last executing test programs: 1.961037584s ago: executing program 2 (id=997): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @local, 0x3}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) 1.637463536s ago: executing program 1 (id=1004): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00'], 0x70}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000180)) 1.583571325s ago: executing program 1 (id=1006): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x10040, &(0x7f00000000c0)={[{@user_xattr}, {@nomblk_io_submit}, {@delalloc}]}, 0xfd, 0x26d, &(0x7f0000000180)="$eJzs3T1oJGUYB/BnZneNmywStRHEDxARDYTYCTaxUQhICCKCChERK0mEmGCXtbKx0FolINgEsTNaik2wUQSrqClic3AXrrhwxd3BHpvZPTbJ5j72a46d3w+Wmcm87zzvhPzfCQMzG0BhTUfEfESUImImIioRkXQ2eDr7TLc2t6q7yxGNxhuXk+N22Xam3W8qIuoR8VJEub1vY+edg6t7rz33xXrl2e933q6O6vw6HR7sv3707eLnPy28uPHn3xcXk5iPWmtf53kMUtLlZ+Uk4pFhFLtPJOW8R8DdWPr0x3+auX80Ip45zn8l0lZkv1x74LdKvPDNeX2/uvTX46McKzB4jUaleQ2sN4DCSSOiFkk6GxHZeprOzmb/w/9bmkw/Wl37ZObD1fWVD/KeqYBBqUWy/+ovEz9Pncr/hVKWf2B81SL231za/q+5flTKezTA0HTebX8iWzTzP/Pe5vMh/1A48g/FdZv81/MaEzAarv8wBnrMrvxDcfWT/weHNCZgNFz/YYxV2ivdb+fJPxSX/MOY+q7bU6cnyT8UV2f+AYBiaUzk/QQykJe85x8AAAAAAAAAAAAAAAAAAOCsrerucvszqpq/fx1x+EpElM/Wv9H6bvL228YnryTNZrckWbe+vPtUnwfo0w8De/q62lOvh/4fVP3e/PHkcI772cnNc385mysR9WbjuXL57N9/Emmf43j4Dvsr7/dZ4B6dfivgy2+Ntv5p17fzrb+wF/Frc/6Z6zb/pfHY8bL7/FPrfMVyjz6+1ucBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJmbAQAA//+513Jd") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x1, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) 1.378503289s ago: executing program 1 (id=1009): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPu5JAAAAAAAAAAAAuIm7+DnhuHcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwUAAP//GASTNA==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)=""/142, 0x3b, 0x8e, 0x1, 0x10}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) 1.156589068s ago: executing program 1 (id=1017): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.092794127s ago: executing program 2 (id=1021): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.037981977s ago: executing program 0 (id=1023): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') 1.001800351s ago: executing program 0 (id=1025): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a300000000014000480080001400000000308"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 932.245998ms ago: executing program 3 (id=1026): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 827.596019ms ago: executing program 0 (id=1039): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "e5d42e640e53287047dc0ffcc3ac4100"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 820.234698ms ago: executing program 3 (id=1029): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0x14) 776.01659ms ago: executing program 0 (id=1030): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPu5JAAAAAAAAAAAAuIm7+DnhuHcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwUAAP//GASTNA==") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)=""/142, 0x3b, 0x8e, 0x1, 0x10}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) 690.174724ms ago: executing program 1 (id=1032): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 650.180477ms ago: executing program 3 (id=1033): keyctl$join(0x1, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) lseek(r0, 0x40000007, 0x0) 536.152426ms ago: executing program 3 (id=1034): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000200)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000180)={0xa, 0xfffd, 0xc9, @mcast1}, 0x1c) 494.087849ms ago: executing program 1 (id=1035): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=""/17, 0x11}, 0x8000}], 0x1, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 491.523638ms ago: executing program 3 (id=1036): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 424.812326ms ago: executing program 0 (id=1037): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 424.130506ms ago: executing program 4 (id=1038): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 423.132206ms ago: executing program 3 (id=1048): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10, &(0x7f0000000280)=[{0x0, 0x40}, {&(0x7f00000001c0)="69710c3e7890cbf0", 0x6}], 0x2, 0x0, 0x0, 0xc0090}, 0x0) 406.706973ms ago: executing program 4 (id=1040): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 142.301065ms ago: executing program 2 (id=1041): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000880) 95.716676ms ago: executing program 0 (id=1042): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, 0x0) 95.484357ms ago: executing program 4 (id=1043): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x194, 0x0, &(0x7f0000000280)="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", 0x0, 0x10000b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xdca}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 60.29701ms ago: executing program 4 (id=1044): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 59.78833ms ago: executing program 2 (id=1055): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000001"], 0x18}, 0x40c0) 35.798066ms ago: executing program 4 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc411d5ec38469fdd}, 0x10) 5.094971ms ago: executing program 2 (id=1046): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x39b, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 405.069µs ago: executing program 4 (id=1058): recvmmsg(0xffffffffffffffff, &(0x7f0000003780)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x7}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, 0x0}, 0x85}], 0x2, 0x10020, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 0s ago: executing program 2 (id=1047): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000280)={[{@block={'block', 0x3d, 0x200}}, {@overriderock}, {@nojoliet}, {@check_strict}, {@utf8}, {@nocompress}, {@cruft}, {@check_relaxed}, {@unhide}, {@uid}, {@map_acorn}, {@block={'block', 0x3d, 0x400}}]}, 0x1, 0x68b, &(0x7f0000000880)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick=0xc000, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xa8) kernel console output (not intermixed with test programs): [ 18.718869][ T28] audit: type=1400 audit(1773194839.330:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.741042][ T28] audit: type=1400 audit(1773194839.330:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.763911][ T28] audit: type=1400 audit(1773194839.330:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.787094][ T28] audit: type=1400 audit(1773194839.330:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.811598][ T28] audit: type=1400 audit(1773194839.330:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 22.848814][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 22.848828][ T28] audit: type=1400 audit(1773194843.460:70): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.878202][ T28] audit: type=1400 audit(1773194843.490:71): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.878932][ T3295] cgroup: Unknown subsys name 'net' [ 22.906167][ T28] audit: type=1400 audit(1773194843.520:72): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.026993][ T3295] cgroup: Unknown subsys name 'cpuset' [ 23.033103][ T3295] cgroup: Unknown subsys name 'rlimit' [ 23.123035][ T28] audit: type=1400 audit(1773194843.730:73): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.146374][ T28] audit: type=1400 audit(1773194843.730:74): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.167060][ T28] audit: type=1400 audit(1773194843.730:75): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.189162][ T28] audit: type=1400 audit(1773194843.730:76): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.209841][ T28] audit: type=1400 audit(1773194843.740:77): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.216651][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.235080][ T28] audit: type=1400 audit(1773194843.740:78): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.267465][ T28] audit: type=1400 audit(1773194843.760:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 23.304800][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.269327][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 24.333567][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.340685][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.347946][ T3310] bridge_slave_0: entered allmulticast mode [ 24.354477][ T3310] bridge_slave_0: entered promiscuous mode [ 24.363372][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.370741][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.378123][ T3310] bridge_slave_1: entered allmulticast mode [ 24.384660][ T3310] bridge_slave_1: entered promiscuous mode [ 24.434099][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.446023][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.476248][ T3310] team0: Port device team_slave_0 added [ 24.484971][ T3310] team0: Port device team_slave_1 added [ 24.516825][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.524041][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.550196][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.561457][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.568540][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.594531][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.619405][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.665725][ T3310] hsr_slave_0: entered promiscuous mode [ 24.671846][ T3310] hsr_slave_1: entered promiscuous mode [ 24.678318][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 24.728084][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.735230][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.742423][ T3314] bridge_slave_0: entered allmulticast mode [ 24.749067][ T3314] bridge_slave_0: entered promiscuous mode [ 24.771822][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.784669][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.791975][ T3314] bridge_slave_1: entered allmulticast mode [ 24.798834][ T3314] bridge_slave_1: entered promiscuous mode [ 24.818580][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 24.851825][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.859085][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.866432][ T3309] bridge_slave_0: entered allmulticast mode [ 24.872958][ T3309] bridge_slave_0: entered promiscuous mode [ 24.880728][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.891080][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.903017][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 24.916478][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923669][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.931024][ T3309] bridge_slave_1: entered allmulticast mode [ 24.937658][ T3309] bridge_slave_1: entered promiscuous mode [ 24.985339][ T3314] team0: Port device team_slave_0 added [ 25.004722][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.014593][ T3314] team0: Port device team_slave_1 added [ 25.030766][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.050818][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.058010][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.065523][ T3317] bridge_slave_0: entered allmulticast mode [ 25.072041][ T3317] bridge_slave_0: entered promiscuous mode [ 25.083366][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.090657][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.097911][ T3317] bridge_slave_1: entered allmulticast mode [ 25.104460][ T3317] bridge_slave_1: entered promiscuous mode [ 25.131921][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.147064][ T3309] team0: Port device team_slave_0 added [ 25.152843][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.160083][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.167522][ T3316] bridge_slave_0: entered allmulticast mode [ 25.174120][ T3316] bridge_slave_0: entered promiscuous mode [ 25.183826][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.190954][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.217419][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.229337][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.239373][ T3309] team0: Port device team_slave_1 added [ 25.250128][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.257521][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.264747][ T3316] bridge_slave_1: entered allmulticast mode [ 25.271123][ T3316] bridge_slave_1: entered promiscuous mode [ 25.282261][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.289367][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.315574][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.339012][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.345989][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.372370][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.403213][ T3317] team0: Port device team_slave_0 added [ 25.411581][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.418936][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.446451][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.458551][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.472757][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.483216][ T3317] team0: Port device team_slave_1 added [ 25.502391][ T3314] hsr_slave_0: entered promiscuous mode [ 25.508382][ T3314] hsr_slave_1: entered promiscuous mode [ 25.514184][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 25.519938][ T3314] Cannot create hsr debugfs directory [ 25.532685][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.540085][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.566059][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.577364][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.584449][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.610588][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.644387][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.658328][ T3316] team0: Port device team_slave_0 added [ 25.671464][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.680633][ T3316] team0: Port device team_slave_1 added [ 25.693940][ T3309] hsr_slave_0: entered promiscuous mode [ 25.700309][ T3309] hsr_slave_1: entered promiscuous mode [ 25.706158][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 25.712337][ T3309] Cannot create hsr debugfs directory [ 25.728856][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.742053][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.749064][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.775351][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.789468][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.796596][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.822924][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.835980][ T3317] hsr_slave_0: entered promiscuous mode [ 25.842313][ T3317] hsr_slave_1: entered promiscuous mode [ 25.848153][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 25.853887][ T3317] Cannot create hsr debugfs directory [ 25.859434][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.940217][ T3316] hsr_slave_0: entered promiscuous mode [ 25.946406][ T3316] hsr_slave_1: entered promiscuous mode [ 25.952682][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 25.958434][ T3316] Cannot create hsr debugfs directory [ 26.071321][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.082691][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.098844][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.111130][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.129328][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.138763][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.149744][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.160457][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.173164][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.197042][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.208152][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.217652][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.224974][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.238869][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.248559][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.267371][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.274518][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.283616][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.306587][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.314908][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.324608][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.335143][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.363173][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.373738][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.431601][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.453776][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.464267][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.479705][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.488825][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.498049][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.507304][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.514542][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.529791][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.536893][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.552442][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.559533][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.568151][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.575256][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.583905][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.597845][ T1820] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.604897][ T1820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.618959][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.629447][ T1820] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.636560][ T1820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.667770][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.699017][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.713309][ T1820] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.720548][ T1820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.739757][ T1820] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.747067][ T1820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.782081][ T3310] veth0_vlan: entered promiscuous mode [ 26.810812][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.818695][ T3310] veth1_vlan: entered promiscuous mode [ 26.830185][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.868605][ T3310] veth0_macvtap: entered promiscuous mode [ 26.876249][ T3310] veth1_macvtap: entered promiscuous mode [ 26.899464][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.917992][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.928980][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.952247][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.972085][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.988698][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.001172][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.038622][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.052343][ T3314] veth0_vlan: entered promiscuous mode [ 27.079079][ T3317] veth0_vlan: entered promiscuous mode [ 27.089157][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.100254][ T3314] veth1_vlan: entered promiscuous mode [ 27.129815][ T3316] veth0_vlan: entered promiscuous mode [ 27.141763][ T3470] loop1: detected capacity change from 0 to 1024 [ 27.141949][ T3317] veth1_vlan: entered promiscuous mode [ 27.148422][ T3470] ======================================================= [ 27.148422][ T3470] WARNING: The mand mount option has been deprecated and [ 27.148422][ T3470] and is ignored by this kernel. Remove the mand [ 27.148422][ T3470] option from the mount to silence this warning. [ 27.148422][ T3470] ======================================================= [ 27.160871][ T3314] veth0_macvtap: entered promiscuous mode [ 27.203989][ T3316] veth1_vlan: entered promiscuous mode [ 27.223498][ T3314] veth1_macvtap: entered promiscuous mode [ 27.231472][ T3470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.260332][ T3316] veth0_macvtap: entered promiscuous mode [ 27.268107][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.275502][ T3316] veth1_macvtap: entered promiscuous mode [ 27.282903][ T3317] veth0_macvtap: entered promiscuous mode [ 27.288176][ T3470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.303501][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.321016][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.331659][ T3317] veth1_macvtap: entered promiscuous mode [ 27.360849][ T314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.370939][ T314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.381815][ T314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.391087][ T314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.411273][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.426397][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.455946][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.466245][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.496937][ T1820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.515769][ T1820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.532737][ T3309] veth0_vlan: entered promiscuous mode [ 27.539057][ T1820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.547880][ T1820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.576941][ T118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.585855][ T118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.604276][ T118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.613570][ T118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.646924][ T3309] veth1_vlan: entered promiscuous mode [ 27.683283][ T3309] veth0_macvtap: entered promiscuous mode [ 27.707189][ T3501] loop2: detected capacity change from 0 to 512 [ 27.710894][ T3309] veth1_macvtap: entered promiscuous mode [ 27.769677][ T3505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 27.777016][ T3505] IPv6: NLM_F_CREATE should be set when creating new route [ 27.784497][ T3505] IPv6: NLM_F_CREATE should be set when creating new route [ 27.791734][ T3505] IPv6: NLM_F_CREATE should be set when creating new route [ 27.800554][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.822672][ T3505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 27.831312][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.839530][ T3512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 27.872940][ T314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.882057][ T3505] Zero length message leads to an empty skb [ 27.891633][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 27.891646][ T28] audit: type=1400 audit(1773194848.500:126): avc: denied { read append } for pid=3515 comm="syz.3.18" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 27.927922][ T3517] autofs4:pid:3517:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189372) [ 27.943640][ T3519] netlink: 200 bytes leftover after parsing attributes in process `syz.2.19'. [ 27.944083][ T3517] autofs4:pid:3517:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189372) [ 27.964925][ T28] audit: type=1400 audit(1773194848.540:127): avc: denied { open } for pid=3515 comm="syz.3.18" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 28.000547][ T314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.021114][ T314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.049296][ T314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.076387][ T28] audit: type=1400 audit(1773194848.540:128): avc: denied { ioctl } for pid=3515 comm="syz.3.18" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 28.163287][ T28] audit: type=1400 audit(1773194848.620:129): avc: denied { block_suspend } for pid=3523 comm="syz.1.20" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.174992][ T3535] loop1: detected capacity change from 0 to 512 [ 28.226461][ T28] audit: type=1400 audit(1773194848.640:130): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.235493][ T3535] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.299110][ T3535] EXT4-fs (loop1): 1 truncate cleaned up [ 28.346351][ T28] audit: type=1400 audit(1773194848.950:131): avc: denied { read write } for pid=3542 comm="syz.0.27" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 28.365861][ T3535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.396368][ T28] audit: type=1400 audit(1773194848.950:132): avc: denied { open } for pid=3542 comm="syz.0.27" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 28.537109][ T28] audit: type=1400 audit(1773194849.140:133): avc: denied { setattr } for pid=3534 comm="syz.1.25" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.633635][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.740661][ T28] audit: type=1400 audit(1773194849.340:134): avc: denied { create } for pid=3568 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.807439][ T28] audit: type=1400 audit(1773194849.340:135): avc: denied { getopt } for pid=3568 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.033030][ T3591] loop3: detected capacity change from 0 to 128 [ 29.237794][ T3612] loop4: detected capacity change from 0 to 512 [ 29.254359][ T3616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 29.276690][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 29.404571][ T3631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.67'. [ 29.420384][ T3633] batman_adv: batadv0: Adding interface: vlan2 [ 29.434679][ T3633] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.460752][ T3633] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 29.611360][ T3647] capability: warning: `syz.4.77' uses 32-bit capabilities (legacy support in use) [ 29.615273][ T3648] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.649836][ T3647] program syz.4.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 29.761693][ T3668] netlink: 144 bytes leftover after parsing attributes in process `syz.1.84'. [ 29.824512][ T3676] loop1: detected capacity change from 0 to 512 [ 29.879754][ T3676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.896205][ T3678] loop0: detected capacity change from 0 to 4096 [ 29.904872][ T3676] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.917745][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.985547][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.012883][ T3678] EXT4-fs (loop0): shut down requested (1) [ 30.068049][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.089434][ T3704] loop1: detected capacity change from 0 to 1024 [ 30.137939][ T3711] loop0: detected capacity change from 0 to 1024 [ 30.148504][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.169298][ T3704] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.191953][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 30.205178][ T3704] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.98: lblock 3 mapped to illegal pblock 3 (length 3) [ 30.225463][ T3704] EXT4-fs (loop1): Remounting filesystem read-only [ 30.233810][ T3716] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 30.247916][ T3711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.277129][ T3711] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.305723][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.328085][ T3724] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 30.337291][ T3724] netlink: 'syz.2.108': attribute type 2 has an invalid length. [ 30.372117][ T3730] loop1: detected capacity change from 0 to 128 [ 30.409425][ T3734] hugetlbfs: syz.4.112 (3734): Using mlock ulimits for SHM_HUGETLB is obsolete [ 30.452453][ T30] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 30.466889][ T3736] capability: warning: `syz.4.114' uses deprecated v2 capabilities in a way that may be insecure [ 30.478952][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 30.497103][ T30] EXT4-fs (loop0): This should not happen!! Data will be lost [ 30.497103][ T30] [ 30.519392][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.535543][ T3743] netlink: 23 bytes leftover after parsing attributes in process `syz.4.117'. [ 30.547659][ T3743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.117'. [ 30.563334][ T23] IPVS: starting estimator thread 0... [ 30.569445][ T3745] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 30.588597][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 30.597559][ T3750] sctp: [Deprecated]: syz.3.119 (pid 3750) Use of int in max_burst socket option deprecated. [ 30.597559][ T3750] Use struct sctp_assoc_value instead [ 30.676477][ T3747] IPVS: using max 2496 ests per chain, 124800 per kthread [ 30.773091][ T3763] netlink: 'syz.3.125': attribute type 21 has an invalid length. [ 31.180858][ T3799] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967272. macoff=96 [ 31.338664][ T3808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.422275][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.425554][ T3780] Set syz1 is full, maxelem 65536 reached [ 31.447600][ T3826] mmap: syz.2.156 (3826) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.605382][ T3838] program syz.2.161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.839515][ T3858] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.921701][ T3860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.944974][ T3860] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.991371][ T3860] EXT4-fs error (device loop0): ext4_get_first_dir_block:3527: inode #12: comm syz.0.170: Attempting to read directory block (0) that is past i_size (3) [ 31.994845][ T3869] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.021372][ T3869] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.038546][ T3869] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.052447][ T3869] EXT4-fs (loop3): 1 truncate cleaned up [ 32.058964][ T3869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.107685][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.167859][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.363713][ T3904] vlan3: entered allmulticast mode [ 32.369041][ T3904] veth0_to_bond: entered allmulticast mode [ 32.710471][ T3941] set_capacity_and_notify: 6 callbacks suppressed [ 32.710487][ T3941] loop4: detected capacity change from 0 to 164 [ 32.749002][ T3941] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 32.813735][ T3949] loop0: detected capacity change from 0 to 512 [ 32.931793][ T3964] loop0: detected capacity change from 0 to 128 [ 32.945847][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 32.945860][ T28] audit: type=1400 audit(1773194853.560:239): avc: denied { perfmon } for pid=3965 comm="syz.4.213" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.951176][ T3959] syz.1.211 (3959) used greatest stack depth: 10056 bytes left [ 33.066889][ C1] hrtimer: interrupt took 38189 ns [ 33.093030][ T28] audit: type=1400 audit(1773194853.700:240): avc: denied { bpf } for pid=3974 comm="syz.1.217" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.093292][ T3975] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 33.146220][ T28] audit: type=1400 audit(1773194853.740:241): avc: denied { setopt } for pid=3976 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.180982][ T3982] __nla_validate_parse: 2 callbacks suppressed [ 33.181037][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.220'. [ 33.196483][ T28] audit: type=1400 audit(1773194853.790:242): avc: denied { setcurrent } for pid=3980 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 33.241461][ T28] audit: type=1400 audit(1773194853.820:243): avc: denied { name_connect } for pid=3983 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 33.314797][ T28] audit: type=1400 audit(1773194853.920:244): avc: denied { create } for pid=3992 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.338788][ T3995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 33.364358][ T4001] smc: net device sit0 applied user defined pnetid SYZ1 [ 33.371716][ T3997] loop2: detected capacity change from 0 to 512 [ 33.374361][ T28] audit: type=1400 audit(1773194853.920:245): avc: denied { listen } for pid=3992 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.386212][ T3997] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.228: inode has both inline data and extents flags [ 33.424193][ T3997] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.424308][ T3997] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.228: couldn't read orphan inode 15 (err -117) [ 33.433553][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 33.433573][ C0] EXT4-fs (loop2): initial error at time 1773194854: ext4_orphan_get:1391: inode 15 [ 33.433627][ C0] EXT4-fs (loop2): last error at time 1773194854: ext4_orphan_get:1391: inode 15 [ 33.486175][ T4005] loop1: detected capacity change from 0 to 764 [ 33.510562][ T4005] sg_write: data in/out 49116/126 bytes for SCSI command 0x0-- guessing data in; [ 33.510562][ T4005] program syz.1.229 not setting count and/or reply_len properly [ 33.549771][ T3997] loop2: lost filesystem error report for type 5 error -117 [ 33.551111][ T3997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.596259][ T28] audit: type=1400 audit(1773194854.190:246): avc: denied { bind } for pid=4009 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.636364][ T28] audit: type=1400 audit(1773194854.230:247): avc: denied { getopt } for pid=4014 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.661927][ T28] audit: type=1400 audit(1773194854.230:248): avc: denied { getopt } for pid=4012 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.734356][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.799123][ T4023] loop0: detected capacity change from 0 to 164 [ 33.859205][ T4023] rock: directory entry would overflow storage [ 33.859727][ T4039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 33.865656][ T4023] rock: sig=0x5252, size=5, remaining=3 [ 33.961797][ T4047] loop1: detected capacity change from 0 to 512 [ 33.994434][ T4047] ------------[ cut here ]------------ [ 34.000146][ T4047] EA inode 11 i_nlink=0 [ 34.000175][ T4047] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.249/4047 [ 34.015655][ T4047] Modules linked in: [ 34.019640][ T4047] CPU: 0 UID: 0 PID: 4047 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(full) [ 34.028963][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.039684][ T4047] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 34.046332][ T4047] Code: a4 47 99 ff 4c 8d 2d 5d c0 5d 05 49 8d 7e 40 e8 44 e1 b5 ff 49 8b 6e 40 4c 89 e7 e8 78 dc b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 59 dd 03 66 66 66 66 66 66 2e [ 34.067065][ T4047] RSP: 0018:ffffc9001e7cb778 EFLAGS: 00010246 [ 34.073468][ T4047] RAX: ffff8881052aef38 RBX: ffff88811a8db628 RCX: ffffffff81c00598 [ 34.081681][ T4047] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871dc5e0 [ 34.089711][ T4047] RBP: 000000000000000b R08: 000188811a8db5db R09: 0000000000000000 [ 34.098411][ T4047] R10: ffffc9001e7cb6a8 R11: 0001c9001e7cb6a8 R12: ffff88811a8db5d8 [ 34.106437][ T4047] R13: ffffffff871dc5e0 R14: ffff88811a8db590 R15: 0000000000000001 [ 34.114444][ T4047] FS: 00007fca05b976c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 34.123478][ T4047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.130769][ T4047] CR2: 0000001b33a21ff8 CR3: 000000012377e000 CR4: 00000000003506f0 [ 34.138860][ T4047] DR0: 0000000000000004 DR1: 0000200000000300 DR2: 0000000000000000 [ 34.146923][ T4047] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 34.154919][ T4047] Call Trace: [ 34.159066][ T4047] [ 34.162015][ T4047] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 34.168024][ T4047] ? errseq_check+0x2c/0x50 [ 34.172636][ T4047] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 34.178311][ T4047] ext4_evict_inode+0xa1f/0xd60 [ 34.183319][ T4047] ? __pfx_ext4_evict_inode+0x10/0x10 [ 34.189450][ T4047] evict+0x2af/0x510 [ 34.193370][ T4047] ? __dquot_initialize+0x146/0x7c0 [ 34.199987][ T4047] iput+0x41a/0x580 [ 34.203906][ T4047] ext4_process_orphan+0x1a9/0x1c0 [ 34.209264][ T4047] ext4_orphan_cleanup+0x6a8/0xa00 [ 34.214538][ T4047] ext4_fill_super+0x3408/0x37c0 [ 34.220369][ T4047] ? set_blocksize+0x14c/0x270 [ 34.225401][ T4047] ? setup_bdev_super+0x30e/0x370 [ 34.230498][ T4047] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.235893][ T4047] get_tree_bdev_flags+0x291/0x300 [ 34.242054][ T4047] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.248197][ T4047] get_tree_bdev+0x1f/0x30 [ 34.252237][ T4056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 34.252720][ T4047] ext4_get_tree+0x1c/0x30 [ 34.266035][ T4047] vfs_get_tree+0x57/0x1d0 [ 34.270549][ T4047] do_new_mount+0x288/0x8d0 [ 34.275047][ T4047] path_mount+0x4d0/0xbc0 [ 34.279965][ T4047] __se_sys_mount+0x28c/0x2e0 [ 34.284650][ T4047] __x64_sys_mount+0x67/0x80 [ 34.289722][ T4047] x64_sys_call+0x2d61/0x3020 [ 34.294420][ T4047] do_syscall_64+0x12c/0x370 [ 34.299068][ T4047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.305030][ T4047] RIP: 0033:0x7fca0713da0a [ 34.310005][ T4047] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.330536][ T4047] RSP: 002b:00007fca05b96e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.339486][ T4047] RAX: ffffffffffffffda RBX: 00007fca05b96ee0 RCX: 00007fca0713da0a [ 34.347505][ T4047] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fca05b96ea0 [ 34.355482][ T4047] RBP: 0000200000000180 R08: 00007fca05b96ee0 R09: 0000000000800700 [ 34.363574][ T4047] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000000 [ 34.372091][ T4047] R13: 00007fca05b96ea0 R14: 000000000000047d R15: 00002000000007c0 [ 34.380139][ T4047] [ 34.383154][ T4047] ---[ end trace 0000000000000000 ]--- [ 34.389460][ T4047] EXT4-fs (loop1): 1 orphan inode deleted [ 34.396227][ T4047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.427357][ T4058] loop4: detected capacity change from 0 to 164 [ 34.475996][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.643344][ T4070] loop4: detected capacity change from 0 to 8192 [ 34.681338][ T4088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 34.846991][ T4105] program syz.4.276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.923201][ T4114] loop0: detected capacity change from 0 to 512 [ 34.936672][ T4116] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.281: invalid indirect mapped block 256 (level 2) [ 34.952417][ T4116] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.952621][ T4116] EXT4-fs (loop4): 2 truncates cleaned up [ 34.962231][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 34.962251][ C1] EXT4-fs (loop4): initial error at time 1773194855: ext4_free_branches:1023: inode 11 [ 34.962285][ C1] EXT4-fs (loop4): last error at time 1773194855: ext4_free_branches:1023: inode 11 [ 34.996340][ T4114] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.004556][ T4114] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.013045][ T4114] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.280: Failed to acquire dquot type 1 [ 35.029997][ T4116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.062772][ T4114] loop0: lost filesystem error report for type 5 error -5 [ 35.066311][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 35.080277][ C1] EXT4-fs (loop0): initial error at time 1773194855: ext4_acquire_dquot:7001 [ 35.089200][ C1] EXT4-fs (loop0): last error at time 1773194855: ext4_acquire_dquot:7001 [ 35.098379][ T4114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.280: bg 0: block 40: padding at end of block bitmap is not set [ 35.099051][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.112882][ T4114] loop0: lost filesystem error report for type 5 error -117 [ 35.121963][ T4114] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 35.138811][ T4114] loop0: lost filesystem error report for type 5 error -117 [ 35.140460][ T4114] EXT4-fs (loop0): 1 truncate cleaned up [ 35.175664][ T4114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.255182][ T4130] xt_hashlimit: size too large, truncated to 1048576 [ 35.256750][ T4114] EXT4-fs (loop0): shut down requested (0) [ 35.300545][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.311664][ T4133] xt_connbytes: Forcing CT accounting to be enabled [ 35.320154][ T4133] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 35.333451][ T3288] loop3: p1 p2 p3 < p5 p6 > [ 35.342320][ T3288] loop3: p2 size 16775168 extends beyond EOD, truncated [ 35.354530][ T3288] loop3: p5 start 4294970168 is beyond EOD, truncated [ 35.366101][ T4109] loop3: p1 p2 p3 < p5 p6 > [ 35.372521][ T4109] loop3: p2 size 16775168 extends beyond EOD, truncated [ 35.410233][ T4109] loop3: p5 start 4294970168 is beyond EOD, truncated [ 35.468588][ T4140] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 35.493472][ T4140] FAT-fs (loop4): Filesystem has been set read-only [ 35.501845][ T4140] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 35.585392][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.587615][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 35.596734][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.622651][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.666385][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.678502][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.692854][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.702608][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 35.785967][ T4168] netlink: 64 bytes leftover after parsing attributes in process `syz.2.303'. [ 35.973973][ T4194] EXT4-fs: Ignoring removed nobh option [ 35.994513][ T4194] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=c842c028, mo2=0002] [ 36.005757][ T4194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.034277][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.134023][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 36.153309][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 36.420460][ T4222] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 36.428839][ T4222] System zones: 0-1, 3-36 [ 36.433971][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.457067][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.484046][ T4226] xt_hashlimit: size too large, truncated to 1048576 [ 37.047978][ T4262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.341'. [ 37.057182][ T4262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 37.574892][ T4306] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.583441][ T4306] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 37.799717][ T4329] xt_hashlimit: size too large, truncated to 1048576 [ 38.018737][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 38.018752][ T28] audit: type=1326 audit(2000000001.609:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72c93c799 code=0x7ffc0000 [ 38.054590][ T4341] set_capacity_and_notify: 8 callbacks suppressed [ 38.054605][ T4341] loop3: detected capacity change from 0 to 736 [ 38.083706][ T28] audit: type=1326 audit(2000000001.649:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72c93c799 code=0x7ffc0000 [ 38.108783][ T28] audit: type=1326 audit(2000000001.649:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb72c93c799 code=0x7ffc0000 [ 38.143058][ T28] audit: type=1326 audit(2000000001.649:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb72c93c502 code=0x7ffc0000 [ 38.170498][ T28] audit: type=1326 audit(2000000001.649:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb72c8fcfce code=0x7ffc0000 [ 38.227307][ T28] audit: type=1326 audit(2000000001.649:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb72c93c5c7 code=0x7ffc0000 [ 38.380167][ T4365] loop1: detected capacity change from 0 to 512 [ 38.380969][ T28] audit: type=1326 audit(2000000001.649:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb72c8fcfce code=0x7ffc0000 [ 38.430253][ T4365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.513758][ T28] audit: type=1326 audit(2000000001.649:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb72c93c42b code=0x7ffc0000 [ 38.533590][ T4365] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.538913][ T28] audit: type=1326 audit(2000000001.669:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb72c8fcfce code=0x7ffc0000 [ 38.550369][ T4372] __nla_validate_parse: 4 callbacks suppressed [ 38.550385][ T4372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 38.591029][ T28] audit: type=1326 audit(2000000001.669:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4340 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb72c8fcfce code=0x7ffc0000 [ 38.622296][ T4365] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.387: corrupted xattr block 33: invalid checksum [ 38.657975][ T4365] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 38.671737][ T4374] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 38.677006][ T4365] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.387: corrupted xattr block 33: invalid checksum [ 38.714661][ T4378] netlink: 'syz.2.392': attribute type 8 has an invalid length. [ 38.748828][ T4365] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.387: corrupted xattr block 33: invalid checksum [ 38.801777][ T4365] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 38.851936][ T4391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.396'. [ 38.870737][ T4365] EXT4-fs error (device loop1): ext4_get_inode_usage:888: inode #15: comm syz.1.387: corrupted xattr block 33: invalid checksum [ 38.959235][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.059006][ T4421] loop0: detected capacity change from 0 to 256 [ 39.119754][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 39.180553][ T4440] loop0: detected capacity change from 0 to 256 [ 39.203368][ T4440] FAT-fs (loop0): Directory bread(block 64) failed [ 39.210597][ T4440] FAT-fs (loop0): Directory bread(block 65) failed [ 39.222746][ T4440] FAT-fs (loop0): Directory bread(block 66) failed [ 39.244640][ T4440] FAT-fs (loop0): Directory bread(block 67) failed [ 39.253405][ T4440] FAT-fs (loop0): Directory bread(block 68) failed [ 39.266959][ T4440] FAT-fs (loop0): Directory bread(block 69) failed [ 39.274963][ T4440] FAT-fs (loop0): Directory bread(block 70) failed [ 39.282721][ T4440] FAT-fs (loop0): Directory bread(block 71) failed [ 39.289641][ T4440] FAT-fs (loop0): Directory bread(block 72) failed [ 39.296525][ T4440] FAT-fs (loop0): Directory bread(block 73) failed [ 39.320188][ T4440] syz.0.421: attempt to access beyond end of device [ 39.320188][ T4440] loop0: rw=8388608, sector=1740, nr_sectors = 4 limit=256 [ 39.401473][ T118] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.408744][ T4460] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.431439][ T4463] loop1: detected capacity change from 0 to 512 [ 39.493498][ T4471] program syz.2.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.540244][ T4474] loop2: detected capacity change from 0 to 128 [ 39.822863][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 39.832040][ T4506] netlink: 'syz.2.452': attribute type 30 has an invalid length. [ 39.840517][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 39.895952][ T4510] loop3: detected capacity change from 0 to 1024 [ 39.906012][ T4510] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.937798][ T4510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.945574][ T4512] netlink: 564 bytes leftover after parsing attributes in process `syz.2.455'. [ 39.960009][ T4512] netlink: 564 bytes leftover after parsing attributes in process `syz.2.455'. [ 39.979051][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.007779][ T4516] loop2: detected capacity change from 0 to 512 [ 40.014704][ T4516] EXT4-fs: Ignoring removed bh option [ 40.038352][ T4516] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.056069][ T4516] EXT4-fs (loop2): 1 truncate cleaned up [ 40.062388][ T4516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.089976][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.142097][ T4531] loop3: detected capacity change from 0 to 128 [ 40.203469][ T4535] syz.2.465 (4535) used greatest stack depth: 9488 bytes left [ 40.311758][ T4550] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 40.601280][ T4583] loop4: detected capacity change from 0 to 512 [ 40.639831][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.674545][ T4583] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.716850][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.778695][ T4591] program syz.4.491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 40.806581][ T4589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.871941][ T4597] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 40.884810][ T4597] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 40.896038][ T4597] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.908223][ T4597] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #32: comm syz.4.494: iget: special inode unallocated [ 40.916476][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.496'. [ 40.947236][ T4597] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 40.947414][ T4597] EXT4-fs (loop4): no journal found [ 40.956638][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 40.956657][ C0] EXT4-fs (loop4): initial error at time 2000000004: ext4_get_journal_inode:5863: inode 32 [ 40.956681][ C0] EXT4-fs (loop4): last error at time 2000000004: ext4_get_journal_inode:5863: inode 32 [ 40.993313][ T4597] EXT4-fs (loop4): can't get journal size [ 41.017899][ T4597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.035656][ T4597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 41.054351][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.124744][ T4621] netlink: 340 bytes leftover after parsing attributes in process `syz.1.505'. [ 41.416141][ T4658] random: crng reseeded on system resumption [ 41.446403][ T3884] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.446783][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 41.576910][ T4681] Unable to read rock-ridge attributes [ 41.604794][ T4681] Unable to read rock-ridge attributes [ 41.651900][ T4686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.756951][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.782025][ T4697] pim6reg: entered allmulticast mode [ 41.801238][ T4703] program syz.0.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.919645][ T4712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.936755][ T4719] netlink: 'syz.0.550': attribute type 2 has an invalid length. [ 41.978167][ T4712] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.009524][ T4726] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.028417][ T4712] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.547: Failed to acquire dquot type 0 [ 42.060644][ T4730] program syz.2.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.124695][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.161906][ T4738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.177002][ T4738] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.221442][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.269902][ T4749] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.313180][ T4749] EXT4-fs (loop4): 1 truncate cleaned up [ 42.339907][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.395239][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.562974][ T4766] program syz.1.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.755763][ T4776] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 42.769243][ T4776] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 42.808535][ T4776] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.819130][ T4776] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #32: comm syz.3.584: iget: special inode unallocated [ 42.842093][ T4776] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 42.842201][ T4776] EXT4-fs (loop3): no journal found [ 42.851807][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.851832][ C1] EXT4-fs (loop3): initial error at time 2000000006: ext4_get_journal_inode:5863: inode 32 [ 42.851865][ C1] EXT4-fs (loop3): last error at time 2000000006: ext4_get_journal_inode:5863: inode 32 [ 42.887360][ T4776] EXT4-fs (loop3): can't get journal size [ 42.895757][ T4776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.960285][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.307964][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 43.307979][ T28] audit: type=1400 audit(2000000006.899:382): avc: denied { getopt } for pid=4833 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.434471][ T4850] batman_adv: batadv0: Adding interface: vlan2 [ 43.459957][ T4850] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.491478][ T4850] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 43.537186][ T4855] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.569958][ T4859] __nla_validate_parse: 6 callbacks suppressed [ 43.569977][ T4859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'. [ 43.585449][ T4858] set_capacity_and_notify: 9 callbacks suppressed [ 43.585464][ T4858] loop0: detected capacity change from 0 to 512 [ 43.663966][ T4858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.698355][ T4858] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.732607][ T4880] batman_adv: batadv0: Adding interface: vlan2 [ 43.734969][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.739047][ T4880] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.774999][ T4880] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 43.924972][ T28] audit: type=1400 audit(2000000007.509:383): avc: denied { name_bind } for pid=4893 comm="syz.3.638" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.954187][ T4896] netlink: 144 bytes leftover after parsing attributes in process `syz.4.628'. [ 44.486337][ T28] audit: type=1326 audit(2000000008.069:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4868 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f550989c799 code=0x7fc00000 [ 44.674725][ T4914] loop3: detected capacity change from 0 to 512 [ 44.734828][ T23] IPVS: starting estimator thread 0... [ 44.736053][ T4916] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 44.792599][ T4921] loop3: detected capacity change from 0 to 512 [ 44.827247][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.836446][ T4919] IPVS: using max 2160 ests per chain, 108000 per kthread [ 44.866466][ T4921] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.908204][ T4929] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 44.915872][ T4929] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 44.936018][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.078458][ T4939] loop4: detected capacity change from 0 to 128 [ 45.130859][ T28] audit: type=1326 audit(2000000008.709:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a54eac799 code=0x7ffc0000 [ 45.287765][ T4955] netlink: 23 bytes leftover after parsing attributes in process `syz.3.651'. [ 45.311249][ T4955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.651'. [ 45.322671][ T28] audit: type=1326 audit(2000000008.709:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a54eac799 code=0x7ffc0000 [ 45.352703][ T28] audit: type=1326 audit(2000000008.709:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f1a54eac799 code=0x7ffc0000 [ 45.401810][ T28] audit: type=1326 audit(2000000008.719:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a54eac799 code=0x7ffc0000 [ 45.427273][ T28] audit: type=1326 audit(2000000008.719:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4936 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a54eac799 code=0x7ffc0000 [ 45.481889][ T4964] loop4: detected capacity change from 0 to 512 [ 45.529481][ T4964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.567147][ T4964] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.653684][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.389766][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 46.422727][ T5019] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 46.622978][ T5040] loop4: detected capacity change from 0 to 128 [ 46.682953][ T5042] program syz.0.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.294405][ T5074] loop3: detected capacity change from 0 to 4096 [ 47.322398][ T5074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.378547][ T5081] loop0: detected capacity change from 0 to 512 [ 47.379543][ T5080] loop1: detected capacity change from 0 to 512 [ 47.410197][ T5081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.437172][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.470724][ T5081] EXT4-fs (loop0): 1 truncate cleaned up [ 47.477087][ T5081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.503219][ T5086] loop1: detected capacity change from 0 to 128 [ 47.568378][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.660553][ T5099] vlan2: entered allmulticast mode [ 47.665726][ T5099] veth0_to_bond: entered allmulticast mode [ 48.279815][ T5126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.291702][ T5126] EXT4-fs (loop4): 1 truncate cleaned up [ 48.299115][ T5126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.362171][ T5132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.377574][ T5132] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.411134][ T5132] EXT4-fs error (device loop1): ext4_get_first_dir_block:3527: inode #12: comm syz.1.728: Attempting to read directory block (0) that is past i_size (3) [ 48.416339][ T28] audit: type=1400 audit(2000000011.999:390): avc: denied { rename } for pid=5131 comm="syz.1.728" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.473948][ T28] audit: type=1400 audit(2000000011.999:391): avc: denied { reparent } for pid=5131 comm="syz.1.728" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.505323][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 48.513471][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.552480][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.567790][ T5140] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.679855][ T5148] set_capacity_and_notify: 3 callbacks suppressed [ 48.679928][ T5148] loop4: detected capacity change from 0 to 512 [ 48.922313][ T5154] syz.4.740 (5154) used greatest stack depth: 9080 bytes left [ 48.960344][ T5171] loop4: detected capacity change from 0 to 512 [ 49.455234][ T5191] loop4: detected capacity change from 0 to 128 [ 49.508965][ T5195] loop4: detected capacity change from 0 to 764 [ 49.520421][ T5195] sg_write: data in/out 49116/126 bytes for SCSI command 0x0-- guessing data in; [ 49.520421][ T5195] program syz.4.753 not setting count and/or reply_len properly [ 49.571784][ T5200] loop3: detected capacity change from 0 to 164 [ 49.584627][ T5201] loop4: detected capacity change from 0 to 1024 [ 49.585625][ T5200] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 49.611328][ T5201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.644617][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.769294][ T5212] loop3: detected capacity change from 0 to 8192 [ 49.780166][ T5218] SELinux: security policydb version 16 (MLS) not backwards compatible [ 49.789270][ T28] audit: type=1400 audit(2000000013.369:392): avc: denied { load_policy } for pid=5217 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.818826][ T5218] SELinux: failed to load policy [ 49.986107][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 50.058146][ T5247] loop2: detected capacity change from 0 to 164 [ 50.119739][ T5254] netlink: 17 bytes leftover after parsing attributes in process `syz.3.782'. [ 50.137733][ T28] audit: type=1400 audit(2000000013.729:393): avc: denied { create } for pid=5253 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.203280][ T28] audit: type=1400 audit(2000000013.729:394): avc: denied { setopt } for pid=5253 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.260311][ T28] audit: type=1400 audit(2000000013.729:395): avc: denied { ioctl } for pid=5253 comm="syz.1.781" path="socket:[9896]" dev="sockfs" ino=9896 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.292490][ T5276] loop3: detected capacity change from 0 to 1024 [ 50.351229][ T5276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.379379][ T5276] ext4 filesystem being mounted at /175/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.412398][ T5276] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.792: lblock 0 mapped to illegal pblock 0 (length 6) [ 50.427356][ T28] audit: type=1400 audit(2000000013.999:396): avc: denied { append } for pid=5274 comm="syz.3.792" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.449865][ T5276] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 50.472098][ T5276] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.472098][ T5276] [ 50.483746][ T5291] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm syz.3.792: lblock 8 mapped to illegal pblock 8 (length 8) [ 50.513334][ T28] audit: type=1400 audit(2000000014.069:397): avc: denied { rename } for pid=5274 comm="syz.3.792" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.551791][ T5291] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 50.567172][ T5291] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.567172][ T5291] [ 50.572159][ T28] audit: type=1400 audit(2000000014.069:398): avc: denied { unlink } for pid=5274 comm="syz.3.792" name="file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.578579][ T5291] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.792: bg 0: block 112: padding at end of block bitmap is not set [ 50.738635][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.781852][ T28] audit: type=1400 audit(2000000014.369:399): avc: denied { create } for pid=5319 comm="syz.4.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.828462][ T314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.892805][ T5325] loop4: detected capacity change from 0 to 512 [ 50.910047][ T314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.930694][ T5325] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 50.956635][ T5325] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.980597][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.997821][ T5325] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.815: Failed to acquire dquot type 1 [ 51.010991][ T314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.041353][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.057813][ T5325] loop4: lost filesystem error report for type 5 error -5 [ 51.059387][ T5325] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.815: bg 0: block 40: padding at end of block bitmap is not set [ 51.066642][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 51.066663][ C0] EXT4-fs (loop4): initial error at time 2000000014: ext4_acquire_dquot:7001 [ 51.066690][ C0] EXT4-fs (loop4): last error at time 2000000014: ext4_acquire_dquot:7001 [ 51.142744][ T5325] loop4: lost filesystem error report for type 5 error -117 [ 51.142995][ T5325] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 51.170566][ T5325] loop4: lost filesystem error report for type 5 error -117 [ 51.170867][ T5325] EXT4-fs (loop4): 1 truncate cleaned up [ 51.194681][ T314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.215402][ T5325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.263756][ T5325] EXT4-fs (loop4): shut down requested (0) [ 51.311069][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.351760][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 51.361620][ T314] bridge_slave_1: left allmulticast mode [ 51.371529][ T314] bridge_slave_1: left promiscuous mode [ 51.386364][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 51.398803][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.417969][ T5352] netlink: 212 bytes leftover after parsing attributes in process `syz.3.822'. [ 51.428456][ T314] bridge_slave_0: left allmulticast mode [ 51.436178][ T314] bridge_slave_0: left promiscuous mode [ 51.445603][ T5363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.823'. [ 51.465244][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.598905][ T5371] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 51.636971][ T5371] FAT-fs (loop3): Filesystem has been set read-only [ 51.668228][ T5375] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 51.825720][ T5388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.831'. [ 51.957687][ T3301] loop1: p1 p2 p3 < p5 p6 > [ 51.966264][ T3301] loop1: p2 size 16775168 extends beyond EOD, [ 51.968135][ T314] batman_adv: batadv0: Removing interface: vlan2 [ 51.980803][ T3301] truncated [ 51.985003][ T3301] loop1: p5 start 4294970168 is beyond EOD, truncated [ 51.996258][ T5379] loop1: p1 p2 p3 < p5 p6 > [ 52.005552][ T5379] loop1: p2 size 16775168 extends beyond EOD, truncated [ 52.027084][ T314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.037962][ T314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.038772][ T5379] loop1: p5 start 4294970168 is beyond EOD, truncated [ 52.054854][ T314] bond0 (unregistering): Released all slaves [ 52.135235][ T314] hsr_slave_0: left promiscuous mode [ 52.168849][ T314] hsr_slave_1: left promiscuous mode [ 52.182853][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.194824][ T314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.226688][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.243069][ T314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.273301][ T314] veth1_macvtap: left promiscuous mode [ 52.281885][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 52.281980][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.295745][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 52.306239][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 52.329162][ T314] veth0_macvtap: left promiscuous mode [ 52.346450][ T314] veth1_vlan: left promiscuous mode [ 52.352030][ T314] veth0_vlan: left promiscuous mode [ 52.386624][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 52.389459][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 52.398707][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 52.407907][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.534329][ T5439] xt_hashlimit: size too large, truncated to 1048576 [ 52.547272][ T314] team0 (unregistering): Port device team_slave_1 removed [ 52.567612][ T314] team0 (unregistering): Port device team_slave_0 removed [ 52.630371][ T5328] chnl_net:caif_netlink_parms(): no params data found [ 52.708237][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.715479][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.723086][ T5328] bridge_slave_0: entered allmulticast mode [ 52.729794][ T5328] bridge_slave_0: entered promiscuous mode [ 52.737949][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.752787][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.760438][ T5328] bridge_slave_1: entered allmulticast mode [ 52.769437][ T5328] bridge_slave_1: entered promiscuous mode [ 52.831423][ T5328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.844363][ T5328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.870561][ T5328] team0: Port device team_slave_0 added [ 52.877998][ T5328] team0: Port device team_slave_1 added [ 52.929098][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.941835][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.974620][ T5328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.986154][ T5472] netlink: 'syz.4.855': attribute type 14 has an invalid length. [ 53.004821][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.014137][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.040552][ T5328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.134226][ T5328] hsr_slave_0: entered promiscuous mode [ 53.146808][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 53.161243][ T5328] hsr_slave_1: entered promiscuous mode [ 53.169846][ T5478] rock: directory entry would overflow storage [ 53.176790][ T5328] debugfs: 'hsr0' already exists in 'hsr' [ 53.183004][ T5478] rock: sig=0x5252, size=5, remaining=3 [ 53.189561][ T5328] Cannot create hsr debugfs directory [ 53.341707][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 53.361143][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 53.581048][ T5328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.598657][ T5328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.613521][ T5328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.624525][ T5328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.679325][ T5532] rock: directory entry would overflow storage [ 53.701334][ T5532] rock: sig=0x5252, size=5, remaining=3 [ 53.722892][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.747299][ T5328] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.779839][ T118] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.786944][ T118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.793810][ T5552] set_capacity_and_notify: 6 callbacks suppressed [ 53.793827][ T5552] loop3: detected capacity change from 0 to 1024 [ 53.813750][ T1820] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.820865][ T1820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.832765][ T5552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 53.868651][ T5552] System zones: 0-1, 3-36 [ 53.883122][ T5552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.935313][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.998579][ T5328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.144135][ T5328] veth0_vlan: entered promiscuous mode [ 54.163200][ T5328] veth1_vlan: entered promiscuous mode [ 54.191714][ T5596] loop3: detected capacity change from 0 to 128 [ 54.220606][ T5328] veth0_macvtap: entered promiscuous mode [ 54.255000][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 54.255013][ T28] audit: type=1400 audit(2000000001.779:411): avc: denied { append } for pid=5600 comm="syz.4.879" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.265950][ T5328] veth1_macvtap: entered promiscuous mode [ 54.297801][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.309096][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.341490][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.394145][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.433158][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.455157][ T5621] xt_hashlimit: size too large, truncated to 1048576 [ 54.473703][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.846936][ T5655] loop2: detected capacity change from 0 to 256 [ 54.906874][ T5664] netlink: 'syz.0.891': attribute type 8 has an invalid length. [ 54.943904][ T5668] loop1: detected capacity change from 0 to 128 [ 54.999732][ T5670] loop2: detected capacity change from 0 to 256 [ 55.054008][ T5670] FAT-fs (loop2): Directory bread(block 64) failed [ 55.076702][ T5670] FAT-fs (loop2): Directory bread(block 65) failed [ 55.097239][ T5670] FAT-fs (loop2): Directory bread(block 66) failed [ 55.129357][ T5670] FAT-fs (loop2): Directory bread(block 67) failed [ 55.138895][ T5670] FAT-fs (loop2): Directory bread(block 68) failed [ 55.145435][ T5670] FAT-fs (loop2): Directory bread(block 69) failed [ 55.194162][ T5685] loop1: detected capacity change from 0 to 512 [ 55.205499][ T5670] FAT-fs (loop2): Directory bread(block 70) failed [ 55.223572][ T5670] FAT-fs (loop2): Directory bread(block 71) failed [ 55.231828][ T5685] EXT4-fs: Ignoring removed bh option [ 55.231901][ T5690] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.256905][ T5685] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 55.270059][ T5670] FAT-fs (loop2): Directory bread(block 72) failed [ 55.286483][ T5670] FAT-fs (loop2): Directory bread(block 73) failed [ 55.323631][ T5685] EXT4-fs (loop1): 1 truncate cleaned up [ 55.342112][ T5685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.348895][ T5670] syz.2.894: attempt to access beyond end of device [ 55.348895][ T5670] loop2: rw=8388608, sector=1740, nr_sectors = 4 limit=256 [ 55.491737][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.613330][ T5716] loop1: detected capacity change from 0 to 128 [ 55.711522][ T5720] loop1: detected capacity change from 0 to 512 [ 55.743310][ T5720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.790703][ T5720] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.837689][ T5720] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 55.869457][ T5720] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 55.890148][ T5728] loop4: detected capacity change from 0 to 164 [ 55.901746][ T5720] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.919: Failed to acquire dquot type 0 [ 55.943091][ T5728] rock: directory entry would overflow storage [ 55.969875][ T5728] rock: sig=0x5252, size=5, remaining=3 [ 55.969988][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.041692][ T5733] __nla_validate_parse: 4 callbacks suppressed [ 56.041708][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 56.226630][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 56.369358][ T5749] loop1: detected capacity change from 0 to 8192 [ 56.582077][ T28] audit: type=1400 audit(2000000004.109:412): avc: denied { listen } for pid=5762 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.608144][ T5765] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.738569][ T5765] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.939: bg 0: block 4: invalid block bitmap [ 56.764201][ T5765] loop3: lost filesystem error report for type 5 error -117 [ 56.764510][ T5765] EXT4-fs (loop3): 1 truncate cleaned up [ 56.771941][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 56.771960][ C0] EXT4-fs (loop3): initial error at time 2000000004: ext4_validate_block_bitmap:432 [ 56.771992][ C0] EXT4-fs (loop3): last error at time 2000000004: ext4_validate_block_bitmap:432 [ 56.808491][ T5765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.861310][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.890180][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 57.077593][ T5789] FAT-fs (loop3): Directory bread(block 64) failed [ 57.084410][ T5789] FAT-fs (loop3): Directory bread(block 65) failed [ 57.107951][ T5789] FAT-fs (loop3): Directory bread(block 66) failed [ 57.122214][ T5789] FAT-fs (loop3): Directory bread(block 67) failed [ 57.136397][ T5789] FAT-fs (loop3): Directory bread(block 68) failed [ 57.153218][ T5789] FAT-fs (loop3): Directory bread(block 69) failed [ 57.166684][ T5789] FAT-fs (loop3): Directory bread(block 70) failed [ 57.181085][ T5789] FAT-fs (loop3): Directory bread(block 71) failed [ 57.194293][ T5789] FAT-fs (loop3): Directory bread(block 72) failed [ 57.208750][ T5789] FAT-fs (loop3): Directory bread(block 73) failed [ 57.264249][ T5789] syz.3.948: attempt to access beyond end of device [ 57.264249][ T5789] loop3: rw=8388608, sector=1740, nr_sectors = 4 limit=256 [ 57.382975][ T5806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.433069][ T5806] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.475901][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.453723][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 58.677619][ T5847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 58.702900][ T5849] program syz.3.976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.100062][ T5872] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.985'. [ 59.147336][ T5872] netlink: zone id is out of range [ 59.168865][ T5872] netlink: zone id is out of range [ 59.193824][ T5872] netlink: set zone limit has 8 unknown bytes [ 59.416140][ T5897] set_capacity_and_notify: 3 callbacks suppressed [ 59.416157][ T5897] loop4: detected capacity change from 0 to 2048 [ 59.476971][ T5897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.634582][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.646479][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 59.673548][ T5907] n: the hash_elasticity option has been deprecated and is always 16 [ 59.684208][ T5907] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 59.711370][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 59.722898][ T5912] n: the hash_elasticity option has been deprecated and is always 16 [ 59.731265][ T5912] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 59.897528][ T5924] loop1: detected capacity change from 0 to 128 [ 59.924535][ T5924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.974044][ T5924] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.996779][ T5924] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.091763][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.207554][ T5943] program syz.3.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.212105][ T5933] loop1: detected capacity change from 0 to 8192 [ 60.250795][ T5949] loop0: detected capacity change from 0 to 164 [ 60.258560][ T5949] Unable to read rock-ridge attributes [ 60.284768][ T5949] Unable to read rock-ridge attributes [ 60.362035][ T5953] loop1: detected capacity change from 0 to 2048 [ 60.479226][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.494363][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1025'. [ 60.781641][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.804060][ T5982] loop0: detected capacity change from 0 to 8192 [ 60.837454][ T28] audit: type=1400 audit(2000000008.359:413): avc: denied { view } for pid=5983 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.881197][ T28] audit: type=1400 audit(2000000008.409:414): avc: denied { create } for pid=5985 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.919514][ T5986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1032'. [ 60.944211][ T28] audit: type=1400 audit(2000000008.449:415): avc: denied { ioctl } for pid=5985 comm="syz.1.1032" path="socket:[13433]" dev="sockfs" ino=13433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.019337][ T28] audit: type=1400 audit(2000000008.519:416): avc: denied { connect } for pid=5990 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.076347][ T28] audit: type=1400 audit(2000000008.599:417): avc: denied { allowed } for pid=5999 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 61.169996][ T6005] loop0: detected capacity change from 0 to 512 [ 61.203685][ T6005] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.333901][ T28] audit: type=1400 audit(2000000008.859:418): avc: denied { read } for pid=6006 comm="syz.2.1041" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.376557][ T6009] program syz.4.1043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.472800][ T6024] ================================================================== [ 61.481019][ T6024] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update [ 61.488927][ T6024] [ 61.491240][ T6024] read to 0xffff88810212e2b8 of 4 bytes by task 3301 on cpu 0: [ 61.498763][ T6024] bdev_statx+0x295/0x2d0 [ 61.503158][ T6024] vfs_getattr_nosec+0x1b6/0x1e0 [ 61.508086][ T6024] __se_sys_newfstat+0x96/0x460 [ 61.513028][ T6024] __x64_sys_newfstat+0x31/0x40 [ 61.517882][ T6024] x64_sys_call+0x2773/0x3020 [ 61.522576][ T6024] do_syscall_64+0x12c/0x370 [ 61.527166][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.533147][ T6024] [ 61.535463][ T6024] write to 0xffff88810212e278 of 192 bytes by task 6024 on cpu 1: [ 61.543261][ T6024] queue_limits_commit_update+0x4b/0x160 [ 61.548909][ T6024] loop_configure+0x78c/0x9c0 [ 61.553584][ T6024] lo_ioctl+0x1e1/0x13a0 [ 61.557832][ T6024] blkdev_ioctl+0x387/0x460 [ 61.562350][ T6024] __se_sys_ioctl+0xce/0x140 [ 61.567041][ T6024] __x64_sys_ioctl+0x43/0x50 [ 61.571728][ T6024] x64_sys_call+0x1563/0x3020 [ 61.576417][ T6024] do_syscall_64+0x12c/0x370 [ 61.581002][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.587068][ T6024] [ 61.589382][ T6024] Reported by Kernel Concurrency Sanitizer on: [ 61.595562][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.2.1047 Tainted: G W syzkaller #0 PREEMPT(full) [ 61.606406][ T6024] Tainted: [W]=WARN [ 61.610190][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.620345][ T6024] ================================================================== [ 61.631048][ T6024] loop2: detected capacity change from 0 to 764 [ 61.648796][ T6024] sg_write: data in/out 49116/126 bytes for SCSI command 0x0-- guessing data in; [ 61.648796][ T6024] program syz.2.1047 not setting count and/or reply_len properly