last executing test programs: 28.497825946s ago: executing program 0 (id=9620): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) 28.445046637s ago: executing program 0 (id=9622): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010049) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, 0x0, 0x4000) 28.310917215s ago: executing program 0 (id=9635): r0 = syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 28.257604636s ago: executing program 0 (id=9627): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x439, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 28.199267246s ago: executing program 0 (id=9628): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 27.855673109s ago: executing program 0 (id=9644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)="37cb0d24d3b0fb", &(0x7f00000001c0), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 27.808092191s ago: executing program 32 (id=9644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)="37cb0d24d3b0fb", &(0x7f00000001c0), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3.258989352s ago: executing program 1 (id=10292): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) 2.34449645s ago: executing program 1 (id=10311): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.008299064s ago: executing program 3 (id=10321): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.898583576s ago: executing program 3 (id=10323): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000003c0)) 1.691284231s ago: executing program 3 (id=10325): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r0, 0xa, 0x12) dup2(r0, r1) 1.402122633s ago: executing program 3 (id=10338): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.046878654s ago: executing program 5 (id=10336): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2002c144, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@noswap}]}) 1.046610694s ago: executing program 4 (id=10337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, r1, 0xc730c779156eaf0f, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x4004010) 975.587782ms ago: executing program 4 (id=10339): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x110c34, 0x7ffc, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x9}) 971.986692ms ago: executing program 5 (id=10341): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xff, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x3, 0x8, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r0, 0x1) 917.782913ms ago: executing program 4 (id=10342): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x40}, 0x1c1c0, 0x6, 0x0, 0x1, 0xfd, 0x6, 0x8b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 856.183222ms ago: executing program 5 (id=10344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x11242}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 856.044293ms ago: executing program 2 (id=10345): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000001440)={[{@nodots}, {@fat=@errors_continue}, {@fat=@uid}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@nocase}, {@dots}, {@fat=@uid}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) 254.377003ms ago: executing program 1 (id=10346): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0xc45, 0x4) 253.370832ms ago: executing program 5 (id=10356): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x10) close(0x3) 251.751752ms ago: executing program 2 (id=10357): open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10003, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}}]}}) 249.518892ms ago: executing program 3 (id=10358): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884) 249.025102ms ago: executing program 4 (id=10359): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) unlinkat(r1, &(0x7f00000000c0)='./bus\x00', 0x200) 173.157189ms ago: executing program 5 (id=10347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0xf8, 0x0, 0x0, 0x5, 0xf4, 0x1000, 0x6, 0x2, 0x0, 0x2, 'syz0\x00'}) sync() 172.997479ms ago: executing program 2 (id=10348): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) creat(0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 172.840109ms ago: executing program 3 (id=10349): r0 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000005c0)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) 172.762619ms ago: executing program 4 (id=10350): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2, 0x0, 0x10ffe, 0x8, 0x2, 0x8000000e, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) unshare(0x28060080) unshare(0x28020600) 123.724521ms ago: executing program 4 (id=10351): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), 0x4) 123.04553ms ago: executing program 1 (id=10352): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2002c144, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@noswap}]}) 109.285478ms ago: executing program 2 (id=10353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x3, @val=@netkit}, 0x1c) 86.330555ms ago: executing program 1 (id=10354): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 86.200975ms ago: executing program 2 (id=10355): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xff, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x3, 0x8, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r0, 0x1) 68.686942ms ago: executing program 5 (id=10360): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x2f4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 32.255995ms ago: executing program 1 (id=10361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 0s ago: executing program 2 (id=10362): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3}, {}, {0xa, 0x15}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40840) kernel console output (not intermixed with test programs): tected capacity change from 0 to 512 [ 244.001691][T20688] loop1: detected capacity change from 0 to 128 [ 244.001939][T20680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.025556][T20680] ext4 filesystem being mounted at /1466/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.081405][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.350775][T20708] loop1: detected capacity change from 0 to 128 [ 244.352741][T20703] xfrm0 speed is unknown, defaulting to 1000 [ 244.381205][ T28] audit: type=1400 audit(1772581201.095:31748): avc: denied { accept } for pid=20705 comm="syz.2.7562" lport=47273 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.387585][T20708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 244.442669][T20708] FAT-fs (loop1): Filesystem has been set read-only [ 244.475365][T20708] bio_check_eod: 31725 callbacks suppressed [ 244.475388][T20708] syz.1.7561: attempt to access beyond end of device [ 244.475388][T20708] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 244.547327][T20708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 244.565381][T20708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 244.593768][T20708] syz.1.7561: attempt to access beyond end of device [ 244.593768][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.600111][ T28] audit: type=1400 audit(1772581201.315:31749): avc: denied { remount } for pid=20707 comm="syz.1.7561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 244.625442][T20708] syz.1.7561: attempt to access beyond end of device [ 244.625442][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.662469][T20708] syz.1.7561: attempt to access beyond end of device [ 244.662469][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.680003][T20708] syz.1.7561: attempt to access beyond end of device [ 244.680003][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.707436][T20708] syz.1.7561: attempt to access beyond end of device [ 244.707436][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.734540][T20708] syz.1.7561: attempt to access beyond end of device [ 244.734540][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.755390][T20708] syz.1.7561: attempt to access beyond end of device [ 244.755390][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.770686][T20708] syz.1.7561: attempt to access beyond end of device [ 244.770686][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.784589][T20708] syz.1.7561: attempt to access beyond end of device [ 244.784589][T20708] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 244.956157][T20746] xfrm0 speed is unknown, defaulting to 1000 [ 245.032474][T20752] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 245.253076][T20759] loop1: detected capacity change from 0 to 512 [ 245.324915][T20759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.366539][T20759] ext4 filesystem being mounted at /1447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.447762][T20776] __nla_validate_parse: 3 callbacks suppressed [ 245.447788][T20776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7595'. [ 245.473265][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.537257][ T28] audit: type=1400 audit(1772581202.265:31750): avc: denied { write } for pid=20779 comm="syz.1.7596" path="socket:[58698]" dev="sockfs" ino=58698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.746672][ T28] audit: type=1400 audit(1772581202.465:31751): avc: denied { read write } for pid=20797 comm="syz.3.7605" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 246.245535][T20828] SELinux: failed to load policy [ 246.339420][T20847] 9p: Bad value for 'rfdno' [ 247.233522][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 247.233540][ T28] audit: type=1326 audit(1772581203.955:31756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.7639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4ddac799 code=0x0 [ 247.300445][T20882] sctp: [Deprecated]: syz.0.7641 (pid 20882) Use of int in max_burst socket option deprecated. [ 247.300445][T20882] Use struct sctp_assoc_value instead [ 247.361616][ T28] audit: type=1400 audit(1772581204.085:31757): avc: denied { bind } for pid=20886 comm="syz.3.7644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.403250][ T28] audit: type=1400 audit(1772581204.105:31758): avc: denied { listen } for pid=20886 comm="syz.3.7644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.595263][ T28] audit: type=1326 audit(1772581204.315:31759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.4.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965d7dc799 code=0x7ffc0000 [ 247.619946][ T28] audit: type=1326 audit(1772581204.315:31760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.4.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965d7dc799 code=0x7ffc0000 [ 247.690884][ T28] audit: type=1326 audit(1772581204.315:31761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.4.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965d7dc799 code=0x7ffc0000 [ 247.715425][ T28] audit: type=1326 audit(1772581204.345:31762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.4.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965d7dc799 code=0x7ffc0000 [ 247.759665][ T28] audit: type=1326 audit(1772581204.345:31763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.4.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965d7dc799 code=0x7ffc0000 [ 247.791521][T20933] loop3: detected capacity change from 0 to 1024 [ 247.798333][ T28] audit: type=1326 audit(1772581204.345:31764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.4.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965d7dc799 code=0x7ffc0000 [ 247.822645][T20933] EXT4-fs: Ignoring removed oldalloc option [ 247.829788][T20933] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 247.842352][ T28] audit: type=1326 audit(1772581204.345:31765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20921 comm="syz.4.7660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965d7dc799 code=0x7ffc0000 [ 247.879974][T20938] sctp: [Deprecated]: syz.4.7668 (pid 20938) Use of int in maxseg socket option. [ 247.879974][T20938] Use struct sctp_assoc_value instead [ 247.904494][T20940] netlink: 'syz.0.7669': attribute type 11 has an invalid length. [ 247.939760][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7671'. [ 247.948846][T20945] bridge_slave_1: left allmulticast mode [ 247.954562][T20945] bridge_slave_1: left promiscuous mode [ 247.961851][T20945] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.983420][T20945] bridge_slave_0: left allmulticast mode [ 247.989448][T20945] bridge_slave_0: left promiscuous mode [ 247.995130][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.015166][T20955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7674'. [ 248.090121][T20961] macvtap3: entered promiscuous mode [ 248.097675][T20961] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 248.105046][T20961] team0: Device macvtap3 is already an upper device of the team interface [ 248.122388][T20964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=20964 comm=syz.1.7678 [ 248.252390][T20981] loop3: detected capacity change from 0 to 128 [ 248.269044][T20981] FAT-fs (loop3): bogus number of reserved sectors [ 248.301146][T20981] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 248.329480][T20981] FAT-fs (loop3): Can't find a valid FAT filesystem [ 248.403035][T21004] loop1: detected capacity change from 0 to 512 [ 248.435006][T21004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 248.470377][T21004] EXT4-fs (loop1): 1 truncate cleaned up [ 248.485685][T21004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.613687][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.646835][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7711'. [ 248.661699][T21033] netlink: 'syz.3.7711': attribute type 5 has an invalid length. [ 248.949514][T21079] loop1: detected capacity change from 0 to 512 [ 248.966049][T21079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.984354][T21079] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.7734: iget: bad extended attribute block 262144 [ 249.027115][T21079] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.027667][T21079] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.7734: couldn't read orphan inode 15 (err -117) [ 249.037010][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 249.037032][ C1] EXT4-fs (loop1): initial error at time 1772581205: ext4_orphan_get:1391: inode 15 [ 249.037063][ C1] EXT4-fs (loop1): last error at time 1772581205: ext4_orphan_get:1391: inode 15 [ 249.074558][T21079] loop1: lost filesystem error report for type 5 error -117 [ 249.075267][T21079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.109487][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.137487][T21100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7744'. [ 249.316006][T21131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7759'. [ 249.419270][T21152] bridge3: entered promiscuous mode [ 249.514037][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7776'. [ 249.878939][T21208] loop3: detected capacity change from 0 to 512 [ 249.901372][T21208] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 249.930412][T21208] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 249.939057][T21208] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7794: bad orphan inode 4 [ 249.955297][T21208] loop3: lost filesystem error report for type 5 error -117 [ 249.957762][T21208] EXT4-fs (loop3): 1 orphan inode deleted [ 249.970949][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 249.970971][ C1] EXT4-fs (loop3): initial error at time 1772581206: ext4_orphan_get:1417 [ 249.970997][ C1] EXT4-fs (loop3): last error at time 1772581206: ext4_orphan_get:1417 [ 250.007942][T21228] netlink: 'syz.0.7802': attribute type 1 has an invalid length. [ 250.993452][T21295] tipc: Enabling of bearer rejected, failed to enable media [ 251.336802][T21347] sctp: [Deprecated]: syz.3.7857 (pid 21347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.336802][T21347] Use struct sctp_sack_info instead [ 251.607481][T21391] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7879'. [ 251.645584][T21398] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 251.652042][T21398] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 251.839663][T21433] netem: change failed [ 252.433156][T21468] 9p: Bad value for 'rfdno' [ 252.505737][T21476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7918'. [ 252.564206][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 252.564224][ T28] audit: type=1400 audit(1772581209.285:31791): avc: denied { wake_alarm } for pid=21481 comm="syz.4.7921" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 252.654648][ T28] audit: type=1400 audit(1772581209.375:31792): avc: denied { module_load } for pid=21490 comm="syz.3.7927" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=59863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 252.666457][T21495] Invalid ELF header magic: != ELF [ 253.045443][T10785] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.078433][T21547] loop1: detected capacity change from 0 to 512 [ 253.115538][T21547] EXT4-fs mount: 2 callbacks suppressed [ 253.115604][T21547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.144456][T21547] ext4 filesystem being mounted at /1490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.209754][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.222738][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7958'. [ 253.225594][ T28] audit: type=1400 audit(1772581209.945:31793): avc: denied { ioctl } for pid=21557 comm="syz.0.7958" path="socket:[60630]" dev="sockfs" ino=60630 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.387397][T21579] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 253.655740][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7978'. [ 253.737594][T21613] loop1: detected capacity change from 0 to 512 [ 253.758265][T21613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.780247][T21613] EXT4-fs (loop1): 1 truncate cleaned up [ 253.807878][T21613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.885983][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.188801][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7998'. [ 254.224571][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7998'. [ 254.286638][ T28] audit: type=1400 audit(1772581211.005:31794): avc: denied { getopt } for pid=21654 comm="syz.2.8001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.324167][T21662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21662 comm=syz.2.8003 [ 254.378061][T21667] netlink: 19 bytes leftover after parsing attributes in process `syz.2.8006'. [ 254.407974][T21670] xfrm0 speed is unknown, defaulting to 1000 [ 255.025455][ T28] audit: type=1400 audit(1772581211.705:31795): avc: denied { mount } for pid=21720 comm="syz.1.8030" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.104935][T21729] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8034'. [ 255.131776][ T28] audit: type=1400 audit(1772581211.805:31796): avc: denied { mount } for pid=21726 comm="syz.4.8033" name="/" dev="hugetlbfs" ino=60877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 255.643720][T21759] netlink: 19 bytes leftover after parsing attributes in process `syz.3.8047'. [ 255.971052][T21775] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8052'. [ 256.036902][T21779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21779 comm=syz.4.8056 [ 256.843314][T21850] loop1: detected capacity change from 0 to 512 [ 256.891851][T21850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.922511][T21850] ext4 filesystem being mounted at /1518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.951930][T21850] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 256.989575][T21850] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 257.009573][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.051597][T21859] SELinux: failed to load policy [ 257.080259][T21861] __nla_validate_parse: 7 callbacks suppressed [ 257.080278][T21861] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8092'. [ 257.492460][T21902] loop3: detected capacity change from 0 to 128 [ 258.262669][T21938] loop1: detected capacity change from 0 to 1024 [ 258.284680][T21938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.303323][ T28] audit: type=1400 audit(1772581727.020:31797): avc: denied { ioctl } for pid=21937 comm="syz.1.8125" path="/1524/file1/blkio.bfq.group_wait_time" dev="loop1" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.345865][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.381565][T21947] loop1: detected capacity change from 0 to 512 [ 258.435352][T21947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.473556][T21947] ext4 filesystem being mounted at /1525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.549010][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.789757][T22103] loop1: detected capacity change from 0 to 1024 [ 260.879763][T22103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.934582][ T28] audit: type=1326 audit(1772581729.650:31798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.3.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 260.986410][ T28] audit: type=1400 audit(1772581729.650:31799): avc: denied { unlink } for pid=22102 comm="syz.1.8198" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 261.010234][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.011243][ T28] audit: type=1326 audit(1772581729.690:31800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.3.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 261.043125][ T28] audit: type=1326 audit(1772581729.690:31801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.3.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 261.067101][ T28] audit: type=1326 audit(1772581729.690:31802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.3.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 261.127745][T22123] sctp: [Deprecated]: syz.1.8205 (pid 22123) Use of int in max_burst socket option deprecated. [ 261.127745][T22123] Use struct sctp_assoc_value instead [ 261.145245][ T28] audit: type=1326 audit(1772581729.690:31803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.3.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 261.189498][ T28] audit: type=1326 audit(1772581729.690:31804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.3.8204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 261.245260][ T28] audit: type=1326 audit(1772581729.950:31805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22125 comm="syz.3.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 261.295456][ T28] audit: type=1326 audit(1772581729.950:31806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22125 comm="syz.3.8208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cdc8c799 code=0x7ffc0000 [ 261.397134][T22137] sctp: [Deprecated]: syz.3.8213 (pid 22137) Use of int in maxseg socket option. [ 261.397134][T22137] Use struct sctp_assoc_value instead [ 261.412798][T22139] loop1: detected capacity change from 0 to 1024 [ 261.420818][T22139] EXT4-fs: Ignoring removed oldalloc option [ 261.459961][T22139] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 261.630101][T22153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=22153 comm=syz.4.8221 [ 261.702996][T22164] team_slave_0: entered promiscuous mode [ 261.708812][T22164] team_slave_1: entered promiscuous mode [ 261.725365][T22164] macvtap1: entered promiscuous mode [ 261.731357][T22164] team0: entered promiscuous mode [ 261.738665][T22164] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 261.755899][T22164] team0: Device macvtap1 is already an upper device of the team interface [ 261.765073][T22164] team0: left promiscuous mode [ 261.771833][T22164] team_slave_0: left promiscuous mode [ 261.777256][T22164] team_slave_1: left promiscuous mode [ 262.404822][T22231] loop1: detected capacity change from 0 to 512 [ 262.440986][T22231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.455341][T22231] ext4 filesystem being mounted at /1552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.484980][T22241] sctp: [Deprecated]: syz.2.8257 (pid 22241) Use of int in maxseg socket option. [ 262.484980][T22241] Use struct sctp_assoc_value instead [ 262.519366][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.563295][T22255] loop3: detected capacity change from 0 to 128 [ 262.581223][T22255] bio_check_eod: 8275 callbacks suppressed [ 262.581272][T22255] syz.3.8264: attempt to access beyond end of device [ 262.581272][T22255] loop3: rw=1, sector=145, nr_sectors = 65 limit=128 [ 262.606379][T22257] loop1: detected capacity change from 0 to 128 [ 262.638037][T22257] syz.1.8260: attempt to access beyond end of device [ 262.638037][T22257] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 263.328333][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8289'. [ 263.350757][T22315] sctp: [Deprecated]: syz.3.8290 (pid 22315) Use of int in max_burst socket option deprecated. [ 263.350757][T22315] Use struct sctp_assoc_value instead [ 263.369708][T22319] netlink: 'syz.4.8293': attribute type 11 has an invalid length. [ 263.454208][T22327] loop3: detected capacity change from 0 to 1024 [ 263.494366][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8300'. [ 263.515835][T22327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.530096][T22335] bridge_slave_1: left allmulticast mode [ 263.542238][T22335] bridge_slave_1: left promiscuous mode [ 263.553134][T22335] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.570564][T22335] bridge_slave_0: left allmulticast mode [ 263.576574][T22335] bridge_slave_0: left promiscuous mode [ 263.582571][T22335] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.619488][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.644330][T22335] team0: Port device bridge0 removed [ 263.735427][T22347] macvtap1: entered promiscuous mode [ 263.743331][T22347] team0: entered promiscuous mode [ 263.748635][T22347] team_slave_0: entered promiscuous mode [ 263.754508][T22347] team_slave_1: entered promiscuous mode [ 263.760490][T22347] vlan0: entered promiscuous mode [ 263.805699][T22354] sctp: [Deprecated]: syz.4.8308 (pid 22354) Use of int in max_burst socket option deprecated. [ 263.805699][T22354] Use struct sctp_assoc_value instead [ 263.823404][T22347] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 263.837259][T22347] team0: Device macvtap1 is already an upper device of the team interface [ 263.902193][T22347] team0: left promiscuous mode [ 263.908259][T22347] team_slave_0: left promiscuous mode [ 263.915577][T22347] team_slave_1: left promiscuous mode [ 263.921897][T22347] vlan0: left promiscuous mode [ 264.002689][T22377] bridge0: entered promiscuous mode [ 264.137851][T22390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8326'. [ 264.196091][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8328'. [ 264.215121][T22396] bridge_slave_1: left allmulticast mode [ 264.230181][T22396] bridge_slave_1: left promiscuous mode [ 264.245574][T22396] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.265923][T22396] bridge_slave_0: left allmulticast mode [ 264.269157][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 264.269174][ T28] audit: type=1326 audit(1772581732.990:31825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22405 comm="syz.2.8332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f295b5dc799 code=0x0 [ 264.275307][T22396] bridge_slave_0: left promiscuous mode [ 264.313326][T22396] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.550611][ T28] audit: type=1326 audit(1772581733.270:31826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22436 comm="syz.1.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4ddac799 code=0x7ffc0000 [ 264.574952][ T28] audit: type=1326 audit(1772581733.270:31827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22436 comm="syz.1.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f1d4ddac799 code=0x7ffc0000 [ 264.690253][ T28] audit: type=1326 audit(1772581733.410:31828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22436 comm="syz.1.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4dd4db19 code=0x7ffc0000 [ 264.714269][ T28] audit: type=1326 audit(1772581733.410:31829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22436 comm="syz.1.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4ddac799 code=0x7ffc0000 [ 264.739257][ T28] audit: type=1326 audit(1772581733.410:31830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22436 comm="syz.1.8347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4ddac799 code=0x7ffc0000 [ 264.810401][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'. [ 264.831823][T22452] netlink: 'syz.0.8353': attribute type 5 has an invalid length. [ 265.033988][T22474] netlink: 'syz.4.8365': attribute type 1 has an invalid length. [ 265.199159][T22491] loop1: detected capacity change from 0 to 256 [ 265.212054][T22491] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.284946][T22491] FAT-fs (loop1): Directory bread(block 64) failed [ 265.295133][T22491] FAT-fs (loop1): Directory bread(block 65) failed [ 265.334313][T22491] FAT-fs (loop1): Directory bread(block 66) failed [ 265.343112][T22491] FAT-fs (loop1): Directory bread(block 67) failed [ 265.365979][T22491] FAT-fs (loop1): Directory bread(block 68) failed [ 265.372627][T22491] FAT-fs (loop1): Directory bread(block 69) failed [ 265.379454][T22491] FAT-fs (loop1): Directory bread(block 70) failed [ 265.396804][T22491] FAT-fs (loop1): Directory bread(block 71) failed [ 265.418534][T22491] FAT-fs (loop1): Directory bread(block 72) failed [ 265.438141][T22491] FAT-fs (loop1): Directory bread(block 73) failed [ 265.572465][T22529] program syz.3.8387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.586161][T22531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8389'. [ 265.646255][T22540] program syz.3.8392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.716989][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8394'. [ 265.726529][T22547] bridge_slave_1: left allmulticast mode [ 265.732530][T22547] bridge_slave_1: left promiscuous mode [ 265.738437][T22547] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.753774][T22547] bridge_slave_0: left allmulticast mode [ 265.767724][T22547] bridge_slave_0: left promiscuous mode [ 265.775441][T22547] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.800824][T22551] sctp: [Deprecated]: syz.0.8408 (pid 22551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.800824][T22551] Use struct sctp_sack_info instead [ 265.833669][T22555] loop3: detected capacity change from 0 to 512 [ 265.844476][T22555] EXT4-fs error (device loop3): __ext4_iget:5378: inode #15: block 1803188595: comm syz.3.8400: invalid block [ 265.857629][T22555] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.857809][T22555] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8400: couldn't read orphan inode 15 (err -117) [ 265.866999][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 265.867017][ C1] EXT4-fs (loop3): initial error at time 1772581734: __ext4_iget:5378: inode 15: block 1803188595 [ 265.867055][ C1] EXT4-fs (loop3): last error at time 1772581734: __ext4_iget:5378: inode 15: block 1803188595 [ 265.910792][T22555] loop3: lost filesystem error report for type 5 error -117 [ 265.912404][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8412'. [ 265.925948][T22555] EXT4-fs (loop3): mounted filesystem 4d550000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.960529][ T3317] EXT4-fs (loop3): unmounting filesystem 4d550000-0000-0000-0000-000000000000. [ 266.025474][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8404'. [ 266.087536][T22584] sctp: [Deprecated]: syz.4.8410 (pid 22584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.087536][T22584] Use struct sctp_sack_info instead [ 266.167796][T22592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8416'. [ 266.182268][T22592] bridge_slave_1: left allmulticast mode [ 266.188398][T22592] bridge_slave_1: left promiscuous mode [ 266.194496][T22592] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.205932][T22592] bridge_slave_0: left allmulticast mode [ 266.212102][T22592] bridge_slave_0: left promiscuous mode [ 266.226260][T22592] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.412143][T22619] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 266.418756][T22619] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 266.606911][T22652] netem: change failed [ 266.766390][T22673] team_slave_0: entered promiscuous mode [ 266.772159][T22673] team_slave_1: entered promiscuous mode [ 266.795464][T22673] macvtap2: entered promiscuous mode [ 266.805252][T22673] team0: entered promiscuous mode [ 266.811572][T22673] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 266.819330][T22673] team0: Device macvtap2 is already an upper device of the team interface [ 266.828828][T22673] team0: left promiscuous mode [ 266.834035][T22673] team_slave_0: left promiscuous mode [ 266.839466][T22673] team_slave_1: left promiscuous mode [ 266.854742][T22676] bridge0: entered promiscuous mode [ 267.360693][T22713] program syz.3.8469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.735686][T22718] team_slave_0: entered promiscuous mode [ 267.741491][T22718] team_slave_1: entered promiscuous mode [ 267.747413][T22718] macvtap1: entered promiscuous mode [ 267.752727][T22718] team0: entered promiscuous mode [ 267.758325][T22718] vlan0: entered promiscuous mode [ 267.764560][T22718] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 267.772624][T22718] team0: Device macvtap1 is already an upper device of the team interface [ 267.781993][T22718] team0: left promiscuous mode [ 267.787075][T22718] vlan0: left promiscuous mode [ 267.792073][T22718] team_slave_0: left promiscuous mode [ 267.797548][T22718] team_slave_1: left promiscuous mode [ 267.973278][T22747] loop3: detected capacity change from 0 to 1024 [ 267.988723][T22747] EXT4-fs: inline encryption not supported [ 268.006505][T22747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.056756][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.088113][T22762] loop1: detected capacity change from 0 to 512 [ 268.114184][T22762] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 268.126321][T22762] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 268.148778][T22762] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.8488: bad orphan inode 4 [ 268.163475][T22762] loop1: lost filesystem error report for type 5 error -117 [ 268.165342][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 268.176530][T22762] EXT4-fs (loop1): 1 orphan inode deleted [ 268.179197][ C1] EXT4-fs (loop1): initial error at time 1772581736: ext4_orphan_get:1417 [ 268.179223][ C1] EXT4-fs (loop1): last error at time 1772581736: ext4_orphan_get:1417 [ 268.205823][T22762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.285463][T22780] loop3: detected capacity change from 0 to 1024 [ 268.296185][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.317308][T22780] EXT4-fs: Ignoring removed orlov option [ 268.344496][T22780] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 268.380454][T22780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.426626][T22780] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.8509: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 268.502362][T22797] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.8509: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 268.558619][T22803] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 269.242269][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.355996][T22818] tipc: Bearer : already 2 bearers with priority 10 [ 269.370354][T22818] tipc: Bearer : trying with adjusted priority [ 269.377985][T22818] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 269.405910][T22828] Set syz1 is full, maxelem 0 reached [ 270.151799][T22869] __nla_validate_parse: 4 callbacks suppressed [ 270.151844][T22869] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8537'. [ 270.175731][T22870] tipc: Enabling of bearer rejected, failed to enable media [ 270.246603][T22883] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 270.253138][T22883] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 270.311963][T22894] netem: change failed [ 270.331405][T22900] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 270.337901][T22900] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 270.443275][T22912] tipc: Enabling of bearer rejected, failed to enable media [ 270.595784][T22925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8564'. [ 271.067078][T22972] Invalid ELF header magic: != ELF [ 271.164681][T22982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8594'. [ 271.434388][T23004] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 271.533794][T23013] loop3: detected capacity change from 0 to 512 [ 271.540940][T23013] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 271.553588][T23013] EXT4-fs (loop3): 1 truncate cleaned up [ 271.560414][T23013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.618636][T23021] Invalid ELF header magic: != ELF [ 271.656809][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.785681][T23028] Invalid ELF header magic: != ELF [ 271.827023][T23036] xfrm0 speed is unknown, defaulting to 1000 [ 272.068717][T23065] Invalid ELF header magic: != ELF [ 272.152666][T23069] loop1: detected capacity change from 0 to 2048 [ 272.196930][T23069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.241073][T23068] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 272.258149][T23068] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 18 with error 28 [ 272.295754][T23068] EXT4-fs (loop1): This should not happen!! Data will be lost [ 272.295754][T23068] [ 272.305631][T23068] EXT4-fs (loop1): Total free blocks count 0 [ 272.311841][T23068] EXT4-fs (loop1): Free/Dirty block details [ 272.319425][T23068] EXT4-fs (loop1): free_blocks=4096 [ 272.324836][T23068] EXT4-fs (loop1): dirty_blocks=32 [ 272.330257][T23068] EXT4-fs (loop1): Block reservation details [ 272.336377][T23068] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 272.381277][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.510490][T23097] loop1: detected capacity change from 0 to 2048 [ 272.540739][T23097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.579829][ T28] audit: type=1400 audit(1772581741.300:31831): avc: denied { read } for pid=23095 comm="syz.1.8645" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 272.618484][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.715063][ T28] audit: type=1400 audit(1772581741.430:31832): avc: denied { accept } for pid=23110 comm="syz.4.8663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.791824][T23124] xfrm0 speed is unknown, defaulting to 1000 [ 272.816724][T23129] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8657'. [ 272.835433][T23129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8657'. [ 272.897952][T23132] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8671'. [ 273.058876][T23147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8666'. [ 273.146596][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8670'. [ 273.579034][T23191] netlink: 'syz.3.8688': attribute type 1 has an invalid length. [ 273.846502][ T28] audit: type=1400 audit(1772581742.570:31833): avc: denied { mount } for pid=23210 comm="syz.2.8698" name="/" dev="autofs" ino=64983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 273.858669][T23217] sg_write: data in/out 33622493/120 bytes for SCSI command 0x0-- guessing data in; [ 273.858669][T23217] program syz.1.8700 not setting count and/or reply_len properly [ 274.207721][T23242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8712'. [ 274.424327][T23268] xfrm0 speed is unknown, defaulting to 1000 [ 274.801138][T23305] loop3: detected capacity change from 0 to 512 [ 274.822830][T23305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.835494][T23305] ext4 filesystem being mounted at /1698/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.848603][T23305] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 97 vs 96 free clusters [ 274.862855][T23305] Quota error (device loop3): write_blk: dquota write failed [ 274.870270][T23305] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 274.879549][T23305] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 274.880691][T23314] netlink: 252 bytes leftover after parsing attributes in process `syz.1.8741'. [ 274.889450][T23305] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.8739: Failed to acquire dquot type 1 [ 274.921994][T23316] netlink: 'syz.0.8744': attribute type 1 has an invalid length. [ 274.932380][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.941905][T23314] netem: unknown loss type 5 [ 274.946761][T23314] netem: change failed [ 275.370808][ T28] audit: type=1400 audit(1772581744.090:31834): avc: denied { write } for pid=23344 comm="syz.3.8757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 275.401699][T23343] xfrm0 speed is unknown, defaulting to 1000 [ 275.483163][T23350] xfrm0 speed is unknown, defaulting to 1000 [ 275.596609][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8768'. [ 275.726927][T23372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8768'. [ 275.988361][T23400] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8779'. [ 276.019101][T23402] xfrm0 speed is unknown, defaulting to 1000 [ 276.040648][T23404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8783'. [ 276.058689][T23404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8783'. [ 276.166878][ T3400] kernel read not supported for file /vcs (pid: 3400 comm: kworker/0:3) [ 276.409121][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8795'. [ 276.419643][T23431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8795'. [ 276.729589][T23470] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.8812'. [ 276.771064][ T28] audit: type=1400 audit(1772581745.490:31835): avc: denied { setopt } for pid=23473 comm="syz.1.8813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.801463][ T28] audit: type=1400 audit(1772581745.520:31836): avc: denied { ioctl } for pid=23473 comm="syz.1.8813" path="socket:[65341]" dev="sockfs" ino=65341 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 277.111908][ T28] audit: type=1400 audit(1772581745.830:31837): avc: denied { ioctl } for pid=23517 comm="syz.2.8835" path="socket:[65394]" dev="sockfs" ino=65394 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 277.377802][T23539] loop3: detected capacity change from 0 to 128 [ 277.412737][T23539] syz.3.8842: attempt to access beyond end of device [ 277.412737][T23539] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 277.437879][T23539] syz.3.8842: attempt to access beyond end of device [ 277.437879][T23539] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 277.464196][T23539] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 277.476360][T23539] syz.3.8842: attempt to access beyond end of device [ 277.476360][T23539] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 277.493256][T23545] loop1: detected capacity change from 0 to 512 [ 277.511268][T23545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 277.538719][T23539] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 277.549606][T23545] System zones: 1-12 [ 277.553950][T23545] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.8845: corrupted in-inode xattr: e_value size too large [ 277.575398][T23539] syz.3.8842: attempt to access beyond end of device [ 277.575398][T23539] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 277.578414][T23545] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.591749][T23545] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8845: couldn't read orphan inode 15 (err -117) [ 277.600961][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 277.601005][ C1] EXT4-fs (loop1): initial error at time 1772581746: ext4_iget_extra_inode:5025: inode 15 [ 277.601055][ C1] EXT4-fs (loop1): last error at time 1772581746: ext4_iget_extra_inode:5025: inode 15 [ 277.639460][T23545] loop1: lost filesystem error report for type 5 error -117 [ 277.640179][T23539] syz.3.8842: attempt to access beyond end of device [ 277.640179][T23539] loop3: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 277.641363][T23545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.673483][T23539] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 277.681150][ T28] audit: type=1400 audit(1772581746.390:31838): avc: denied { rename } for pid=23544 comm="syz.1.8845" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 277.687590][T23539] syz.3.8842: attempt to access beyond end of device [ 277.687590][T23539] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 277.755736][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.770757][T23539] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 277.787409][T23539] syz.3.8842: attempt to access beyond end of device [ 277.787409][T23539] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 277.810826][T23539] syz.3.8842: attempt to access beyond end of device [ 277.810826][T23539] loop3: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 277.825629][T23539] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 277.836233][T23539] syz.3.8842: attempt to access beyond end of device [ 277.836233][T23539] loop3: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 277.854377][T23539] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 277.856782][T23561] loop1: detected capacity change from 0 to 512 [ 277.863391][T23539] syz.3.8842: attempt to access beyond end of device [ 277.863391][T23539] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 277.893045][T23561] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.8854: corrupted in-inode xattr: invalid ea_ino [ 277.906620][T23561] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.906813][T23561] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.8854: couldn't read orphan inode 15 (err -117) [ 277.907589][T23539] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 277.916006][T23561] loop1: lost filesystem error report for type 5 error -117 [ 277.927936][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 277.927959][ C1] EXT4-fs (loop1): initial error at time 1772581746: ext4_iget_extra_inode:5025: inode 15 [ 277.927995][ C1] EXT4-fs (loop1): last error at time 1772581746: ext4_iget_extra_inode:5025: inode 15 [ 277.930105][T23539] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 277.945834][T23561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.965858][T23539] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 278.001052][T23539] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 278.001715][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.285714][ T28] audit: type=1400 audit(1772581748.010:31839): avc: denied { bind } for pid=23641 comm="syz.2.8890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.331140][T23646] program syz.1.8892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.163057][T23752] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 282.735917][T23810] program syz.1.8966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.799567][T23817] loop3: detected capacity change from 0 to 512 [ 282.823970][T23817] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 282.848984][T23817] EXT4-fs (loop3): 1 truncate cleaned up [ 282.864466][T23817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.874903][ T28] audit: type=1400 audit(1772581751.580:31840): avc: denied { map } for pid=23821 comm="syz.1.8972" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 282.976806][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.380215][T23929] netlink: 'syz.1.9018': attribute type 10 has an invalid length. [ 284.405390][T23929] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9018'. [ 285.058565][T23957] loop1: detected capacity change from 0 to 512 [ 285.094334][T23957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.128095][T23957] ext4 filesystem being mounted at /1689/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.178678][ T28] audit: type=1400 audit(1772581753.900:31841): avc: denied { setattr } for pid=23956 comm="syz.1.9031" name=".log" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 285.217479][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.305115][T23978] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 285.338334][T23980] netlink: 'syz.2.9044': attribute type 10 has an invalid length. [ 285.368792][T23980] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9044'. [ 285.891321][T24015] netlink: 'syz.3.9058': attribute type 10 has an invalid length. [ 285.899435][T24015] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9058'. [ 285.934153][ T28] audit: type=1400 audit(1772581754.650:31842): avc: denied { write } for pid=24017 comm="syz.2.9059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.485949][T24094] loop3: detected capacity change from 0 to 512 [ 287.558435][T24094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.581990][T24094] ext4 filesystem being mounted at /1759/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.667704][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.816689][T24129] loop3: detected capacity change from 0 to 128 [ 288.373167][T24173] tun0: tun_chr_ioctl cmd 1074025672 [ 288.381020][T24173] tun0: ignored: set checksum enabled [ 288.655302][T24192] loop3: detected capacity change from 0 to 512 [ 288.681324][T24192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.722940][T24192] ext4 filesystem being mounted at /1773/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.810652][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.940207][T24221] xt_hashlimit: size too large, truncated to 1048576 [ 289.064844][T24232] loop3: detected capacity change from 0 to 512 [ 289.111122][T24232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.157434][T24232] ext4 filesystem being mounted at /1776/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.264169][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.527838][ T28] audit: type=1400 audit(1772581758.240:31843): avc: denied { accept } for pid=24261 comm="syz.0.9170" path="socket:[67357]" dev="sockfs" ino=67357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.187291][T24311] erspan0: entered promiscuous mode [ 290.560285][ T28] audit: type=1400 audit(1772581759.280:31844): avc: denied { bind } for pid=24348 comm="syz.4.9209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.465953][T24393] erspan0: entered promiscuous mode [ 291.988565][T24426] tipc: New replicast peer: 255.255.255.255 [ 291.995513][T24426] tipc: Enabled bearer , priority 10 [ 292.015294][T24426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9244'. [ 292.024342][T24426] tipc: Disabling bearer [ 292.074028][T24430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9246'. [ 292.412309][T24463] tipc: Enabling of bearer rejected, already enabled [ 292.420720][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9260'. [ 292.430085][T24463] tipc: Disabling bearer [ 292.683648][T24484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9271'. [ 293.093358][T24497] tipc: Enabling of bearer rejected, already enabled [ 293.101829][T24497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9275'. [ 293.122048][T24497] tipc: Disabling bearer [ 293.128259][T24503] loop1: detected capacity change from 0 to 512 [ 293.173407][T24503] EXT4-fs (loop1): 1 truncate cleaned up [ 293.192580][T24503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.298760][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.580061][T24528] loop1: detected capacity change from 0 to 1024 [ 293.605286][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 293.655633][T24534] tipc: New replicast peer: 255.255.255.255 [ 293.687692][T24534] tipc: Enabled bearer , priority 10 [ 293.694512][T24528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.726196][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9291'. [ 293.749107][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.758672][T24534] tipc: Disabling bearer [ 293.927785][ T3317] cgroup: fork rejected by pids controller in /syz3 [ 294.017067][T24549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9306'. [ 294.290153][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.370429][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.447470][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.483852][ T28] audit: type=1400 audit(1772581763.200:31845): avc: denied { mounton } for pid=24584 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 294.595746][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 294.626782][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.003692][T24584] xfrm0 speed is unknown, defaulting to 1000 [ 295.187964][ T1711] smc: removing ib device syz1 [ 295.587587][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.597540][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.607226][ T12] bond0 (unregistering): Released all slaves [ 295.614342][ T3400] xfrm0 speed is unknown, defaulting to 1000 [ 295.624824][ T3400] syz1: Port: 1 Link DOWN [ 295.705888][ T12] tipc: Left network mode [ 295.721605][T24584] chnl_net:caif_netlink_parms(): no params data found [ 295.747562][ T12] IPVS: stopping backup sync thread 12756 ... [ 295.801409][ T12] hsr_slave_0: left promiscuous mode [ 295.815796][ T12] hsr_slave_1: left promiscuous mode [ 295.821607][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.835263][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.842892][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.861213][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.881373][ T12] veth1_macvtap: left promiscuous mode [ 295.891155][ T12] veth0_macvtap: left promiscuous mode [ 295.905311][ T12] veth1_vlan: left promiscuous mode [ 295.910685][ T12] veth0_vlan: left promiscuous mode [ 295.993857][ T12] vlan0 (unregistering): left allmulticast mode [ 296.000415][ T12] veth0_vlan (unregistering): left allmulticast mode [ 296.017136][ T12] team0 (unregistering): Port device vlan0 removed [ 296.052228][ T12] team_slave_1 (unregistering): left allmulticast mode [ 296.076312][ T12] team0 (unregistering): Port device team_slave_1 removed [ 296.096087][ T12] team_slave_0 (unregistering): left allmulticast mode [ 296.116329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 296.218858][T24584] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.235476][T24584] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.245595][T24584] bridge_slave_0: entered allmulticast mode [ 296.252286][T24584] bridge_slave_0: entered promiscuous mode [ 296.279455][T24584] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.295270][T24584] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.315420][T24584] bridge_slave_1: entered allmulticast mode [ 296.321934][T24584] bridge_slave_1: entered promiscuous mode [ 296.354612][T24584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.368057][T24584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.399739][T24584] team0: Port device team_slave_0 added [ 296.407839][T24584] team0: Port device team_slave_1 added [ 296.431117][T24584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.438198][T24584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.470284][T24584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.491855][T24584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.500948][T24584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.529745][T24584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.572343][ T12] IPVS: stop unused estimator thread 0... [ 296.593447][T24584] hsr_slave_0: entered promiscuous mode [ 296.602468][T24584] hsr_slave_1: entered promiscuous mode [ 296.608581][T24584] debugfs: 'hsr0' already exists in 'hsr' [ 296.614324][T24584] Cannot create hsr debugfs directory [ 296.887357][T24584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.907050][T24584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.926049][T24584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.935149][T24584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.015812][T24584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.040726][T24584] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.056795][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.063940][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.080167][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.087390][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.205494][T24584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.341245][T24584] veth0_vlan: entered promiscuous mode [ 297.349663][T24584] veth1_vlan: entered promiscuous mode [ 297.373834][T24584] veth0_macvtap: entered promiscuous mode [ 297.384941][T24584] veth1_macvtap: entered promiscuous mode [ 297.400099][T24584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.409156][T24584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.426798][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.443593][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.456240][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.476840][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.506368][ T28] audit: type=1400 audit(1772581766.230:31846): avc: denied { mounton } for pid=24584 comm="syz-executor" path="/root/syzkaller.Kxar3i/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 297.533112][ T28] audit: type=1400 audit(1772581766.230:31847): avc: denied { mounton } for pid=24584 comm="syz-executor" path="/root/syzkaller.Kxar3i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 297.561674][ T28] audit: type=1400 audit(1772581766.230:31848): avc: denied { mounton } for pid=24584 comm="syz-executor" path="/root/syzkaller.Kxar3i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 297.592099][ T28] audit: type=1400 audit(1772581766.260:31849): avc: denied { mounton } for pid=24584 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 297.594086][T24736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9310'. [ 297.617697][ T28] audit: type=1400 audit(1772581766.260:31850): avc: denied { mount } for pid=24584 comm="syz-executor" name="/" dev="gadgetfs" ino=3692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 298.479176][T24817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9356'. [ 298.509650][T24817] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9356'. [ 300.453013][T24951] tmpfs: Bad value for 'mpol' [ 300.499344][T24957] loop1: detected capacity change from 0 to 512 [ 300.537793][T24957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.574087][T24957] ext4 filesystem being mounted at /1756/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.602604][T24957] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 300.675859][T24957] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 300.710608][T24957] EXT4-fs (loop1): This should not happen!! Data will be lost [ 300.710608][T24957] [ 300.746553][T24957] EXT4-fs (loop1): Total free blocks count 0 [ 300.779874][T24957] EXT4-fs (loop1): Free/Dirty block details [ 300.794638][T24957] EXT4-fs (loop1): free_blocks=65280 [ 300.813024][T24957] EXT4-fs (loop1): dirty_blocks=33 [ 300.835460][T24957] EXT4-fs (loop1): Block reservation details [ 300.845689][T24957] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 300.931517][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.041874][T24989] tmpfs: Bad value for 'mpol' [ 301.267766][T25001] netlink: 'syz.2.9437': attribute type 13 has an invalid length. [ 301.289095][T25001] tipc: Resetting bearer [ 301.369456][T25007] loop3: detected capacity change from 0 to 512 [ 301.399476][T25007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.412293][T25007] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.440485][T25007] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 301.455674][T25007] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 301.469849][T25007] EXT4-fs (loop3): This should not happen!! Data will be lost [ 301.469849][T25007] [ 301.480169][T25007] EXT4-fs (loop3): Total free blocks count 0 [ 301.486357][T25007] EXT4-fs (loop3): Free/Dirty block details [ 301.492664][T25007] EXT4-fs (loop3): free_blocks=65280 [ 301.498269][T25007] EXT4-fs (loop3): dirty_blocks=33 [ 301.500788][T25001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.503703][T25007] EXT4-fs (loop3): Block reservation details [ 301.517339][T25007] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 301.519436][T25001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.563213][T25001] tipc: Resetting bearer [ 301.613160][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.627629][T24584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.629063][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.646049][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.664875][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.804402][T25018] tmpfs: Bad value for 'mpol' [ 302.382696][T25054] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9457'. [ 302.550392][ T28] audit: type=1400 audit(1772582027.203:31851): avc: denied { remount } for pid=25060 comm="syz.1.9460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 303.306482][T25085] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9469'. [ 303.427291][T25098] loop1: detected capacity change from 0 to 256 [ 303.474723][T25098] FAT-fs (loop1): Directory bread(block 64) failed [ 303.481443][T25098] FAT-fs (loop1): Directory bread(block 65) failed [ 303.490174][T25098] FAT-fs (loop1): Directory bread(block 66) failed [ 303.497048][T25098] FAT-fs (loop1): Directory bread(block 67) failed [ 303.508348][T25098] FAT-fs (loop1): Directory bread(block 68) failed [ 303.514977][T25098] FAT-fs (loop1): Directory bread(block 69) failed [ 303.521908][T25098] FAT-fs (loop1): Directory bread(block 70) failed [ 303.538193][T25098] FAT-fs (loop1): Directory bread(block 71) failed [ 303.561124][T25098] FAT-fs (loop1): Directory bread(block 72) failed [ 303.599155][T25098] FAT-fs (loop1): Directory bread(block 73) failed [ 303.606103][T25111] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9480'. [ 303.748062][T25118] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9483'. [ 303.808700][T25124] bio_check_eod: 33 callbacks suppressed [ 303.808721][T25124] syz.1.9474: attempt to access beyond end of device [ 303.808721][T25124] loop1: rw=2049, sector=1192, nr_sectors = 128 limit=256 [ 304.190164][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.190164][ T30] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 304.204204][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.204204][ T30] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 304.220291][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.220291][ T30] loop1: rw=1, sector=1960, nr_sectors = 2120 limit=256 [ 304.240888][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.240888][ T30] loop1: rw=1, sector=4080, nr_sectors = 4960 limit=256 [ 304.259758][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.259758][ T30] loop1: rw=1, sector=9040, nr_sectors = 2096 limit=256 [ 304.276602][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.276602][ T30] loop1: rw=1, sector=11136, nr_sectors = 2048 limit=256 [ 304.294555][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.294555][ T30] loop1: rw=1, sector=13184, nr_sectors = 2048 limit=256 [ 304.311488][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.311488][ T30] loop1: rw=1, sector=15232, nr_sectors = 2048 limit=256 [ 304.328802][ T30] kworker/u8:1: attempt to access beyond end of device [ 304.328802][ T30] loop1: rw=1, sector=17280, nr_sectors = 2048 limit=256 [ 305.130541][T25168] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9505'. [ 305.521938][T25188] syz.3.9503 (25188): attempted to duplicate a private mapping with mremap. This is not supported. [ 305.628584][T25170] __vm_enough_memory: pid: 25170, comm: syz.3.9503, bytes: 11727534477312 not enough memory for the allocation [ 305.911683][T25210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9521'. [ 306.101981][T25222] loop3: detected capacity change from 0 to 256 [ 306.162750][T25222] FAT-fs (loop3): Directory bread(block 64) failed [ 306.188124][T25222] FAT-fs (loop3): Directory bread(block 65) failed [ 306.206036][T25222] FAT-fs (loop3): Directory bread(block 66) failed [ 306.221240][T25222] FAT-fs (loop3): Directory bread(block 67) failed [ 306.245129][T25222] FAT-fs (loop3): Directory bread(block 68) failed [ 306.263638][T25235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9536'. [ 306.267703][T25222] FAT-fs (loop3): Directory bread(block 69) failed [ 306.281041][T25222] FAT-fs (loop3): Directory bread(block 70) failed [ 306.288038][T25222] FAT-fs (loop3): Directory bread(block 71) failed [ 306.294899][T25222] FAT-fs (loop3): Directory bread(block 72) failed [ 306.301601][T25222] FAT-fs (loop3): Directory bread(block 73) failed [ 306.847755][T25233] __vm_enough_memory: pid: 25233, comm: syz.2.9533, bytes: 11728044408832 not enough memory for the allocation [ 306.917799][T25267] loop3: detected capacity change from 0 to 256 [ 307.025023][T25275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9548'. [ 307.125401][T25286] team0: Device gtp1 is of different type [ 307.317917][T25274] __vm_enough_memory: pid: 25274, comm: syz.0.9560, bytes: 11727700869120 not enough memory for the allocation [ 307.543901][T25296] loop1: detected capacity change from 0 to 256 [ 308.826260][T25322] __vm_enough_memory: pid: 25322, comm: syz.1.9570, bytes: 11727083061248 not enough memory for the allocation [ 311.246984][T25340] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9580'. [ 311.448778][T25363] loop1: detected capacity change from 0 to 512 [ 311.470188][T25363] EXT4-fs: Ignoring removed bh option [ 311.485918][T25363] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 311.510224][T25363] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.9590: corrupted in-inode xattr: e_value size too large [ 311.537752][T25363] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.537920][T25363] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9590: couldn't read orphan inode 15 (err -117) [ 311.547229][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 311.547253][ C0] EXT4-fs (loop1): initial error at time 1772582036: ext4_iget_extra_inode:5025: inode 15 [ 311.547300][ C0] EXT4-fs (loop1): last error at time 1772582036: ext4_iget_extra_inode:5025: inode 15 [ 311.589150][T25363] loop1: lost filesystem error report for type 5 error -117 [ 311.589954][T25363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.622403][ T28] audit: type=1400 audit(1772582036.343:31852): avc: denied { unlink } for pid=25362 comm="syz.1.9590" name=E91F7189591E9233614B dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 311.907356][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.868942][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.891991][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.162782][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.183076][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.146614][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.157222][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.708318][T25489] chnl_net:caif_netlink_parms(): no params data found [ 316.028543][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.039199][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.077366][T25489] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.084656][T25489] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.092246][T25489] bridge_slave_0: entered allmulticast mode [ 316.098826][T25489] bridge_slave_0: entered promiscuous mode [ 316.105535][T25489] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.112697][T25489] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.119918][T25489] bridge_slave_1: entered allmulticast mode [ 316.126422][T25489] bridge_slave_1: entered promiscuous mode [ 316.144089][T25489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.159977][T25489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.180343][T25489] team0: Port device team_slave_0 added [ 316.187225][T25489] team0: Port device team_slave_1 added [ 316.207506][T25489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.214558][T25489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.240890][T25489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.254578][T25489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.261708][T25489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.288499][T25489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.437260][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.447338][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.456938][ T36] bond0 (unregistering): Released all slaves [ 316.466272][T25489] hsr_slave_0: entered promiscuous mode [ 316.472223][T25489] hsr_slave_1: entered promiscuous mode [ 316.478173][T25489] debugfs: 'hsr0' already exists in 'hsr' [ 316.483903][T25489] Cannot create hsr debugfs directory [ 316.494609][ T36] tipc: Left network mode [ 316.501013][ T36] IPVS: stopping master sync thread 6666 ... [ 316.517547][ T36] hsr_slave_0: left promiscuous mode [ 316.523301][ T36] hsr_slave_1: left promiscuous mode [ 316.533169][ T36] veth1_macvtap: left promiscuous mode [ 316.538982][ T36] veth0_macvtap: left promiscuous mode [ 316.544607][ T36] veth1_vlan: left promiscuous mode [ 316.550342][ T36] veth0_vlan: left promiscuous mode [ 316.633772][ T36] team0 (unregistering): Port device team_slave_1 removed [ 316.643933][ T36] team0 (unregistering): Port device team_slave_0 removed [ 316.725995][T25489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 316.736842][T25489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 316.750210][T25489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 316.760903][T25489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 316.814195][T25489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.829284][T25489] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.843035][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.850272][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.858819][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.865916][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.948919][T25489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.085830][T25489] veth0_vlan: entered promiscuous mode [ 317.093778][T25489] veth1_vlan: entered promiscuous mode [ 317.111961][T25489] veth0_macvtap: entered promiscuous mode [ 317.119495][T25489] veth1_macvtap: entered promiscuous mode [ 317.132385][T25489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.143554][T25489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.155148][ T121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.164520][ T121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.174360][ T121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.183769][ T121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.259952][T25612] pimreg0: tun_chr_ioctl cmd 99999999 [ 317.412526][T25624] loop1: detected capacity change from 0 to 2048 [ 317.449696][ T28] audit: type=1326 audit(1772582042.163:31853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 317.473794][ T28] audit: type=1326 audit(1772582042.163:31854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 317.509574][T25624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.522188][ T28] audit: type=1326 audit(1772582042.173:31855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 317.550512][ T28] audit: type=1326 audit(1772582042.173:31856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 317.574859][ T28] audit: type=1326 audit(1772582042.173:31857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 317.600660][ T28] audit: type=1326 audit(1772582042.223:31858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 317.625637][ T28] audit: type=1326 audit(1772582042.223:31859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f295b5dc502 code=0x7ffc0000 [ 317.649607][ T28] audit: type=1326 audit(1772582042.223:31860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f295b5dc597 code=0x7ffc0000 [ 317.677520][ T28] audit: type=1326 audit(1772582042.223:31861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f295b599491 code=0x7ffc0000 [ 317.701775][ T28] audit: type=1326 audit(1772582042.223:31862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25627 comm="syz.2.9661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f295b5dd589 code=0x7ffc0000 [ 317.747673][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.799723][T25650] loop3: detected capacity change from 0 to 512 [ 317.839207][T25657] loop1: detected capacity change from 0 to 1024 [ 317.853064][T25657] EXT4-fs: Ignoring removed orlov option [ 317.853941][T25653] loop5: detected capacity change from 0 to 1024 [ 317.867215][T25650] EXT4-fs: inline encryption not supported [ 317.873163][T25650] EXT4-fs: Ignoring removed i_version option [ 317.907525][T25653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 317.910605][T25657] EXT4-fs: Ignoring removed nobh option [ 317.924387][T25653] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.973581][T25653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 318.003030][T25657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.025795][T25650] EXT4-fs (loop3): 1 orphan inode deleted [ 318.032068][T25650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.076704][T24584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.098319][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.293213][T25705] loop1: detected capacity change from 0 to 512 [ 318.322515][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.9697: iget: bad extra_isize 90 (inode size 256) [ 318.342651][T25705] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 318.342935][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9697: error while reading EA inode 11 err=-117 [ 318.352138][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 318.352162][ C0] EXT4-fs (loop1): initial error at time 1772582043: ext4_xattr_inode_iget:441: inode 11 [ 318.352200][ C0] EXT4-fs (loop1): last error at time 1772582043: ext4_xattr_inode_iget:441: inode 11 [ 318.395285][T25705] loop1: lost filesystem error report for type 5 error -117 [ 318.395574][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.9697: iget: bad extra_isize 90 (inode size 256) [ 318.435247][T25705] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 318.442090][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9697: error while reading EA inode 11 err=-117 [ 318.486175][T25705] loop1: lost filesystem error report for type 5 error -117 [ 318.486377][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9697: iget: bad extra_isize 90 (inode size 256) [ 318.510093][T25705] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 318.510310][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9697: error while reading EA inode 18 err=-117 [ 318.533197][T25725] macsec0: entered allmulticast mode [ 318.542158][T25705] loop1: lost filesystem error report for type 5 error -117 [ 318.542394][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9697: iget: bad extra_isize 90 (inode size 256) [ 318.548387][T25725] veth1_macvtap: entered allmulticast mode [ 318.550342][T25705] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 318.583701][T25705] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9697: error while reading EA inode 18 err=-117 [ 318.685303][T25705] loop1: lost filesystem error report for type 5 error -117 [ 318.688328][T25705] EXT4-fs (loop1): 1 orphan inode deleted [ 318.704219][T25705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.933668][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.960508][T25741] program syz.1.9712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.999764][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9714'. [ 319.103735][T25757] loop3: detected capacity change from 0 to 2048 [ 319.151780][T25757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.164974][T25757] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.249341][T24584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.426333][T25797] loop1: detected capacity change from 0 to 2048 [ 319.450143][T25797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.469183][T25797] ext4 filesystem being mounted at /1821/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.494430][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.514986][T25802] loop5: detected capacity change from 0 to 2048 [ 319.561834][T25802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.580568][T25802] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.609428][T25489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.671377][T25817] program syz.3.9743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.788605][T25833] macsec0: entered allmulticast mode [ 319.794496][T25833] veth1_macvtap: entered allmulticast mode [ 319.849460][T25839] loop1: detected capacity change from 0 to 512 [ 319.880178][T25839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.902995][T25839] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 319.915938][T25839] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 319.939553][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.061533][T25851] loop5: detected capacity change from 0 to 512 [ 320.121750][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.9769: iget: bad extra_isize 90 (inode size 256) [ 320.178755][T25851] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 320.179785][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9769: error while reading EA inode 11 err=-117 [ 320.188999][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 320.189020][ C0] EXT4-fs (loop5): initial error at time 1772582044: ext4_xattr_inode_iget:441: inode 11 [ 320.189060][ C0] EXT4-fs (loop5): last error at time 1772582044: ext4_xattr_inode_iget:441: inode 11 [ 320.252661][T25851] loop5: lost filesystem error report for type 5 error -117 [ 320.252906][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.9769: iget: bad extra_isize 90 (inode size 256) [ 320.300334][T25851] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 320.300591][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9769: error while reading EA inode 11 err=-117 [ 320.323604][T25851] loop5: lost filesystem error report for type 5 error -117 [ 320.324832][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.9769: iget: bad extra_isize 90 (inode size 256) [ 320.346287][T25851] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 320.346539][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9769: error while reading EA inode 18 err=-117 [ 320.371044][T25851] loop5: lost filesystem error report for type 5 error -117 [ 320.371268][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.9769: iget: bad extra_isize 90 (inode size 256) [ 320.392735][T25851] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 320.392986][T25851] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9769: error while reading EA inode 18 err=-117 [ 320.416747][T25851] loop5: lost filesystem error report for type 5 error -117 [ 320.417038][T25851] EXT4-fs (loop5): 1 orphan inode deleted [ 320.430900][T25851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.538271][T25489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.594510][T25884] option changes via remount are deprecated (pid=25883 comm=syz.5.9785) [ 320.936614][T25900] veth1_to_bond: entered allmulticast mode [ 320.955776][T25899] veth1_to_bond: left allmulticast mode [ 321.231765][T25932] veth1_to_bond: entered allmulticast mode [ 321.238212][T25931] veth1_to_bond: left allmulticast mode [ 321.326810][T25939] netlink: 'syz.3.9801': attribute type 3 has an invalid length. [ 321.340736][T25939] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.9801'. [ 321.532575][T25958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.556826][T25964] macvlan0: entered promiscuous mode [ 321.562766][T25964] veth0_to_hsr: entered promiscuous mode [ 321.582376][T25964] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 321.601086][T25964] hsr1: Slave B (veth0_to_hsr) is not up; please bring it up to get a fully working HSR network [ 321.611880][T25964] hsr1: entered promiscuous mode [ 321.616928][T25964] hsr1: entered allmulticast mode [ 321.622126][T25964] macvlan0: entered allmulticast mode [ 321.627603][T25964] veth0_to_hsr: entered allmulticast mode [ 321.660481][T24584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.671056][T25971] netlink: 'syz.4.9815': attribute type 3 has an invalid length. [ 321.681084][T25971] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.9815'. [ 322.153265][T26002] netlink: 'syz.5.9829': attribute type 3 has an invalid length. [ 322.161113][T26002] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.9829'. [ 322.385599][T26014] random: crng reseeded on system resumption [ 322.512974][T26023] macvlan0: entered promiscuous mode [ 322.519423][T26023] veth0_to_hsr: entered promiscuous mode [ 322.525782][T26023] debugfs: 'hsr1' already exists in 'hsr' [ 322.554333][T26023] Cannot create hsr debugfs directory [ 322.560857][T26023] hsr1: entered promiscuous mode [ 322.567442][T26023] hsr1: entered allmulticast mode [ 322.577558][T26023] macvlan0: entered allmulticast mode [ 322.583619][T26032] set_capacity_and_notify: 1 callbacks suppressed [ 322.583645][T26032] loop1: detected capacity change from 0 to 1024 [ 322.597174][T26023] veth1_vlan: entered allmulticast mode [ 322.603233][T26023] veth0_to_hsr: entered allmulticast mode [ 322.638274][T26032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.705613][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.920473][T26076] macvlan0: entered promiscuous mode [ 322.927556][T26076] veth0_to_hsr: entered promiscuous mode [ 322.933715][T26076] debugfs: 'hsr1' already exists in 'hsr' [ 322.939891][T26076] Cannot create hsr debugfs directory [ 322.945859][T26076] hsr1: entered promiscuous mode [ 322.950884][T26076] hsr1: entered allmulticast mode [ 322.956262][T26076] macvlan0: entered allmulticast mode [ 322.970337][T26076] veth0_to_hsr: entered allmulticast mode [ 322.978060][T26079] netlink: 328 bytes leftover after parsing attributes in process `syz.5.9862'. [ 323.007094][T26081] random: crng reseeded on system resumption [ 323.418085][T26106] macvlan0: entered promiscuous mode [ 323.436182][T26106] veth0_to_hsr: entered promiscuous mode [ 323.450765][T26106] debugfs: 'hsr1' already exists in 'hsr' [ 323.456889][T26106] Cannot create hsr debugfs directory [ 323.462728][T26106] hsr1: entered promiscuous mode [ 323.468235][T26106] hsr1: entered allmulticast mode [ 323.473480][T26106] macvlan0: entered allmulticast mode [ 323.479541][T26106] veth1_vlan: entered allmulticast mode [ 323.485390][T26106] veth0_to_hsr: entered allmulticast mode [ 323.588302][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 323.588318][ T28] audit: type=1400 audit(1772582048.313:31880): avc: denied { watch watch_reads } for pid=26120 comm="syz.3.9880" path="/proc/233" dev="proc" ino=73235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 323.762859][T26142] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9893'. [ 324.519664][T26193] netlink: 328 bytes leftover after parsing attributes in process `syz.3.9915'. [ 324.620383][ T1711] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.683376][ T1711] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.788722][ T1711] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.866308][ T1711] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.971035][ T1711] bridge_slave_1: left allmulticast mode [ 324.984446][ T1711] bridge_slave_1: left promiscuous mode [ 324.996773][ T1711] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.015415][ T1711] bridge_slave_0: left allmulticast mode [ 325.021129][ T1711] bridge_slave_0: left promiscuous mode [ 325.035498][ T1711] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.148322][ T1711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.166488][ T1711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.185891][ T1711] bond0 (unregistering): Released all slaves [ 325.245305][ T1711] macvlan0: left promiscuous mode [ 325.258684][ T1711] veth0_to_hsr: left promiscuous mode [ 325.267139][ T1711] hsr_slave_0: left promiscuous mode [ 325.277359][ T1711] hsr_slave_1: left promiscuous mode [ 325.284942][ T1711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.333193][ T1711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.363844][ T1711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.381778][ T1711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.403444][ T1711] veth1_macvtap: left promiscuous mode [ 325.410007][ T1711] veth0_macvtap: left promiscuous mode [ 325.416092][ T1711] veth1_vlan: left allmulticast mode [ 325.421418][ T1711] veth1_vlan: left promiscuous mode [ 325.426797][ T1711] veth0_vlan: left promiscuous mode [ 325.530648][ T1711] team0 (unregistering): Port device team_slave_1 removed [ 325.540801][ T1711] team0 (unregistering): Port device team_slave_0 removed [ 325.688588][T26212] chnl_net:caif_netlink_parms(): no params data found [ 325.760809][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9943'. [ 325.766849][T26212] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.788868][T26212] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.798572][T26212] bridge_slave_0: entered allmulticast mode [ 325.806105][T26212] bridge_slave_0: entered promiscuous mode [ 325.813146][T26212] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.820594][T26212] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.828247][T26212] bridge_slave_1: entered allmulticast mode [ 325.835011][T26212] bridge_slave_1: entered promiscuous mode [ 325.907681][T26212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.926876][T26212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.963695][T26212] team0: Port device team_slave_0 added [ 325.979241][T26314] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.000255][T26212] team0: Port device team_slave_1 added [ 326.037130][T26226] chnl_net:caif_netlink_parms(): no params data found [ 326.090082][T26212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.110439][T26212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.137086][T26212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.150032][T26212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.166594][T26212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.193628][T26212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.246020][T26343] xt_hashlimit: size too large, truncated to 1048576 [ 326.270209][ T1711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.361179][ T1711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.416015][T26212] hsr_slave_0: entered promiscuous mode [ 326.422211][T26212] hsr_slave_1: entered promiscuous mode [ 326.429036][T26212] debugfs: 'hsr0' already exists in 'hsr' [ 326.434783][T26212] Cannot create hsr debugfs directory [ 326.454084][T26226] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.461775][T26226] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.469687][T26226] bridge_slave_0: entered allmulticast mode [ 326.476388][T26226] bridge_slave_0: entered promiscuous mode [ 326.493793][T26226] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.503337][T26226] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.510742][T26226] bridge_slave_1: entered allmulticast mode [ 326.518776][T26226] bridge_slave_1: entered promiscuous mode [ 326.527993][ T1711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.597771][ T1711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.636349][T26226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.656110][T26226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.739693][T26226] team0: Port device team_slave_0 added [ 326.791355][T26304] chnl_net:caif_netlink_parms(): no params data found [ 326.804100][T26226] team0: Port device team_slave_1 added [ 326.848496][T26226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.858212][T26226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.912583][T26226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.925140][T26226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.932207][T26226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.960523][T26226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.035217][ T1711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.050253][T26226] hsr_slave_0: entered promiscuous mode [ 327.057957][T26226] hsr_slave_1: entered promiscuous mode [ 327.064086][T26226] debugfs: 'hsr0' already exists in 'hsr' [ 327.069987][T26226] Cannot create hsr debugfs directory [ 327.115099][ T1711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.137369][T26304] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.144764][T26304] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.152394][T26304] bridge_slave_0: entered allmulticast mode [ 327.158924][T26304] bridge_slave_0: entered promiscuous mode [ 327.178594][T26304] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.186598][T26304] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.193852][T26304] bridge_slave_1: entered allmulticast mode [ 327.200396][T26304] bridge_slave_1: entered promiscuous mode [ 327.218816][ T1711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.248821][T26304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.268959][ T1711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.281819][T26304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.300980][T26212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.325263][T26212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.337189][T26304] team0: Port device team_slave_0 added [ 327.346192][T26212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.355119][T26212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.367401][T26304] team0: Port device team_slave_1 added [ 327.403466][T26304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.410525][T26304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.437533][T26304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.449454][T26304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.456948][T26304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.483089][T26304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.519385][ T1711] bridge_slave_1: left allmulticast mode [ 327.525112][ T1711] bridge_slave_1: left promiscuous mode [ 327.531118][ T1711] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.539095][ T1711] bridge_slave_0: left allmulticast mode [ 327.544909][ T1711] bridge_slave_0: left promiscuous mode [ 327.551010][ T1711] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.625362][ T1711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.635739][ T1711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.645061][ T1711] bond0 (unregistering): Released all slaves [ 327.652471][ T1711] bond1 (unregistering): Released all slaves [ 327.660970][ T1711] bond2 (unregistering): Released all slaves [ 327.727429][ T1711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.737338][ T1711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.747022][ T1711] bond0 (unregistering): Released all slaves [ 327.773751][T26304] hsr_slave_0: entered promiscuous mode [ 327.781301][T26304] hsr_slave_1: entered promiscuous mode [ 327.787916][T26304] debugfs: 'hsr0' already exists in 'hsr' [ 327.793800][T26304] Cannot create hsr debugfs directory [ 327.816752][ T1711] IPVS: stopping backup sync thread 6301 ... [ 327.868930][ T1711] macvlan0: left promiscuous mode [ 327.876514][ T1711] veth0_to_hsr: left promiscuous mode [ 327.888817][ T1711] hsr_slave_0: left promiscuous mode [ 327.894555][ T1711] hsr_slave_1: left promiscuous mode [ 327.900600][ T1711] macvlan0: left promiscuous mode [ 327.906469][ T1711] veth0_to_hsr: left promiscuous mode [ 327.913584][ T1711] hsr_slave_0: left promiscuous mode [ 327.919623][ T1711] hsr_slave_1: left promiscuous mode [ 327.927733][ T1711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.935151][ T1711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.942730][ T1711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.950179][ T1711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.967085][ T1711] veth1_macvtap: left allmulticast mode [ 327.972668][ T1711] veth1_macvtap: left promiscuous mode [ 327.978404][ T1711] veth0_macvtap: left promiscuous mode [ 327.983974][ T1711] veth1_vlan: left allmulticast mode [ 327.989905][ T1711] veth1_vlan: left promiscuous mode [ 327.995130][ T1711] veth0_vlan: left promiscuous mode [ 328.000938][ T1711] veth1_macvtap: left allmulticast mode [ 328.006557][ T1711] veth1_macvtap: left promiscuous mode [ 328.012167][ T1711] veth0_macvtap: left promiscuous mode [ 328.017877][ T1711] veth1_vlan: left allmulticast mode [ 328.023237][ T1711] veth1_vlan: left promiscuous mode [ 328.028536][ T1711] veth0_vlan: left promiscuous mode [ 328.097444][ T1711] macsec0 (unregistering): left allmulticast mode [ 328.127947][ T1711] team0 (unregistering): Port device team_slave_1 removed [ 328.137862][ T1711] team0 (unregistering): Port device team_slave_0 removed [ 328.168276][ T1711] macsec0 (unregistering): left allmulticast mode [ 328.199393][ T1711] team0 (unregistering): Port device team_slave_1 removed [ 328.209308][ T1711] team0 (unregistering): Port device team_slave_0 removed [ 328.345683][T26212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.365038][T26212] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.390459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.397585][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.423985][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.431171][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.434510][T26489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9981'. [ 328.529900][T26503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26503 comm=syz.4.9982 [ 328.590530][T26212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.782304][T26212] veth0_vlan: entered promiscuous mode [ 328.802690][T26212] veth1_vlan: entered promiscuous mode [ 328.831609][T26304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.852865][T26212] veth0_macvtap: entered promiscuous mode [ 328.861141][T26304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.873799][T26304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.884191][T26212] veth1_macvtap: entered promiscuous mode [ 328.892225][T26304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.903290][T26226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.913472][T26226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.923019][T26226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.938162][ T1711] IPVS: stop unused estimator thread 0... [ 328.944162][T26226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.961558][T26212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.990739][T26212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.023880][ T121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.035912][ T121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.050680][ T121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.061418][ T121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.096560][T26304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.114270][T26304] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.137856][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.145043][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.158948][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.166107][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.230977][T26226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.260571][T26226] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.296498][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.303644][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.339382][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.346633][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.347512][T26617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26617 comm=syz.5.9996 [ 329.384189][T26226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.403839][T26226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.430192][T26304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.535154][T26226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.656572][T26304] veth0_vlan: entered promiscuous mode [ 329.670236][T26304] veth1_vlan: entered promiscuous mode [ 329.715788][T26304] veth0_macvtap: entered promiscuous mode [ 329.723793][T26304] veth1_macvtap: entered promiscuous mode [ 329.742565][T26670] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10004'. [ 329.756202][T26670] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 329.787037][T26304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.812225][T26304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.841743][T26226] veth0_vlan: entered promiscuous mode [ 329.858009][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.887177][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.919000][T26226] veth1_vlan: entered promiscuous mode [ 329.934922][ T1711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.951113][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10009'. [ 330.009460][ T1711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.022148][ T28] audit: type=1400 audit(1772582054.743:31881): avc: denied { map } for pid=26701 comm="syz.5.10013" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 330.052743][T26226] veth0_macvtap: entered promiscuous mode [ 330.072286][T26226] veth1_macvtap: entered promiscuous mode [ 330.095561][ T28] audit: type=1400 audit(1772582054.743:31882): avc: denied { execute } for pid=26701 comm="syz.5.10013" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 330.140638][T26226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.150527][T26226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.216071][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.253374][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.285792][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.295146][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.416460][T26749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10032'. [ 330.418974][T26747] loop1: detected capacity change from 0 to 512 [ 330.459740][T26747] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10031: invalid indirect mapped block 256 (level 2) [ 330.490361][T26747] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 330.495229][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 330.511177][ C0] EXT4-fs (loop1): initial error at time 1772582055: ext4_free_branches:1023: inode 11 [ 330.520985][ C0] EXT4-fs (loop1): last error at time 1772582055: ext4_free_branches:1023: inode 11 [ 330.525785][T26747] EXT4-fs (loop1): 2 truncates cleaned up [ 330.552289][T26747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.634480][T26771] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10036'. [ 330.666478][T26304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.683542][T26771] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 330.744844][T26788] program syz.1.10037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.840579][T26806] loop1: detected capacity change from 0 to 512 [ 330.899055][T26813] loop5: detected capacity change from 0 to 512 [ 330.899437][T26815] loop3: detected capacity change from 0 to 1024 [ 330.929156][T26815] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 330.961717][T26815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 330.975137][T26813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.986025][T26815] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 330.998591][T26823] loop1: detected capacity change from 0 to 1024 [ 331.004939][T26815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.013772][T26813] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.050871][T26815] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #16: comm syz.3.10047: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 331.079386][T26823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 331.094810][T26823] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.109776][T26212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.123881][T26226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.136797][T26823] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10058: bg 0: block 112: padding at end of block bitmap is not set [ 331.163535][T26823] EXT4-fs (loop1): Remounting filesystem read-only [ 331.187207][T26832] netlink: 136 bytes leftover after parsing attributes in process `syz.5.10050'. [ 331.223675][T26832] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 331.243396][T26304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 331.590969][T26880] loop3: detected capacity change from 0 to 1024 [ 331.666410][T26880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 331.691952][T26886] loop1: detected capacity change from 0 to 512 [ 331.711658][T26880] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.744643][T26886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.756364][T26880] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10073: bg 0: block 112: padding at end of block bitmap is not set [ 331.757681][T26886] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.785357][T26880] EXT4-fs (loop3): Remounting filesystem read-only [ 331.827662][T26226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 331.860775][T26304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.894302][T26894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10078'. [ 332.163271][T26911] loop3: detected capacity change from 0 to 512 [ 332.389353][ T28] audit: type=1400 audit(1772582057.113:31883): avc: denied { unmount } for pid=26921 comm="syz.4.10090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 332.503000][ T28] audit: type=1400 audit(1772582057.223:31884): avc: denied { recv } for pid=26923 comm="syz.1.10089" saddr=10.128.0.163 src=48498 daddr=10.128.1.120 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 332.588594][T26888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10076'. [ 332.613054][T26941] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 332.990243][ T28] audit: type=1400 audit(1772582057.713:31885): avc: denied { write } for pid=26976 comm="syz.4.10116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 333.255320][ T28] audit: type=1400 audit(1772582057.973:31886): avc: denied { getopt } for pid=27001 comm="syz.1.10126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.570076][T27041] tipc: Started in network mode [ 333.584226][T27041] tipc: Node identity ac1414aa, cluster identity 4711 [ 333.594983][T27041] tipc: Enabling of bearer rejected, failed to enable media [ 333.603585][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.613466][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.633675][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.648675][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.657520][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.666614][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.674810][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.707084][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.722178][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.732345][T27045] netlink: 'syz.4.10148': attribute type 1 has an invalid length. [ 333.744219][T27043] team_slave_0: entered promiscuous mode [ 333.749943][T27043] team_slave_1: entered promiscuous mode [ 333.758188][T27043] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 333.963637][T27089] loop5: detected capacity change from 0 to 512 [ 333.971371][ T28] audit: type=1400 audit(1772582058.653:31887): avc: denied { name_bind } for pid=27080 comm="syz.5.10165" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 334.003981][T27089] EXT4-fs: Ignoring removed bh option [ 334.014489][T27089] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 334.029887][T27089] EXT4-fs (loop5): 1 truncate cleaned up [ 334.036284][T27089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.079325][T26212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.169679][T27100] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.484564][T27158] tipc: Started in network mode [ 334.490036][T27158] tipc: Node identity ac1414aa, cluster identity 4711 [ 334.497928][T27158] tipc: Enabling of bearer rejected, failed to enable media [ 334.718028][ T28] audit: type=1326 audit(1772582059.433:31888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27171 comm="syz.5.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b3dc799 code=0x7ffc0000 [ 334.742652][ T28] audit: type=1326 audit(1772582059.443:31889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27171 comm="syz.5.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13b3dc799 code=0x7ffc0000 [ 334.768077][ T28] audit: type=1326 audit(1772582059.443:31890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27171 comm="syz.5.10218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe13b3dc799 code=0x7ffc0000 [ 334.890513][T27191] loop3: detected capacity change from 0 to 512 [ 334.902205][T27191] EXT4-fs: Ignoring removed bh option [ 334.925658][T27191] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 334.937450][T27191] EXT4-fs (loop3): 1 truncate cleaned up [ 334.944027][T27191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.000495][T26226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.269691][T27238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10237'. [ 335.290822][T27238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10237'. [ 335.300443][T27241] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10240'. [ 335.307234][T27238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10237'. [ 335.335668][T27238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10237'. [ 335.368452][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 335.368471][ T28] audit: type=1326 audit(1772582060.093:31895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 335.405632][ T28] audit: type=1326 audit(1772582060.093:31896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 335.429867][ T28] audit: type=1326 audit(1772582060.123:31897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 335.457957][ T28] audit: type=1326 audit(1772582060.123:31898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 335.498583][ T28] audit: type=1326 audit(1772582060.123:31899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 335.555595][ T28] audit: type=1326 audit(1772582060.123:31900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 335.598665][ T28] audit: type=1326 audit(1772582060.123:31901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 335.656246][T27277] loop3: detected capacity change from 0 to 2048 [ 335.682430][ T28] audit: type=1326 audit(1772582060.123:31902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27251 comm="syz.3.10246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf54ecc799 code=0x7ffc0000 [ 336.026309][ T28] audit: type=1326 audit(1772582060.753:31903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27301 comm="syz.2.10268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 336.091768][T27310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10271'. [ 336.100881][ T28] audit: type=1326 audit(1772582060.773:31904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27301 comm="syz.2.10268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f295b5dc799 code=0x7ffc0000 [ 336.259265][T27319] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10276'. [ 337.403628][T27348] loop5: detected capacity change from 0 to 2048 [ 337.605967][T27372] loop3: detected capacity change from 0 to 128 [ 337.765859][T27392] loop3: detected capacity change from 0 to 512 [ 338.862301][T27425] loop3: detected capacity change from 0 to 1024 [ 338.941771][T27425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 338.974387][T27425] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.035455][T26226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.693184][T27461] tmpfs: Cannot disable swap on remount [ 340.434670][T27397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10311'. [ 340.473104][T27485] veth1_to_bond: entered allmulticast mode [ 340.483226][T27487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10358'. [ 340.495510][T27485] veth1_to_bond: left allmulticast mode [ 340.605490][T27501] tmpfs: Cannot disable swap on remount [ 340.636284][T27508] loop1: detected capacity change from 0 to 128 [ 340.704981][ T3001] ================================================================== [ 340.713118][ T3001] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 340.721144][ T3001] [ 340.723491][ T3001] write to 0xffff88810828dc30 of 8 bytes by task 6189 on cpu 0: [ 340.731125][ T3001] dentry_unlink_inode+0x65/0x260 [ 340.736206][ T3001] d_delete+0xc8/0xe0 [ 340.740204][ T3001] d_delete_notify+0x32/0x100 [ 340.744883][ T3001] vfs_unlink+0x289/0x490 [ 340.749218][ T3001] filename_unlinkat+0x1e2/0x410 [ 340.754157][ T3001] __se_sys_unlink+0x2b/0xe0 [ 340.758748][ T3001] __x64_sys_unlink+0x1f/0x30 [ 340.763433][ T3001] x64_sys_call+0x2eb6/0x3020 [ 340.768118][ T3001] do_syscall_64+0x12c/0x370 [ 340.772711][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.778606][ T3001] [ 340.780934][ T3001] read to 0xffff88810828dc30 of 8 bytes by task 3001 on cpu 1: [ 340.788736][ T3001] step_into_slowpath+0x12c/0x4c0 [ 340.794039][ T3001] path_lookupat+0x330/0x500 [ 340.798643][ T3001] filename_lookup+0x190/0x390 [ 340.803593][ T3001] do_readlinkat+0x74/0x2f0 [ 340.808105][ T3001] __x64_sys_readlink+0x47/0x60 [ 340.812966][ T3001] x64_sys_call+0x2b51/0x3020 [ 340.817650][ T3001] do_syscall_64+0x12c/0x370 [ 340.822241][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.828138][ T3001] [ 340.830458][ T3001] value changed: 0xffff888105a2ec18 -> 0x0000000000000000 [ 340.837576][ T3001] [ 340.839905][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 340.846054][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 340.854905][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.865135][ T3001] ================================================================== [ 340.943285][T27511] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10360'.