394][ T8236] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 467.250696][ T8236] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.15751: Corrupt directory, running e2fsck is recommended [ 467.301666][ T7942] veth0_vlan: entered promiscuous mode [ 467.324032][ T7942] veth1_vlan: entered promiscuous mode [ 467.363197][ T7942] veth0_macvtap: entered promiscuous mode [ 467.376530][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.387937][ T7942] veth1_macvtap: entered promiscuous mode [ 467.425773][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.451953][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.464875][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 467.464892][ T29] audit: type=1326 audit(2000000031.540:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.507385][ T8280] loop2: detected capacity change from 0 to 512 [ 467.518149][ T29] audit: type=1326 audit(2000000031.580:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.542517][ T29] audit: type=1326 audit(2000000031.580:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.566640][ T29] audit: type=1326 audit(2000000031.580:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.590186][ T29] audit: type=1326 audit(2000000031.580:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.614487][ T29] audit: type=1326 audit(2000000031.580:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.638750][ T29] audit: type=1326 audit(2000000031.580:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.662548][ T29] audit: type=1326 audit(2000000031.580:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.686436][ T29] audit: type=1326 audit(2000000031.580:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.6.15761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfa7facb9 code=0x7ffc0000 [ 467.712487][ T2124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.721907][ T2124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.730805][ T2124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.749054][ T2124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.792046][ T8280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.867382][ T8304] gre1: entered promiscuous mode [ 467.872466][ T8304] gre1: entered allmulticast mode [ 467.896886][ T8304] team0: Device gre1 is of different type [ 467.897328][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.947845][ T8308] netlink: 212 bytes leftover after parsing attributes in process `syz.6.15769'. [ 468.061121][ T8334] tap0: tun_chr_ioctl cmd 1074025677 [ 468.067180][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15775'. [ 468.096548][ T8334] tap0: linktype set to 769 [ 468.111349][ T29] audit: type=1326 audit(2000000032.190:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.2.15776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc825facb9 code=0x7ffc0000 [ 468.227030][ T8352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.234465][ T8352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.258957][ T8352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.266518][ T8352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.297438][ T8352] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 468.304253][ T8352] batman_adv: batadv0: Removing interface: ipvlan2 [ 468.389356][ T8368] macsec1: entered promiscuous mode [ 468.394610][ T8368] macvlan0: entered promiscuous mode [ 468.400166][ T8368] macsec1: entered allmulticast mode [ 468.405482][ T8368] macvlan0: entered allmulticast mode [ 468.410893][ T8368] veth1_vlan: entered allmulticast mode [ 468.425403][ T8368] macvlan0: left allmulticast mode [ 468.430603][ T8368] veth1_vlan: left allmulticast mode [ 468.435996][ T8368] macvlan0: left promiscuous mode [ 468.499155][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15787'. [ 468.574496][ T8388] loop2: detected capacity change from 0 to 256 [ 468.727363][ T8416] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15798'. [ 468.737238][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15798'. [ 468.771538][ T8419] loop9: detected capacity change from 0 to 256 [ 468.775495][ T8416] macvlan0: entered allmulticast mode [ 468.817828][ T8419] Invalid ELF header magic: != ELF [ 468.876765][ T8434] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 469.004267][ T8451] netlink: 8696 bytes leftover after parsing attributes in process `syz.9.15812'. [ 469.043070][ T8457] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15813'. [ 469.060068][ T8451] netlink: zone id is out of range [ 469.065918][ T8451] netlink: zone id is out of range [ 469.139256][ T8451] netlink: del zone limit has 8 unknown bytes [ 469.325759][ T8496] loop4: detected capacity change from 0 to 512 [ 469.354812][ T8496] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.397715][ T8496] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.15826: Directory hole found for htree leaf block 0 [ 469.455202][ T8496] EXT4-fs (loop4): Remounting filesystem read-only [ 469.567823][ T8529] loop2: detected capacity change from 0 to 512 [ 469.574850][ T7942] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 469.587942][ T8529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.634727][ T8529] EXT4-fs (loop2): 1 truncate cleaned up [ 469.831571][ T8564] loop4: detected capacity change from 0 to 512 [ 469.913704][ T8564] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.028331][ T8586] loop4: detected capacity change from 0 to 512 [ 470.058367][ T8586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.112871][ T8586] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.329398][ T8616] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 470.437164][ T8623] Invalid logical block size (1) [ 471.072906][ T8717] set_capacity_and_notify: 1 callbacks suppressed [ 471.072941][ T8717] loop6: detected capacity change from 0 to 512 [ 471.104713][ T8722] loop2: detected capacity change from 0 to 256 [ 471.145751][ T8722] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 471.188451][ T8722] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 471.197728][ T8722] FAT-fs (loop2): Filesystem has been set read-only [ 471.466462][ T8773] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15898'. [ 471.754995][ T8802] loop4: detected capacity change from 0 to 512 [ 471.761713][ T8802] EXT4-fs: Ignoring removed mblk_io_submit option [ 471.770355][ T8802] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 471.782357][ T8802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 471.790787][ T8802] EXT4-fs (loop4): orphan cleanup on readonly fs [ 471.797645][ T8802] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.15912: bg 0: block 361: padding at end of block bitmap is not set [ 471.812534][ T8802] EXT4-fs (loop4): Remounting filesystem read-only [ 471.819452][ T8802] EXT4-fs (loop4): 1 truncate cleaned up [ 471.828721][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15912'. [ 472.182309][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15923'. [ 472.295630][ T8843] loop4: detected capacity change from 0 to 512 [ 472.305436][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15928'. [ 472.345593][ T8843] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 472.357159][ T8843] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 472.367923][ T8843] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.15929: Corrupt directory, running e2fsck is recommended [ 472.413591][ T8855] random: crng reseeded on system resumption [ 472.424749][ T8843] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 472.433307][ T8843] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.15929: corrupted in-inode xattr: invalid ea_ino [ 472.448599][ T8843] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.15929: couldn't read orphan inode 15 (err -117) [ 472.486063][ T8863] IPVS: Error connecting to the multicast addr [ 472.495063][ T8843] EXT4-fs (loop4): shut down requested (1) [ 472.501782][ T8843] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 472.552309][ T8869] loop8: detected capacity change from 0 to 128 [ 472.642559][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 472.642576][ T29] audit: type=1326 audit(2000000036.720:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 472.658482][ T8881] loop8: detected capacity change from 0 to 1024 [ 472.682762][ T8881] EXT4-fs: Ignoring removed bh option [ 472.688723][ T8881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 472.695959][ T29] audit: type=1326 audit(2000000036.720:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 472.719626][ T29] audit: type=1326 audit(2000000036.720:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 472.743156][ T29] audit: type=1326 audit(2000000036.720:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 472.766903][ T29] audit: type=1326 audit(2000000036.720:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41afbacb9 code=0x7ffc0000 [ 472.790583][ T29] audit: type=1326 audit(2000000036.720:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff41afbaa22 code=0x7ffc0000 [ 472.813901][ T29] audit: type=1326 audit(2000000036.740:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff41af7b58e code=0x7ffc0000 [ 472.837309][ T29] audit: type=1326 audit(2000000036.740:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff41afbaae7 code=0x7ffc0000 [ 472.861005][ T29] audit: type=1326 audit(2000000036.740:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff41af7b58e code=0x7ffc0000 [ 472.884594][ T29] audit: type=1326 audit(2000000036.740:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.15946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff41afba94b code=0x7ffc0000 [ 472.908124][ T8881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 472.916458][ T8881] System zones: 0-1, 3-36 [ 473.308220][ T8916] program syz.9.15960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.416932][ T8928] loop4: detected capacity change from 0 to 1024 [ 473.437082][ T8930] program syz.6.15967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.521464][ T3407] Process accounting resumed [ 473.545573][ T8928] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 473.571434][ T8949] loop2: detected capacity change from 0 to 128 [ 473.599448][ T8949] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 473.653000][ T8949] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.699035][ T8949] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.15975: Directory block failed checksum [ 473.784481][ T8964] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 473.798005][ T8964] dvmrp1: linktype set to 258 [ 473.956682][ T8993] loop4: detected capacity change from 0 to 1024 [ 473.980856][ T8993] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.006637][ T8993] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.15993: lblock 0 mapped to illegal pblock 0 (length 1) [ 474.037793][ T8993] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 474.050310][ T8993] EXT4-fs (loop4): This should not happen!! Data will be lost [ 474.050310][ T8993] [ 474.084443][ T9008] loop6: detected capacity change from 0 to 7 [ 474.090978][ C0] blk_print_req_error: 17 callbacks suppressed [ 474.090996][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.106771][ C0] buffer_io_error: 16 callbacks suppressed [ 474.106806][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.130735][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.140339][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.148554][ T9008] loop6: unable to read partition table [ 474.164263][ T9008] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 474.177670][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.187274][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.195781][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.205386][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.214064][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.223741][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.232478][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.242102][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.270646][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.270676][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.270950][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 474.270982][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.334003][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16002'. [ 474.356352][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16003'. [ 474.356488][ T9021] unsupported nla_type 24929 [ 474.577040][ T9042] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 474.707837][ T9063] pimreg0: tun_chr_ioctl cmd 1074025672 [ 474.713506][ T9063] pimreg0: ignored: set checksum disabled [ 474.815805][ T24] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 474.925659][ T9092] RDS: rds_bind could not find a transport for c00::, load rds_tcp or rds_rdma? [ 475.278100][ T9116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9116 comm=syz.2.16045 [ 475.623844][ T9126] random: crng reseeded on system resumption [ 475.940920][ T9133] EXT4-fs mount: 20 callbacks suppressed [ 475.940935][ T9133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.986691][ T9140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16055'. [ 476.021604][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.060180][ T9145] EXT4-fs: Ignoring removed oldalloc option [ 476.066532][ T9145] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 476.139441][ T9145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.189671][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.215995][ T9155] set_capacity_and_notify: 4 callbacks suppressed [ 476.216010][ T9155] loop4: detected capacity change from 0 to 128 [ 476.234656][ T9155] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 476.243161][ T9155] FAT-fs (loop4): Filesystem has been set read-only [ 476.265483][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16062'. [ 476.315606][ T9155] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 476.431525][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16068'. [ 476.621057][ T9193] netlink: 'syz.6.16077': attribute type 3 has an invalid length. [ 476.629704][ T9193] netlink: 764 bytes leftover after parsing attributes in process `syz.6.16077'. [ 476.686606][ T9200] loop9: detected capacity change from 0 to 512 [ 476.707859][ T9200] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 476.782126][ T9200] EXT4-fs (loop9): 1 truncate cleaned up [ 476.797021][ T9200] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.879774][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.009147][ T9217] loop9: detected capacity change from 0 to 8192 [ 477.700093][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16100'. [ 477.958732][ T9269] veth0_virt_wifi: entered promiscuous mode [ 478.218242][ T9300] loop9: detected capacity change from 0 to 1024 [ 478.239708][ T9300] EXT4-fs: Ignoring removed nobh option [ 478.245439][ T9300] EXT4-fs: Ignoring removed bh option [ 478.295408][ T9300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.321892][ T9300] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.386771][ T3498] kernel write not supported for file /sg0 (pid: 3498 comm: kworker/1:6) [ 478.705495][ T9336] loop6: detected capacity change from 0 to 256 [ 478.733283][ T9336] FAT-fs (loop6): Directory bread(block 64) failed [ 478.749761][ T9336] FAT-fs (loop6): Directory bread(block 65) failed [ 478.765167][ T9336] FAT-fs (loop6): Directory bread(block 66) failed [ 478.782040][ T9336] FAT-fs (loop6): Directory bread(block 67) failed [ 478.800191][ T9336] FAT-fs (loop6): Directory bread(block 68) failed [ 478.809754][ T9336] FAT-fs (loop6): Directory bread(block 69) failed [ 478.817249][ T9336] FAT-fs (loop6): Directory bread(block 70) failed [ 478.825230][ T9336] FAT-fs (loop6): Directory bread(block 71) failed [ 478.837062][ T9336] FAT-fs (loop6): Directory bread(block 72) failed [ 478.850708][ T9336] FAT-fs (loop6): Directory bread(block 73) failed [ 478.991556][ T9365] loop2: detected capacity change from 0 to 512 [ 479.001339][ T9365] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 479.020219][ T9365] EXT4-fs (loop2): 1 truncate cleaned up [ 479.026412][ T9365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.058530][ T9365] EXT4-fs (loop2): shut down requested (0) [ 479.067396][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 479.067467][ T29] audit: type=1326 audit(2000000043.150:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.4.16150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.098065][ T29] audit: type=1326 audit(2000000043.150:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.4.16150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.121683][ T29] audit: type=1326 audit(2000000043.150:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.4.16150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.145683][ T29] audit: type=1326 audit(2000000043.150:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.4.16150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.169367][ T29] audit: type=1326 audit(2000000043.150:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.4.16150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.193549][ T29] audit: type=1326 audit(2000000043.150:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.4.16150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.217909][ T29] audit: type=1326 audit(2000000043.180:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.4.16150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.311581][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.335690][ T9383] tap0: tun_chr_ioctl cmd 2147767506 [ 479.417549][ T9397] loop2: detected capacity change from 0 to 256 [ 479.463969][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.472746][ T9397] FAT-fs (loop2): Filesystem has been set read-only [ 479.481702][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.499130][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.509807][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.521196][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.530121][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.538969][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.547738][ T9405] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.556608][ T9405] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.565437][ T9397] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 479.868748][ T29] audit: type=1326 audit(2000000043.950:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.4.16177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 479.915272][ T23] IPVS: starting estimator thread 0... [ 479.919710][ T29] audit: type=1326 audit(2000000043.970:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.4.16177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c0643b58e code=0x7ffc0000 [ 479.944279][ T29] audit: type=1326 audit(2000000043.970:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.4.16177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0647acb9 code=0x7ffc0000 [ 480.055234][ T9431] IPVS: using max 2208 ests per chain, 110400 per kthread [ 480.163082][ T9448] loop6: detected capacity change from 0 to 512 [ 480.177024][ T9448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.190534][ T9448] ext4 filesystem being mounted at /1869/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.263011][ T9453] netlink: 383 bytes leftover after parsing attributes in process `syz.9.16186'. [ 480.272252][ T9453] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 480.280443][ T9453] openvswitch: netlink: Message has 4 unknown bytes. [ 480.302689][ T9448] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 480.349984][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.810279][ T9513] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16207'. [ 480.819478][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16208'. [ 480.854669][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16208'. [ 480.880643][ T9513] vlan3: entered promiscuous mode [ 480.885729][ T9513] bond0: entered promiscuous mode [ 480.890783][ T9513] bond_slave_0: entered promiscuous mode [ 480.897224][ T9513] bond_slave_1: entered promiscuous mode [ 481.166282][ T9546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=9546 comm=syz.9.16223 [ 481.185655][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16221'. [ 481.213098][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16221'. [ 481.243395][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16221'. [ 481.264809][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16221'. [ 481.480142][ T9588] loop2: detected capacity change from 0 to 512 [ 481.490252][ T9588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 481.536154][ T9588] EXT4-fs (loop2): 1 truncate cleaned up [ 481.542342][ T9588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.589032][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.923441][ T9619] dummy0: entered promiscuous mode [ 481.928774][ T9619] macvlan3: entered promiscuous mode [ 481.934281][ T9619] macvlan3: entered allmulticast mode [ 481.940502][ T9619] dummy0: entered allmulticast mode [ 481.960222][ T9621] loop6: detected capacity change from 0 to 256 [ 482.059530][ T9634] loop8: detected capacity change from 0 to 1024 [ 482.085371][ T9634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 482.094447][ T9634] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 482.105366][ T9634] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 482.130301][ T9634] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 482.151881][ T9634] EXT4-fs (loop8): invalid journal inode [ 482.173385][ T9634] EXT4-fs (loop8): can't get journal size [ 482.182969][ T9634] EXT4-fs error (device loop8): ext4_protect_reserved_inode:182: inode #3: comm syz.8.16262: blocks 2-2 from inode overlap system zone [ 482.206872][ T9634] EXT4-fs (loop8): failed to initialize system zone (-117) [ 482.214381][ T9634] EXT4-fs (loop8): mount failed [ 482.287062][ T9655] loop8: detected capacity change from 0 to 164 [ 482.298042][ T9655] Unable to read rock-ridge attributes [ 482.322396][ T9655] Unable to read rock-ridge attributes [ 482.379108][ T9655] syz.8.16272: attempt to access beyond end of device [ 482.379108][ T9655] loop8: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 482.395970][ T9655] syz.8.16272: attempt to access beyond end of device [ 482.395970][ T9655] loop8: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 482.765504][ T9692] loop9: detected capacity change from 0 to 2048 [ 482.787559][ T9692] EXT4-fs: Ignoring removed mblk_io_submit option [ 482.821316][ T9692] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.859658][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.171487][ T9738] __nla_validate_parse: 1 callbacks suppressed [ 483.171507][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16301'. [ 483.187496][ T9738] netlink: 36 bytes leftover after parsing attributes in process `syz.8.16301'. [ 483.240220][ T9738] vlan3: entered allmulticast mode [ 483.338467][ T9759] loop2: detected capacity change from 0 to 1024 [ 483.372146][ T9759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.462915][ T9770] loop8: detected capacity change from 0 to 512 [ 483.469857][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.508543][ T9770] EXT4-fs: Ignoring removed bh option [ 483.535903][ T9770] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 483.572992][ T9770] EXT4-fs (loop8): 1 truncate cleaned up [ 483.585728][ T9770] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.623064][ T9770] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.794493][ T9815] loop9: detected capacity change from 0 to 128 [ 483.815527][ T9819] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 483.854657][ T9822] loop8: detected capacity change from 0 to 2048 [ 483.902910][T19052] kernel write not supported for file /sg0 (pid: 19052 comm: kworker/0:16) [ 483.903952][ T9822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.924019][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16329'. [ 484.013524][T18991] kernel write not supported for file /snd/seq (pid: 18991 comm: kworker/1:10) [ 484.024646][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.047410][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16336'. [ 484.094648][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 484.094662][ T29] audit: type=1400 audit(2000000048.170:6223): avc: denied { ioctl } for pid=9851 comm="syz.2.16341" path="socket:[128996]" dev="sockfs" ino=128996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 484.147553][ T9856] loop6: detected capacity change from 0 to 1764 [ 484.205488][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16347'. [ 484.214589][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16347'. [ 484.404452][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16357'. [ 484.469037][ T29] audit: type=1400 audit(2000000048.550:6224): avc: denied { connect } for pid=9898 comm="syz.9.16362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 484.603216][ T9916] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.626410][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16367'. [ 484.637019][ T2986] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 484.669411][ T9918] netlink: 'syz.4.16367': attribute type 5 has an invalid length. [ 484.732090][ T9924] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.761131][ T29] audit: type=1400 audit(2000000048.840:6225): avc: denied { mounton } for pid=9929 comm="syz.4.16375" path="/proc/275/cgroup" dev="proc" ino=131112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 484.775437][ T9924] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.807936][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.029791][ T36] kernel write not supported for file [eventfd] (pid: 36 comm: kworker/1:1) [ 485.155357][ T9964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.194798][ T29] audit: type=1400 audit(2000000049.270:6226): avc: denied { ioctl } for pid=9968 comm="syz.9.16392" path="socket:[130230]" dev="sockfs" ino=130230 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 485.337996][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.424615][ T9980] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 485.435248][ T9982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.465696][ T9982] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.16399: invalid indirect mapped block 4294967295 (level 1) [ 485.486336][ T9982] EXT4-fs (loop9): Remounting filesystem read-only [ 485.517905][ T9982] EXT4-fs (loop9): 2 truncates cleaned up [ 485.549357][ T9982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.628982][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.697407][T10004] xt_hashlimit: size too large, truncated to 1048576 [ 485.874208][T10031] sg_write: process 4095 (syz.6.16421) changed security contexts after opening file descriptor, this is not allowed. [ 485.913686][ T29] audit: type=1400 audit(2000000049.980:6227): avc: denied { connect } for pid=10032 comm="syz.2.16422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 485.984359][T10042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.001207][T10046] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 486.012284][T10046] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 486.025085][T10046] JBD2: no valid journal superblock found [ 486.030951][T10046] EXT4-fs (loop4): Could not load journal inode [ 486.046725][T10046] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 486.133413][ T5308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.156334][T10062] sctp: [Deprecated]: syz.6.16435 (pid 10062) Use of int in max_burst socket option deprecated. [ 486.156334][T10062] Use struct sctp_assoc_value instead [ 486.227785][T10069] nr0: tun_chr_ioctl cmd 1074812118 [ 486.252872][T10067] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.331212][T10067] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.365081][ T7942] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.458765][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16446'. [ 486.468468][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16446'. [ 486.526093][ T29] audit: type=1400 audit(2000000050.600:6228): avc: denied { ioctl } for pid=10092 comm="syz.6.16448" path="socket:[130466]" dev="sockfs" ino=130466 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 486.636021][T10107] set_capacity_and_notify: 8 callbacks suppressed [ 486.636041][T10107] loop8: detected capacity change from 0 to 512 [ 486.695512][T10115] loop6: detected capacity change from 0 to 512 [ 486.695872][T10107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.723264][T10107] ext4 filesystem being mounted at /523/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.740454][T10115] EXT4-fs (loop6): 1 truncate cleaned up [ 486.763179][T10115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.802679][T10115] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.16458: bg 0: block 465: padding at end of block bitmap is not set [ 486.814306][T10107] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.16456: corrupted inode contents [ 486.829204][T10115] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 486.841441][T10115] EXT4-fs (loop6): This should not happen!! Data will be lost [ 486.841441][T10115] [ 486.851189][T10115] EXT4-fs (loop6): Total free blocks count 0 [ 486.857206][T10115] EXT4-fs (loop6): Free/Dirty block details [ 486.863114][T10115] EXT4-fs (loop6): free_blocks=0 [ 486.868131][T10115] EXT4-fs (loop6): dirty_blocks=9 [ 486.873244][T10115] EXT4-fs (loop6): Block reservation details [ 486.879346][T10115] EXT4-fs (loop6): i_reserved_data_blocks=9 [ 486.885779][T10107] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #4: comm syz.8.16456: mark_inode_dirty error [ 486.908384][T10107] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.16456: corrupted inode contents [ 486.920525][T10107] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #4: comm syz.8.16456: mark_inode_dirty error [ 486.922496][T20700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.941686][T10107] Quota error (device loop8): write_blk: dquota write failed [ 486.949163][T10107] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 486.958236][T10107] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 486.968208][T10107] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.16456: Failed to acquire dquot type 1 [ 486.984501][ T29] audit: type=1400 audit(2000000051.060:6229): avc: denied { rename } for pid=10106 comm="syz.8.16456" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 486.984557][T10131] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.16456: corrupted inode contents [ 487.123338][T10131] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #4: comm syz.8.16456: mark_inode_dirty error [ 487.140040][T10131] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.16456: corrupted inode contents [ 487.163717][T10131] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #4: comm syz.8.16456: mark_inode_dirty error [ 487.195379][T10131] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.16456: Failed to acquire dquot type 1 [ 487.223937][T10147] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 487.230576][T10147] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.238108][T10147] vhci_hcd vhci_hcd.0: Device attached [ 487.265418][T10148] vhci_hcd: connection closed [ 487.269345][ T806] vhci_hcd vhci_hcd.6: stop threads [ 487.279406][ T806] vhci_hcd vhci_hcd.6: release socket [ 487.284784][ T806] vhci_hcd vhci_hcd.6: disconnect device [ 487.327114][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.385417][T10155] loop8: detected capacity change from 0 to 1024 [ 487.407836][T10155] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 487.420522][T10155] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.16475: Invalid block bitmap block 0 in block_group 0 [ 487.446090][T10155] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.16475: Failed to acquire dquot type 0 [ 487.472955][T10155] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.16475: Freeing blocks not in datazone - block = 0, count = 4096 [ 487.487505][T10155] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.16475: Invalid inode bitmap blk 0 in block_group 0 [ 487.500581][T10155] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 487.509385][ T806] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 487.520913][T10155] EXT4-fs (loop8): 1 orphan inode deleted [ 487.529843][T10155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.573942][ T2986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.596730][T10171] loop9: detected capacity change from 0 to 2048 [ 487.603373][T10170] loop2: detected capacity change from 0 to 128 [ 487.622770][T10171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.645998][T10170] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 487.664806][T10170] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.706285][ T5308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.718304][T10180] loop4: detected capacity change from 0 to 512 [ 487.718325][ T3060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.756119][T10180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.813203][T10192] netlink: 'syz.8.16488': attribute type 12 has an invalid length. [ 487.821295][T10192] netlink: 'syz.8.16488': attribute type 29 has an invalid length. [ 487.831690][ T7942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.873818][T10198] loop8: detected capacity change from 0 to 512 [ 487.921852][ T3007] ================================================================== [ 487.929995][ T3007] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 487.937914][ T3007] [ 487.940260][ T3007] write to 0xffff88811b01d180 of 4 bytes by task 29218 on cpu 1: [ 487.947991][ T3007] d_make_discardable+0x4f/0xa0 [ 487.952859][ T3007] simple_unlink+0x68/0x80 [ 487.957305][ T3007] shmem_unlink+0x12d/0x140 [ 487.961921][ T3007] vfs_unlink+0x28b/0x440 [ 487.966257][ T3007] do_unlinkat+0x1e2/0x4b0 [ 487.970680][ T3007] __x64_sys_unlink+0x2e/0x40 [ 487.975370][ T3007] x64_sys_call+0x2f48/0x3000 [ 487.980063][ T3007] do_syscall_64+0xc0/0x2a0 [ 487.984611][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.990533][ T3007] [ 487.992872][ T3007] read to 0xffff88811b01d180 of 4 bytes by task 3007 on cpu 0: [ 488.000414][ T3007] step_into_slowpath+0x139/0x4c0 [ 488.005482][ T3007] path_lookupat+0x330/0x500 [ 488.010099][ T3007] filename_lookup+0x190/0x390 [ 488.014885][ T3007] do_readlinkat+0x7d/0x340 [ 488.019408][ T3007] __x64_sys_readlink+0x47/0x60 [ 488.024284][ T3007] x64_sys_call+0x2af1/0x3000 [ 488.028987][ T3007] do_syscall_64+0xc0/0x2a0 [ 488.033514][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.039448][ T3007] [ 488.041786][ T3007] value changed: 0x08300080 -> 0x00004080 [ 488.047515][ T3007] [ 488.049846][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 488.056016][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 488.066879][ T3007] Tainted: [W]=WARN [ 488.070768][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.080831][ T3007] ==================================================================