last executing test programs: 4m48.746400569s ago: executing program 32 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3m37.410485379s ago: executing program 5 (id=4488): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r1, @ANYBLOB="08000b000000000008000200ac1414"], 0x54}}, 0x4000000) 3m37.338989856s ago: executing program 5 (id=4493): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 3m37.308267381s ago: executing program 5 (id=4496): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0x3}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) 3m37.200244491s ago: executing program 5 (id=4502): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getgid() 3m37.13807058s ago: executing program 5 (id=4505): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 3m37.102588104s ago: executing program 5 (id=4506): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) 3m21.997497116s ago: executing program 33 (id=4506): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) 3m2.988937788s ago: executing program 3 (id=5805): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000540)}) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) 3m2.931277018s ago: executing program 3 (id=5807): openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) 3m2.849425023s ago: executing program 3 (id=5811): socket(0x1d, 0x2, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m2.800583614s ago: executing program 3 (id=5814): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 3m2.711414718s ago: executing program 3 (id=5819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES8=r1], 0x10) 3m2.38771832s ago: executing program 3 (id=5833): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 3m2.373086638s ago: executing program 34 (id=5833): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 2m43.672995315s ago: executing program 6 (id=6561): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 2m43.584701709s ago: executing program 6 (id=6564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 2m43.557353074s ago: executing program 6 (id=6567): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m43.47773671s ago: executing program 6 (id=6570): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r0, 0x0, 0x0, 0x19, 0x0) 2m42.256685341s ago: executing program 6 (id=6613): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xa418be, 0x0) 2m42.217206154s ago: executing program 6 (id=6615): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x0) 2m38.53147322s ago: executing program 1 (id=6702): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2m38.201556305s ago: executing program 1 (id=6704): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 2m38.130590461s ago: executing program 1 (id=6708): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) 2m37.687810914s ago: executing program 1 (id=6718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000006c77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2m27.067850145s ago: executing program 35 (id=6615): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x28}}, 0x0) 2m27.016561105s ago: executing program 1 (id=6722): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m26.960258914s ago: executing program 1 (id=6726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, r2, 0x25, 0x3, @void}, 0x10) 2m11.874519593s ago: executing program 36 (id=6726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, r2, 0x25, 0x3, @void}, 0x10) 29.858333422s ago: executing program 0 (id=10425): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f0000000100)='romfs\x00', 0x2200000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 29.764444944s ago: executing program 0 (id=10428): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xee7}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./bus/file0\x00', 0x2000414, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYBLOB="929cb718d040a784cfbe6686e6cdf5c650f7d687b34b39d5e5916d7175b1ba298c759bb03d7adf998974c1a5407cd4b49210264b3310339916da668be0d43e7b8ca5a68495f21267917556ac9174aa3080afa53685eee03f0cc5121eb48f1eb98fb9301eb365e80399117c936f0f1e3e7b8e601036dab6b0729ca71d06f7b7f2880defd232e2fd183f8f2241c9b1af5128c346e753cf6470156692e1af081cf96346f0", @ANYRES8], 0x1, 0x2ba, &(0x7f0000000ac0)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 29.596485842s ago: executing program 0 (id=10434): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[], 0x20) 29.516652186s ago: executing program 0 (id=10438): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) 29.43094507s ago: executing program 0 (id=10440): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) 29.070149661s ago: executing program 0 (id=10452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x41031, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_COST={0x8, 0x3, 0x40}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 29.054940778s ago: executing program 37 (id=10452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x41031, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_COST={0x8, 0x3, 0x40}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 2.056041973s ago: executing program 7 (id=11400): setresgid(0xee00, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40}}], 0x1, 0x84) 2.008338704s ago: executing program 7 (id=11413): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") close(0x3) 1.893492731s ago: executing program 7 (id=11406): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x24, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "82420589"}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x402, &(0x7f00000000c0), 0x1, 0x786, &(0x7f0000000f80)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200), &(0x7f00000003c0)=ANY=[], 0x700, 0x0) 1.77815021s ago: executing program 7 (id=11410): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000140)="e30080670000ec67838717bd86dde148d082a75b8a1edd63f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a301800000bb017d9c0fd0", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.695866344s ago: executing program 7 (id=11411): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.695629984s ago: executing program 7 (id=11414): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) 1.451797308s ago: executing program 9 (id=11420): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f38798d000000003991f3787269de5382929be107a698db9edbc0257c0bb0205084640cc1c859d69828feab5d0ac72f62c0bf387044a185428df3ab4cc2525d41adb01c8c13c71b6a98dac98f678e2472d5a6a8a5b2f69ac595a8bea681e962033baf38e57debcb4a900797d1f406f72c22a58b8255e88e662270140fe5646e9e558f594eaf8856161f48", 0x121) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.324569283s ago: executing program 9 (id=11422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 1.259649601s ago: executing program 9 (id=11424): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000002dc0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, '$&)&*-%-\')]', 0x3a, '\xff\xff', 0x3a, './file0'}, 0x34) 1.062757383s ago: executing program 9 (id=11429): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_settime(0x0, 0x1, 0x0, 0x0) rt_sigpending(0x0, 0x0) 967.024255ms ago: executing program 9 (id=11432): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x20820}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 844.634122ms ago: executing program 9 (id=11435): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 842.344801ms ago: executing program 4 (id=11436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20) 763.990826ms ago: executing program 8 (id=11439): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) 760.239695ms ago: executing program 4 (id=11440): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_setup(0x1e1e, &(0x7f0000000080)={0x0, 0x86f7, 0x10100, 0x0, 0x1000000}, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000308"], 0x80}}, 0x0) 677.19451ms ago: executing program 8 (id=11441): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setsig(r0, 0xa, 0xc) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) 677.02583ms ago: executing program 4 (id=11442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 574.87562ms ago: executing program 8 (id=11444): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x3, 0x7, 0x6, 0xa, 0xf0, 0xf87}, 0xc) 568.245989ms ago: executing program 2 (id=11445): socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80) 550.655795ms ago: executing program 8 (id=11446): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) 508.009028ms ago: executing program 2 (id=11447): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r2, r0, 0x4, r0}, 0x10) 433.561603ms ago: executing program 8 (id=11448): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 409.608269ms ago: executing program 2 (id=11449): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xae, 0x0, &(0x7f0000000200)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904fcee14db4241544716b9ea42231e63373a3e299531fd05dacf5bb18c3e6c807bc4b5d29a0ed834a6bd8c6f412bd3fca85921504f64d9161c6e3fa3b66840b6554128686e23595ee8cbe9d0137923b47ce083b3f6179c269f30e1d4fca495e440c205ffafda026330afd9efaebd879e4010632a46ab83f66f97214caeccd21b76d68a6762dda9a2fd01f594915feffffff5bc9", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100d}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 312.02184ms ago: executing program 2 (id=11450): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 311.63543ms ago: executing program 8 (id=11451): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@resgid}, {@data_err_ignore}, {@nojournal_checksum}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@usrjquota}]}, 0x1, 0x788, &(0x7f0000002800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', 0x0) 267.865211ms ago: executing program 4 (id=11452): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x1, r0, 0x0}]) 186.555466ms ago: executing program 4 (id=11453): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000300)={{0x0, 0x6, 0xb21, 0x9, 0x8, 0x2, 0x11, 0xf91, 0x595f4da6, 0x2, 0x1, 0xecc, 0xc, 0x5627, 0xffffffffffff8000}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009"], 0x184}}, 0x0) 102.45601ms ago: executing program 2 (id=11454): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 3.820491ms ago: executing program 4 (id=11455): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 0s ago: executing program 2 (id=11456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x13}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): rface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.303153][T25952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.373308][T26148] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9589'. [ 297.391559][T25952] hsr_slave_0: entered promiscuous mode [ 297.402580][T25952] hsr_slave_1: entered promiscuous mode [ 297.410100][T26148] netlink: 43 bytes leftover after parsing attributes in process `syz.8.9589'. [ 297.421574][T25952] debugfs: 'hsr0' already exists in 'hsr' [ 297.427569][T26148] netlink: 'syz.8.9589': attribute type 6 has an invalid length. [ 297.435500][T25952] Cannot create hsr debugfs directory [ 297.443218][T26148] netlink: 'syz.8.9589': attribute type 5 has an invalid length. [ 297.455888][T26148] netlink: 43 bytes leftover after parsing attributes in process `syz.8.9589'. [ 297.542905][ T40] IPVS: stop unused estimator thread 0... [ 297.824074][T25952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.833914][T25952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.843033][T25952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.852327][T25952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.895947][T25952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.909124][T25952] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.918609][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.925777][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.937818][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.944893][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.021246][T25952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.130293][T25952] veth0_vlan: entered promiscuous mode [ 298.138033][T25952] veth1_vlan: entered promiscuous mode [ 298.153230][T25952] veth0_macvtap: entered promiscuous mode [ 298.160526][T25952] veth1_macvtap: entered promiscuous mode [ 298.170889][T25952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.182778][T25952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.193934][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.203025][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.218385][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.243003][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.312559][T26257] bridge_slave_0: left allmulticast mode [ 298.330889][T26257] bridge_slave_0: left promiscuous mode [ 298.330923][T26266] netlink: 'syz.9.9593': attribute type 10 has an invalid length. [ 298.337565][T26257] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.352278][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 298.352292][ T28] audit: type=1400 audit(2000000040.820:17736): avc: denied { create } for pid=26267 comm="syz.8.9597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 298.383789][ T28] audit: type=1400 audit(2000000040.820:17737): avc: denied { setopt } for pid=26267 comm="syz.8.9597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 298.408438][T26257] bridge_slave_1: left allmulticast mode [ 298.415213][T26257] bridge_slave_1: left promiscuous mode [ 298.421082][T26257] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.446273][T26257] bond0: (slave bond_slave_0): Releasing backup interface [ 298.456964][T26257] bond0: (slave bond_slave_1): Releasing backup interface [ 298.489026][T26257] team0: Port device team_slave_0 removed [ 298.509418][T26278] program syz.0.9602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.520702][T26257] team0: Port device team_slave_1 removed [ 298.529074][T26257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.536939][T26257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.546254][T26257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.563236][T26257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.574667][T26282] loop0: detected capacity change from 0 to 512 [ 298.591675][T26257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.623122][T26282] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 298.641116][ T28] audit: type=1400 audit(2000000041.110:17738): avc: denied { mounton } for pid=25952 comm="syz-executor" path="/root/syzkaller.AAxmFq/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 298.678407][ T28] audit: type=1400 audit(2000000041.110:17739): avc: denied { mount } for pid=25952 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 298.679056][T26282] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.9605: orphan file block 0: bad magic [ 298.701590][ T28] audit: type=1400 audit(2000000041.110:17740): avc: denied { mounton } for pid=25952 comm="syz-executor" path="/root/syzkaller.AAxmFq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 298.739810][ T28] audit: type=1400 audit(2000000041.110:17741): avc: denied { mounton } for pid=25952 comm="syz-executor" path="/root/syzkaller.AAxmFq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=78447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 298.768212][ T28] audit: type=1400 audit(2000000041.140:17742): avc: denied { mounton } for pid=25952 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 298.791552][T26282] loop0: lost filesystem error report for type 5 error -117 [ 298.791800][ T28] audit: type=1400 audit(2000000041.140:17743): avc: denied { mount } for pid=25952 comm="syz-executor" name="/" dev="gadgetfs" ino=4885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 298.815068][T26266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.821808][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 298.821828][ C1] EXT4-fs (loop0): initial error at time 2000000041: ext4_init_orphan_info:618 [ 298.843788][ C1] EXT4-fs (loop0): last error at time 2000000041: ext4_init_orphan_info:618 [ 298.852530][T26282] EXT4-fs (loop0): Remounting filesystem read-only [ 298.859139][T26282] EXT4-fs (loop0): mount failed [ 298.873128][T26266] team0: Port device bond0 added [ 298.941863][T26297] loop8: detected capacity change from 0 to 1024 [ 298.975518][T26297] EXT4-fs: Ignoring removed bh option [ 298.990677][T26303] netlink: 'syz.9.9614': attribute type 21 has an invalid length. [ 298.998811][T26303] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.007422][T26303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.014762][T26303] IPv6: NLM_F_CREATE should be set when creating new route [ 299.021966][T26303] IPv6: NLM_F_CREATE should be set when creating new route [ 299.029149][T26303] IPv6: NLM_F_CREATE should be set when creating new route [ 299.056140][T26305] netlink: 'syz.9.9614': attribute type 21 has an invalid length. [ 299.084947][T26305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.091679][ T28] audit: type=1400 audit(2000000041.550:17744): avc: denied { map } for pid=26306 comm="syz.4.9615" path="socket:[79602]" dev="sockfs" ino=79602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.141141][ T28] audit: type=1400 audit(2000000041.550:17745): avc: denied { read } for pid=26306 comm="syz.4.9615" path="socket:[79602]" dev="sockfs" ino=79602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.235972][T26322] blkio.reset_stats is deprecated [ 299.352405][T26332] loop8: detected capacity change from 0 to 256 [ 299.546318][T26357] loop4: detected capacity change from 0 to 4096 [ 299.651384][T26364] loop8: detected capacity change from 0 to 128 [ 299.722221][T26377] netlink: 'syz.9.9645': attribute type 5 has an invalid length. [ 299.771185][T26383] program syz.9.9647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.853824][T26394] vhci_hcd vhci_hcd.4: default hub control req: 0014 v0301 i0006 l0 [ 299.914684][T26407] loop8: detected capacity change from 0 to 1024 [ 299.938617][T26411] vxcan1 speed is unknown, defaulting to 1000 [ 299.946628][T26407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 299.955392][T26407] System zones: 0-1, 3-8 [ 299.960331][T26407] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.996452][T26411] xfrm0 speed is unknown, defaulting to 1000 [ 300.007502][T26407] EXT4-fs (loop8): Online resizing not supported with bigalloc [ 300.244303][T26426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 300.252677][T26426] System zones: 0-1, 3-8 [ 300.258457][T26426] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.311789][T26432] __nla_validate_parse: 3 callbacks suppressed [ 300.311814][T26432] netlink: 564 bytes leftover after parsing attributes in process `syz.4.9669'. [ 300.327303][T26432] netlink: 564 bytes leftover after parsing attributes in process `syz.4.9669'. [ 300.462076][T25991] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 300.567661][T26441] netlink: 'syz.0.9673': attribute type 2 has an invalid length. [ 300.575859][T26441] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9673'. [ 301.110100][T26499] set_capacity_and_notify: 1 callbacks suppressed [ 301.110118][T26499] loop9: detected capacity change from 0 to 1024 [ 301.125040][T26499] EXT4-fs: Ignoring removed bh option [ 301.192550][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9706'. [ 301.201717][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9707'. [ 301.210608][T26514] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9707'. [ 301.296460][T26526] netlink: 176 bytes leftover after parsing attributes in process `syz.9.9713'. [ 301.350316][T26532] loop4: detected capacity change from 0 to 1024 [ 301.358684][T26532] EXT4-fs: Ignoring removed bh option [ 301.393020][T26538] netlink: 296 bytes leftover after parsing attributes in process `syz.7.9718'. [ 301.410229][T26538] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 301.438158][T26537] loop9: detected capacity change from 0 to 8192 [ 301.450829][T26540] bridge_slave_0: left allmulticast mode [ 301.456743][T26540] bridge_slave_0: left promiscuous mode [ 301.462839][T26540] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.475828][T26543] netlink: 'syz.4.9717': attribute type 10 has an invalid length. [ 301.488505][T26540] bridge_slave_1: left allmulticast mode [ 301.497679][T26540] bridge_slave_1: left promiscuous mode [ 301.503588][T26540] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.521197][T26540] bond0: (slave bond_slave_0): Releasing backup interface [ 301.532252][T26540] bond0: (slave bond_slave_1): Releasing backup interface [ 301.550112][T26540] team0: Port device team_slave_0 removed [ 301.558261][T26550] loop9: detected capacity change from 0 to 512 [ 301.566475][T26540] team0: Port device team_slave_1 removed [ 301.573987][T26540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.581449][T26540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.594600][T26540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.604934][T26540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.614827][T26550] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #3: comm syz.9.9722: corrupted inode contents [ 301.628809][T26550] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 301.628962][T26550] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #3: comm syz.9.9722: mark_inode_dirty error [ 301.630103][T26540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.638062][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 301.638078][ C0] EXT4-fs (loop9): initial error at time 2000000044: ext4_do_update_inode:5569: inode 3 [ 301.681430][ C0] EXT4-fs (loop9): last error at time 2000000044: ext4_do_update_inode:5569: inode 3 [ 301.691903][T26550] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 301.692392][T26550] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #3: comm syz.9.9722: corrupted inode contents [ 301.693178][T26543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.701486][T26550] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 301.715545][T26543] team0: Port device bond0 added [ 301.721767][T26550] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.9722: mark_inode_dirty error [ 301.745397][T26550] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 301.749048][T26552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9723'. [ 301.757259][T26550] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.9722: Failed to acquire dquot type 0 [ 301.769485][T26552] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9723'. [ 301.778412][T26550] loop9: lost filesystem error report for type 5 error -117 [ 301.778831][T26550] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.9722: corrupted inode contents [ 301.802540][T26552] netlink: 'syz.8.9723': attribute type 6 has an invalid length. [ 301.830247][T26550] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 301.831571][T26550] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #16: comm syz.9.9722: mark_inode_dirty error [ 301.852721][T26550] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 301.853056][T26550] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.9722: corrupted inode contents [ 301.874671][T26550] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 301.876257][T26550] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.9722: mark_inode_dirty error [ 301.900572][T26550] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 301.906059][T26550] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.9722: corrupted inode contents [ 301.927797][T26550] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 301.928182][T26550] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 301.946082][T26550] loop9: lost filesystem error report for type 5 error -117 [ 301.947374][T26550] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #16: comm syz.9.9722: corrupted inode contents [ 301.966894][T26550] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 301.967910][T26550] EXT4-fs error (device loop9): ext4_truncate:4587: inode #16: comm syz.9.9722: mark_inode_dirty error [ 302.007287][T26550] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 302.016401][T26569] loop8: detected capacity change from 0 to 1024 [ 302.023760][T26569] EXT4-fs: inline encryption not supported [ 302.055520][T26550] loop9: lost filesystem error report for type 5 error -117 [ 302.058913][T26550] EXT4-fs (loop9): 1 truncate cleaned up [ 302.127991][T26550] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.208604][T26550] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #3: comm syz.9.9722: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 302.208604][T26550] [ 302.423384][T26601] erspan0: entered promiscuous mode [ 302.452853][T26598] vxcan1 speed is unknown, defaulting to 1000 [ 302.641207][T26598] xfrm0 speed is unknown, defaulting to 1000 [ 302.701248][T26620] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 303.483277][T26643] loop8: detected capacity change from 0 to 128 [ 303.734081][T26650] loop9: detected capacity change from 0 to 512 [ 303.754363][T26650] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.9767: invalid indirect mapped block 256 (level 2) [ 303.773474][T26650] EXT4-fs (loop9): 2 truncates cleaned up [ 303.781645][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 303.788079][ C1] EXT4-fs (loop9): initial error at time 2000000046: ext4_free_branches:1023: inode 11 [ 303.798246][ C1] EXT4-fs (loop9): last error at time 2000000046: ext4_free_branches:1023: inode 11 [ 303.871450][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 303.871526][ T28] audit: type=1400 audit(2000000046.340:17773): avc: denied { read } for pid=26656 comm="syz.7.9769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.917230][T26659] program syz.4.9773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.160267][ T28] audit: type=1400 audit(2000000046.630:17774): avc: denied { ioctl } for pid=26684 comm="syz.9.9782" path="socket:[80223]" dev="sockfs" ino=80223 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 304.216005][ T28] audit: type=1400 audit(2000000046.660:17775): avc: denied { ioctl } for pid=26684 comm="syz.9.9782" path="socket:[80224]" dev="sockfs" ino=80224 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 304.283971][T26694] loop0: detected capacity change from 0 to 512 [ 304.289078][T26696] loop4: detected capacity change from 0 to 512 [ 304.320191][T26702] loop9: detected capacity change from 0 to 512 [ 304.328283][T26694] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.328550][T26696] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9788: bg 0: block 248: padding at end of block bitmap is not set [ 304.351959][T26694] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 304.383712][T26696] loop4: lost filesystem error report for type 5 error -117 [ 304.384003][T26696] Quota error (device loop4): write_blk: dquota write failed [ 304.398771][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 304.398791][ C0] EXT4-fs (loop4): last error at time 2000000046: ext4_validate_block_bitmap:441 [ 304.414834][T26696] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 304.422118][T26694] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 304.425162][T26696] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.9788: Failed to acquire dquot type 1 [ 304.435448][T26702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 304.445457][T26696] loop4: lost filesystem error report for type 5 error -117 [ 304.457361][T26696] EXT4-fs (loop4): 1 truncate cleaned up [ 304.457936][T26694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 304.471748][T26696] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.488980][T26702] System zones: 1-12 [ 304.493374][T26694] System zones: 0-2, 18-18, 34-35 [ 304.501745][T26702] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.9791: missing EA_INODE flag [ 304.527746][T26702] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.9791: error while reading EA inode 12 err=-117 [ 304.535154][T26694] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9787: bg 0: block 353: padding at end of block bitmap is not set [ 304.540298][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 304.561506][ C1] EXT4-fs (loop9): initial error at time 2000000047: ext4_xattr_inode_iget:441: inode 12 [ 304.571572][ C1] EXT4-fs (loop9): last error at time 2000000047: ext4_xattr_inode_iget:441: inode 12 [ 304.572351][T26713] netlink: 'syz.8.9794': attribute type 10 has an invalid length. [ 304.581949][T26702] loop9: lost filesystem error report for type 5 error -117 [ 304.590585][T26702] EXT4-fs (loop9): 1 orphan inode deleted [ 304.603651][T26712] team0: Port device bond0 removed [ 304.635726][T26712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.684525][T26696] vxcan1 speed is unknown, defaulting to 1000 [ 304.686742][T26713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.719519][ T28] audit: type=1326 audit(2000000047.180:17776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26717 comm="syz.0.9796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280606c799 code=0x7ffc0000 [ 304.747074][T26713] team0: Port device bond0 added [ 304.752291][ T28] audit: type=1326 audit(2000000047.180:17777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26717 comm="syz.0.9796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f280606c799 code=0x7ffc0000 [ 304.803953][T26723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 304.828972][ T28] audit: type=1400 audit(2000000047.180:17778): avc: denied { mounton } for pid=26717 comm="syz.0.9796" path="/2254/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.868823][T26696] xfrm0 speed is unknown, defaulting to 1000 [ 304.886874][ T28] audit: type=1326 audit(2000000047.180:17779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26717 comm="syz.0.9796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280606c799 code=0x7ffc0000 [ 304.978265][T26735] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.992138][T26735] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.101723][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 305.108990][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 305.166169][T26752] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.9811: corrupted in-inode xattr: e_value out of bounds [ 305.211638][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 305.218140][ C1] EXT4-fs (loop0): initial error at time 2000000047: ext4_iget_extra_inode:5025: inode 15 [ 305.219724][T26752] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.9811: couldn't read orphan inode 15 (err -117) [ 305.228161][ C1] EXT4-fs (loop0): last error at time 2000000047: ext4_iget_extra_inode:5025: inode 15 [ 305.244382][T26759] macvtap0: entered promiscuous mode [ 305.266561][T26759] macvtap0: left promiscuous mode [ 305.286948][T26752] loop0: lost filesystem error report for type 5 error -117 [ 305.291978][ T28] audit: type=1400 audit(2000000047.770:17780): avc: denied { name_bind } for pid=26764 comm="syz.4.9818" src=17956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 305.374216][T26773] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 305.389283][T26773] System zones: 0-1, 3-36 [ 305.402786][T26775] EXT4-fs: Ignoring removed bh option [ 305.408497][T26773] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.9822: bad orphan inode 134217728 [ 305.428238][T26775] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 305.436817][T26773] loop4: lost filesystem error report for type 5 error -117 [ 305.473661][T26775] EXT4-fs (loop9): 1 truncate cleaned up [ 305.647845][T26801] __nla_validate_parse: 10 callbacks suppressed [ 305.647865][T26801] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9834'. [ 305.795036][T26814] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9837: invalid indirect mapped block 256 (level 2) [ 305.829051][T26814] EXT4-fs (loop0): 2 truncates cleaned up [ 305.834853][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 305.834872][ C0] EXT4-fs (loop0): initial error at time 2000000048: ext4_free_branches:1023: inode 11 [ 305.834904][ C0] EXT4-fs (loop0): last error at time 2000000048: ext4_free_branches:1023: inode 11 [ 305.914035][T26816] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.951790][T26816] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 305.973565][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9844'. [ 305.991437][T26816] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 306.154963][T26816] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 306.169774][T26816] System zones: 0-2, 18-18, 34-35 [ 306.265443][T26816] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9839: bg 0: block 353: padding at end of block bitmap is not set [ 306.431480][T26865] rdma_op ffff88811a0cf180 conn xmit_rdma 0000000000000000 [ 306.551834][T26873] vxcan1 speed is unknown, defaulting to 1000 [ 306.656068][T26873] xfrm0 speed is unknown, defaulting to 1000 [ 306.695218][T26885] set_capacity_and_notify: 9 callbacks suppressed [ 306.695237][T26885] loop0: detected capacity change from 0 to 128 [ 306.872023][T26885] vfat: Unknown parameter '/dev/loop#' [ 307.193028][T26902] loop4: detected capacity change from 0 to 512 [ 307.210948][T26902] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.236721][T26902] EXT4-fs (loop4): 1 truncate cleaned up [ 307.237892][T26906] netlink: 92 bytes leftover after parsing attributes in process `syz.8.9876'. [ 307.253666][T26906] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9876'. [ 307.963797][T26933] tipc: Started in network mode [ 307.968676][T26933] tipc: Node identity @v, cluster identity 4711 [ 308.006967][T26933] tipc: Enabling of bearer rejected, failed to enable media [ 308.056100][T26937] netlink: 'syz.0.9889': attribute type 10 has an invalid length. [ 308.082869][T26935] team0: Port device bond0 removed [ 308.102028][T26935] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 308.130852][ T3730] kernel read not supported for file /445/task (pid: 3730 comm: kworker/0:6) [ 308.145594][T26937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.209636][T26937] team0: Port device bond0 added [ 308.216056][T26946] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 308.231807][T26946] vhci_hcd vhci_hcd.0: invalid port number 253 [ 308.235366][T26944] bridge1: entered promiscuous mode [ 308.261761][T26946] vhci_hcd vhci_hcd.0: default hub control req: 400f v000b i00fd l0 [ 308.326109][T26955] loop9: detected capacity change from 0 to 512 [ 308.340403][T26953] vxcan1 speed is unknown, defaulting to 1000 [ 308.419742][T26953] xfrm0 speed is unknown, defaulting to 1000 [ 308.730471][T26978] team0: Port device bond0 removed [ 308.732295][T26982] loop8: detected capacity change from 0 to 1024 [ 308.749317][T26983] netlink: 'syz.9.9906': attribute type 10 has an invalid length. [ 308.764874][T26982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 308.773242][T26982] System zones: 0-1, 3-36 [ 308.782476][T26982] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.9910: bad orphan inode 134217728 [ 308.799563][T26978] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.801921][T26982] loop8: lost filesystem error report for type 5 error -117 [ 308.818052][T26983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.856275][T26982] EXT4-fs mount: 59 callbacks suppressed [ 308.856292][T26982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.879188][T26983] team0: Port device bond0 added [ 308.928510][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.232062][T27011] loop9: detected capacity change from 0 to 512 [ 309.265640][T27011] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 309.292234][T27011] EXT4-fs (loop9): 1 truncate cleaned up [ 309.308470][T27011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.383274][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.497251][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 309.497267][ T28] audit: type=1400 audit(2000000051.970:17788): avc: denied { bind } for pid=27024 comm="syz.0.9926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 309.532751][T27027] loop9: detected capacity change from 0 to 512 [ 309.552547][T27027] EXT4-fs: Ignoring removed orlov option [ 309.583421][T27027] EXT4-fs (loop9): 1 truncate cleaned up [ 309.604586][T27027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.705976][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.723138][ T28] audit: type=1400 audit(2000000052.200:17789): avc: denied { nlmsg_read } for pid=27033 comm="syz.0.9929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 309.774593][T27043] ref_ctr_offset mismatch. inode: 0x45b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 309.776135][ T28] audit: type=1400 audit(2000000052.200:17790): avc: denied { audit_write } for pid=27033 comm="syz.0.9929" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 309.841880][ T28] audit: type=1107 audit(2000000052.200:17791): pid=27033 uid=0 auid=0 ses=1 subj=root:sysadm_r:sysadm_t msg='' [ 309.928177][T27061] netlink: 'syz.4.9942': attribute type 14 has an invalid length. [ 309.958953][ T28] audit: type=1400 audit(2000000052.430:17792): avc: denied { listen } for pid=27062 comm="syz.9.9945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 310.014740][ T28] audit: type=1400 audit(2000000052.470:17793): avc: denied { setcurrent } for pid=27068 comm="syz.9.9947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 310.256791][T27097] loop8: detected capacity change from 0 to 512 [ 310.315364][T27097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.336531][T27097] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.400356][ T28] audit: type=1400 audit(2000000052.870:17794): avc: denied { bind } for pid=27106 comm="syz.7.9964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 310.429707][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.481567][T27113] netlink: 'syz.0.9967': attribute type 10 has an invalid length. [ 310.497681][T27113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9967'. [ 310.507093][T27113] bond0: entered promiscuous mode [ 310.525175][T27115] loop9: detected capacity change from 0 to 4096 [ 310.532243][T27113] bond_slave_0: entered promiscuous mode [ 310.538141][T27113] bond_slave_1: entered promiscuous mode [ 310.551443][T27113] team0: Port device bond0 removed [ 310.568469][T27113] bridge0: port 3(bond0) entered blocking state [ 310.575350][T27113] bridge0: port 3(bond0) entered disabled state [ 310.582021][T27113] bond0: entered allmulticast mode [ 310.582863][T27115] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.587195][T27113] bond_slave_0: entered allmulticast mode [ 310.587212][T27113] bond_slave_1: entered allmulticast mode [ 310.629903][ T28] audit: type=1400 audit(2000000053.100:17795): avc: denied { write } for pid=27114 comm="syz.9.9968" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 310.664457][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.848214][T27154] loop8: detected capacity change from 0 to 512 [ 310.852456][T27152] xt_hashlimit: size too large, truncated to 1048576 [ 310.867415][T27154] EXT4-fs: Ignoring removed i_version option [ 310.919335][T27164] netlink: 23 bytes leftover after parsing attributes in process `syz.4.9989'. [ 310.922201][T27154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.938926][T27164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9989'. [ 310.991965][ T28] audit: type=1400 audit(2000000053.460:17796): avc: denied { write } for pid=27165 comm="syz.7.9990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.034331][ T28] audit: type=1400 audit(2000000053.510:17797): avc: denied { read } for pid=27168 comm="syz.4.9992" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 311.038703][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.203889][T27189] loop6: detected capacity change from 0 to 7 [ 311.221537][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.231250][ C1] buffer_io_error: 48 callbacks suppressed [ 311.231266][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.245525][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.255126][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.267568][T27189] loop6: unable to read partition table [ 311.291750][T27189] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 311.305482][T18930] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.325701][T18930] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.371803][T18930] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.373620][T27201] vxcan1 speed is unknown, defaulting to 1000 [ 311.408450][T18930] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.438087][T18930] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.563789][T27201] xfrm0 speed is unknown, defaulting to 1000 [ 311.590957][T27206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.641543][T27230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.672010][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.729077][T27244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10025'. [ 311.742478][T27246] set_capacity_and_notify: 2 callbacks suppressed [ 311.742506][T27246] loop8: detected capacity change from 0 to 128 [ 311.749807][T27244] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 311.762553][T27245] loop9: detected capacity change from 0 to 512 [ 311.779831][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.789426][T27245] EXT4-fs: Ignoring removed nobh option [ 311.797340][T27245] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 311.828597][T27246] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.841936][T27246] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.856058][T27245] EXT4-fs (loop9): 1 truncate cleaned up [ 311.894631][T27245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.924755][T24497] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.952336][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.067759][T27263] loop4: detected capacity change from 0 to 4096 [ 312.075862][T27265] loop9: detected capacity change from 0 to 1024 [ 312.093118][T27265] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 312.104887][T27265] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.10034: lblock 2 mapped to illegal pblock 2 (length 1) [ 312.119697][T27265] fserror_report: 5 callbacks suppressed [ 312.119712][T27265] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.127143][T27265] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.10034: lblock 0 mapped to illegal pblock 48 (length 1) [ 312.136778][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 312.136802][ C1] EXT4-fs (loop9): initial error at time 2000000054: ext4_map_blocks:776: inode 3: block 2 [ 312.136858][ C1] EXT4-fs (loop9): last error at time 2000000054: ext4_map_blocks:776: inode 3: block 2 [ 312.140075][T27263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.151793][T27265] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.191658][T27265] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.10034: Failed to acquire dquot type 0 [ 312.212519][T27265] loop9: lost filesystem error report for type 5 error -117 [ 312.212708][T27265] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 312.230104][T27265] loop9: lost filesystem error report for type 5 error -117 [ 312.230252][T27265] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.10034: mark_inode_dirty error [ 312.249236][T27265] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.251665][T27265] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 312.259923][T27277] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.10039'. [ 312.268743][T27265] EXT4-fs (loop9): 1 orphan inode deleted [ 312.281999][T22051] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 312.287130][T27265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.319819][T22051] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.319932][T22051] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 312.342079][T22051] loop9: lost filesystem error report for type 5 error -117 [ 312.348549][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.434767][T27265] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz.9.10034: Invalid inode table block 1 in block_group 0 [ 312.456640][T27265] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 312.473440][T27265] EXT4-fs error (device loop9): ext4_setattr:5825: inode #2: comm syz.9.10034: mark_inode_dirty error [ 312.502091][T27295] RDS: rds_bind could not find a transport for c00::, load rds_tcp or rds_rdma? [ 312.515103][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.533715][T22051] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 312.558901][T22051] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.559006][T22051] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 312.561582][T27298] program syz.4.10051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.574970][T22051] loop9: lost filesystem error report for type 5 error -117 [ 312.612110][T23677] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 312.651867][T23677] loop9: lost filesystem error report for type 5 error -117 [ 312.656162][T23677] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 312.675128][T23677] loop9: lost filesystem error report for type 5 error -117 [ 312.675230][T23677] EXT4-fs error (device loop9): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 312.703226][T23677] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.744725][T27318] loop9: detected capacity change from 0 to 1024 [ 312.768866][T27322] loop8: detected capacity change from 0 to 1024 [ 312.773492][T27318] EXT4-fs: inline encryption not supported [ 312.781200][T27322] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 312.810344][T27322] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 2: comm syz.8.10060: lblock 2 mapped to illegal pblock 2 (length 1) [ 312.834905][T27322] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.835487][T27318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.844677][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 312.844701][ C1] EXT4-fs (loop8): initial error at time 2000000055: ext4_map_blocks:776: inode 3: block 2 [ 312.844735][ C1] EXT4-fs (loop8): last error at time 2000000055: ext4_map_blocks:776: inode 3: block 2 [ 312.869447][T27333] 9p: Bad value for 'rfdno' [ 312.888389][T27322] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.10060: lblock 0 mapped to illegal pblock 48 (length 1) [ 312.904555][T27322] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.904791][T27322] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.10060: Failed to acquire dquot type 0 [ 312.927358][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.937620][T27322] loop8: lost filesystem error report for type 5 error -117 [ 312.950008][T27322] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 312.967267][T27322] loop8: lost filesystem error report for type 5 error -117 [ 312.977358][T27322] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.10060: mark_inode_dirty error [ 312.996834][T27322] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.996939][T27322] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 313.002923][T27343] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10069'. [ 313.006730][T27322] EXT4-fs (loop8): 1 orphan inode deleted [ 313.032125][T27322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.071881][ T58] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 313.092083][ T58] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 313.103940][T27322] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz.8.10060: Invalid inode table block 1 in block_group 0 [ 313.123282][T27322] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 313.133298][T27322] EXT4-fs error (device loop8): ext4_setattr:5825: inode #2: comm syz.8.10060: mark_inode_dirty error [ 313.157304][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.166622][ T58] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 313.182063][ T58] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 313.182399][ T58] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 313.203671][ T58] loop8: lost filesystem error report for type 5 error -117 [ 313.204062][T24497] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 313.224989][T24497] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 313.236338][T24497] EXT4-fs error (device loop8): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 313.311094][T27360] program syz.8.10077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.504660][T27382] loop8: detected capacity change from 0 to 512 [ 313.526161][T27382] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.10086: inode has both inline data and extents flags [ 313.546111][T27382] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.10086: couldn't read orphan inode 15 (err -117) [ 313.558279][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 313.558299][ C0] EXT4-fs (loop8): initial error at time 2000000056: ext4_orphan_get:1391: inode 15 [ 313.558384][ C0] EXT4-fs (loop8): last error at time 2000000056: ext4_orphan_get:1391: inode 15 [ 313.585813][T27382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.643559][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.686953][T27403] loop0: detected capacity change from 0 to 512 [ 313.703336][T27403] EXT4-fs: Ignoring removed i_version option [ 313.726486][T27403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.752442][T27415] loop4: detected capacity change from 0 to 128 [ 313.800820][T27416] pim6reg: entered allmulticast mode [ 313.815678][T27416] pim6reg: left allmulticast mode [ 313.827735][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.930204][T27430] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 313.945001][T27432] xt_hashlimit: size too large, truncated to 1048576 [ 313.952537][T27421] loop8: detected capacity change from 0 to 8192 [ 314.041439][ T3416] kernel read not supported for file bpf-prog (pid: 3416 comm: kworker/1:4) [ 314.055488][T27445] msdos: Bad value for 'uid' [ 314.064301][T27445] msdos: Bad value for 'uid' [ 314.124801][T27451] dvmrp1: tun_chr_ioctl cmd 2147767520 [ 314.134056][T27450] cgroup: Need name or subsystem set [ 314.311882][T27469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.359520][T27480] vxcan1 speed is unknown, defaulting to 1000 [ 314.437751][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.476501][T27493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10139'. [ 314.508220][T27489] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.581050][T27504] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10140'. [ 314.598895][T27480] xfrm0 speed is unknown, defaulting to 1000 [ 314.633149][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 314.633222][ T28] audit: type=1400 audit(2000000057.110:17852): avc: denied { nlmsg_read } for pid=27505 comm="syz.7.10143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.677625][T27508] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.708750][T27510] pim6reg: entered allmulticast mode [ 314.728680][T27510] pim6reg: left allmulticast mode [ 314.814451][T27508] FAT-fs (loop4): error, corrupted file size (i_pos 196, 60330) [ 314.831699][T27508] FAT-fs (loop4): Filesystem has been set read-only [ 314.838466][T27508] FAT-fs (loop4): error, corrupted file size (i_pos 196, 60330) [ 315.495419][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.551880][T27528] netlink: 399 bytes leftover after parsing attributes in process `syz.8.10151'. [ 315.561436][T27528] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 315.574692][ T28] audit: type=1326 audit(2000000058.050:17853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.4.10153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ef903c799 code=0x0 [ 315.725279][T27537] tap0: tun_chr_ioctl cmd 1074025676 [ 315.741787][T27537] tap0: owner set to 0 [ 315.783407][T27541] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 315.958285][T27541] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.10159: bg 0: block 104: invalid block bitmap [ 315.971455][T27541] fserror_report: 3 callbacks suppressed [ 315.971472][T27541] loop9: lost filesystem error report for type 5 error -117 [ 316.003676][T27541] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 316.019771][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 316.019796][ C1] EXT4-fs (loop9): initial error at time 2000000058: ext4_validate_block_bitmap:432 [ 316.019821][ C1] EXT4-fs (loop9): last error at time 2000000058: ext4_validate_block_bitmap:432 [ 316.067401][T27541] loop9: lost filesystem error report for type 5 error -117 [ 316.077632][T27541] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.10159: invalid indirect mapped block 1 (level 1) [ 316.099506][T27541] EXT4-fs (loop9): 1 truncate cleaned up [ 316.106450][T27541] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.150872][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.204666][ T28] audit: type=1400 audit(2000000058.680:17854): avc: denied { getopt } for pid=27571 comm="syz.0.10174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.267241][T27582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.282304][T27582] ext4 filesystem being mounted at /2329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.369106][T27582] EXT4-fs error (device loop0): ext4_lookup:1785: inode #16: comm syz.0.10178: iget: checksum invalid [ 316.386919][ T28] audit: type=1400 audit(2000000058.840:17855): avc: denied { bind } for pid=27593 comm="syz.7.10184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.411410][T27582] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 316.411860][T27599] netlink: 'syz.4.10186': attribute type 11 has an invalid length. [ 316.454413][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.538811][T27612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10192'. [ 316.627162][ T28] audit: type=1400 audit(2000000059.100:17856): avc: denied { listen } for pid=27617 comm="syz.4.10196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.648665][ T28] audit: type=1400 audit(2000000059.100:17857): avc: denied { accept } for pid=27617 comm="syz.4.10196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 316.872001][ T28] audit: type=1400 audit(2000000059.340:17858): avc: denied { mount } for pid=27640 comm="syz.8.10206" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 317.114308][T27664] program syz.9.10218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.220857][T27677] set_capacity_and_notify: 7 callbacks suppressed [ 317.220875][T27677] loop8: detected capacity change from 0 to 1024 [ 317.234386][T27678] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10224'. [ 317.264792][T27682] tap0: tun_chr_ioctl cmd 1074025676 [ 317.271091][T27677] EXT4-fs: inline encryption not supported [ 317.297607][T27682] tap0: owner set to 0 [ 317.311008][T27677] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.368030][T27677] EXT4-fs (loop8): shut down requested (1) [ 317.394490][T27677] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 317.403732][T27677] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 317.412965][T27677] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 317.413118][ T28] audit: type=1400 audit(2000000059.890:17859): avc: denied { bind } for pid=27693 comm="syz.4.10229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 317.462949][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.529505][T27706] loop0: detected capacity change from 0 to 128 [ 317.606535][T27706] bio_check_eod: 214 callbacks suppressed [ 317.606652][T27706] syz.0.10233: attempt to access beyond end of device [ 317.606652][T27706] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 317.651139][ T58] kworker/u8:4: attempt to access beyond end of device [ 317.651139][ T58] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 317.717965][ T28] audit: type=1400 audit(2000000060.190:17860): avc: denied { accept } for pid=27726 comm="syz.0.10243" path="socket:[82702]" dev="sockfs" ino=82702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 317.806457][ T28] audit: type=1400 audit(2000000060.280:17861): avc: denied { wake_alarm } for pid=27737 comm="syz.0.10250" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 317.840259][T27740] netlink: 'syz.8.10252': attribute type 8 has an invalid length. [ 317.856642][T27740] sch_fq: defrate 0 ignored. [ 317.900235][T27747] netlink: 'syz.8.10255': attribute type 3 has an invalid length. [ 317.914305][T27747] netlink: 13435 bytes leftover after parsing attributes in process `syz.8.10255'. [ 318.107442][T27776] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10268'. [ 318.170063][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10273'. [ 318.192614][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10273'. [ 318.285770][T27796] loop4: detected capacity change from 0 to 512 [ 318.324404][ T3416] kernel read not supported for file /sysvipc/sem (pid: 3416 comm: kworker/1:4) [ 318.409895][T27810] loop4: detected capacity change from 0 to 1024 [ 318.439746][T27810] EXT4-fs: Ignoring removed orlov option [ 318.469044][T27810] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 318.494190][T27810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.545725][T27810] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.10285: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 318.567730][T27810] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.10285: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 318.624165][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.732077][T27839] rdma_op ffff88810387ed80 conn xmit_rdma 0000000000000000 [ 318.916415][T27855] vxcan1 speed is unknown, defaulting to 1000 [ 318.956764][T27855] xfrm0 speed is unknown, defaulting to 1000 [ 319.084143][T27863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10310'. [ 319.758100][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 319.758113][ T28] audit: type=1400 audit(2000000062.230:17875): avc: denied { name_bind } for pid=27901 comm="syz.9.10325" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 319.823174][T27906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=27906 comm=syz.9.10327 [ 319.890085][ T28] audit: type=1400 audit(2000000062.360:17876): avc: denied { connect } for pid=27911 comm="syz.8.10330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.908101][T27914] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10331'. [ 319.924154][T27916] netlink: 59 bytes leftover after parsing attributes in process `syz.8.10332'. [ 319.927663][T27914] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10331'. [ 320.028780][T27928] vcan1: entered promiscuous mode [ 320.034117][T27927] netlink: 'syz.9.10338': attribute type 3 has an invalid length. [ 320.044460][T27928] vcan1: entered allmulticast mode [ 320.114821][T27938] loop0: detected capacity change from 0 to 512 [ 320.121219][T27936] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 320.130466][T27938] EXT4-fs: Ignoring removed orlov option [ 320.155527][ T28] audit: type=1400 audit(2000000062.620:17877): avc: denied { ioctl } for pid=27939 comm="syz.8.10345" path="socket:[85086]" dev="sockfs" ino=85086 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 320.200590][T27938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.213502][T27938] ext4 filesystem being mounted at /2349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.240638][ T28] audit: type=1400 audit(2000000062.710:17878): avc: denied { append } for pid=27937 comm="syz.0.10344" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.287323][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.451664][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.458921][ C1] bridge0: topology change detected, propagating [ 320.465363][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.472663][ C1] bridge0: topology change detected, propagating [ 320.485864][ T28] audit: type=1400 audit(2000000062.960:17879): avc: denied { ioctl } for pid=27974 comm="syz.7.10359" path="socket:[85124]" dev="sockfs" ino=85124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.866324][T27986] loop4: detected capacity change from 0 to 128 [ 321.046815][T28000] loop4: detected capacity change from 0 to 1024 [ 321.130393][T28000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.154958][T28007] loop8: detected capacity change from 0 to 1024 [ 321.163484][T28007] EXT4-fs: Ignoring removed orlov option [ 321.175156][T28007] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 321.208736][T28007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.226002][T28007] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.10372: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 321.249876][T28007] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.10372: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 321.373117][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.455785][ T28] audit: type=1400 audit(2000000063.930:17880): avc: denied { bind } for pid=28029 comm="syz.7.10382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.481320][ T28] audit: type=1326 audit(2000000063.950:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.9.10381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18287fc799 code=0x7ffc0000 [ 321.481809][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.529968][ T28] audit: type=1326 audit(2000000063.950:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.9.10381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18287fc799 code=0x7ffc0000 [ 321.591732][ T28] audit: type=1326 audit(2000000063.990:17883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.9.10381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f18287fc799 code=0x7ffc0000 [ 321.665335][ T28] audit: type=1326 audit(2000000064.000:17884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28028 comm="syz.9.10381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18287fc799 code=0x7ffc0000 [ 322.011745][T28073] loop8: detected capacity change from 0 to 128 [ 322.030728][T28074] loop9: detected capacity change from 0 to 512 [ 322.067694][T28073] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.069159][T28076] xt_hashlimit: size too large, truncated to 1048576 [ 322.092005][T28073] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 322.132646][T24497] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.150116][T28074] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.201974][T28074] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (6000000) [ 322.231655][T28074] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 322.472978][T28103] __nla_validate_parse: 2 callbacks suppressed [ 322.473036][T28103] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10414'. [ 322.519049][T28103] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 322.530976][T28103] bond1 (unregistering): Released all slaves [ 322.699211][T28111] loop0: detected capacity change from 0 to 8192 [ 322.701115][T28113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10419'. [ 322.733940][T28115] loop9: detected capacity change from 0 to 512 [ 322.782061][T28111] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.890928][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10423'. [ 322.914922][T28128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10425'. [ 322.944659][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10423'. [ 323.035892][T28131] loop0: detected capacity change from 0 to 128 [ 323.177734][T28140] loop9: detected capacity change from 0 to 164 [ 323.186683][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10423'. [ 323.204580][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10423'. [ 323.278690][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10423'. [ 323.300389][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10423'. [ 323.614430][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10447'. [ 323.875945][T28194] vxcan1 speed is unknown, defaulting to 1000 [ 323.962030][T28194] xfrm0 speed is unknown, defaulting to 1000 [ 324.133234][T28194] chnl_net:caif_netlink_parms(): no params data found [ 324.176355][T28194] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.183574][T28194] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.190889][T28194] bridge_slave_0: entered allmulticast mode [ 324.197587][T28194] bridge_slave_0: entered promiscuous mode [ 324.204435][T28194] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.211724][T28194] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.218952][T28194] bridge_slave_1: entered allmulticast mode [ 324.225902][T28194] bridge_slave_1: entered promiscuous mode [ 324.246356][T28194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.257752][T28194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.279663][T28194] team0: Port device team_slave_0 added [ 324.286661][T28194] team0: Port device team_slave_1 added [ 324.304060][T28194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.311008][T28194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.337656][T28194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.349742][T28194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.356934][T28194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.384656][T28194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.411895][T28194] hsr_slave_0: entered promiscuous mode [ 324.418004][T28194] hsr_slave_1: entered promiscuous mode [ 324.424040][T28194] debugfs: 'hsr0' already exists in 'hsr' [ 324.429804][T28194] Cannot create hsr debugfs directory [ 324.640117][T28269] loop4: detected capacity change from 0 to 512 [ 324.674620][T28269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.773048][T28194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.790241][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 324.790260][ T28] audit: type=1400 audit(2000000067.250:17912): avc: denied { write } for pid=28289 comm="syz.9.10493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.825830][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.837396][T28194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.845837][ T28] audit: type=1400 audit(2000000067.250:17913): avc: denied { bind } for pid=28291 comm="syz.7.10485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.865979][ T28] audit: type=1400 audit(2000000067.250:17914): avc: denied { name_bind } for pid=28291 comm="syz.7.10485" src=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 324.942331][ T28] audit: type=1400 audit(2000000067.260:17915): avc: denied { node_bind } for pid=28291 comm="syz.7.10485" saddr=ff85:8ef5:7f33:9e31:b3b:ea7f:3d5f:51d4 src=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 324.974137][T28194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.003722][T28194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.123311][T28194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.163123][T28194] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.196960][T28345] loop8: detected capacity change from 0 to 128 [ 325.203559][ T28] audit: type=1400 audit(2000000067.670:17916): avc: denied { setopt } for pid=28344 comm="syz.9.10498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 325.228744][T28342] vxcan1 speed is unknown, defaulting to 1000 [ 325.238159][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.245392][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.294536][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.297871][ T28] audit: type=1400 audit(2000000067.670:17917): avc: denied { getopt } for pid=28344 comm="syz.9.10498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 325.301635][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.381548][ T28] audit: type=1326 audit(2000000067.850:17918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28362 comm="syz.7.10502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f490c799 code=0x7ffc0000 [ 325.408176][T28342] xfrm0 speed is unknown, defaulting to 1000 [ 325.427879][ T28] audit: type=1326 audit(2000000067.860:17919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28362 comm="syz.7.10502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f34f490c799 code=0x7ffc0000 [ 325.497389][ T28] audit: type=1326 audit(2000000067.860:17920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28362 comm="syz.7.10502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f490c799 code=0x7ffc0000 [ 325.522616][T28369] loop9: detected capacity change from 0 to 512 [ 325.536614][T28194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.542210][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.542210][ T1734] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 325.568016][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.568016][ T1734] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 325.582727][ T28] audit: type=1326 audit(2000000067.860:17921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28362 comm="syz.7.10502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f34f490c799 code=0x7ffc0000 [ 325.583529][T28369] EXT4-fs: Ignoring removed nobh option [ 325.622493][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.622493][ T1734] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 325.659731][T28369] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 325.668221][T28369] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.10512: invalid indirect mapped block 256 (level 1) [ 325.705160][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.705160][ T1734] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 325.737464][T28369] fserror_report: 3 callbacks suppressed [ 325.737481][T28369] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 325.754796][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.754796][ T1734] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 325.761178][T28194] veth0_vlan: entered promiscuous mode [ 325.771942][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.771942][ T1734] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 325.790865][T28392] loop4: detected capacity change from 0 to 512 [ 325.799105][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.799105][ T1734] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 325.814470][T28369] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.10512: invalid indirect mapped block 2683928664 (level 1) [ 325.816365][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.816365][ T1734] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 325.831611][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 325.831631][ C1] EXT4-fs (loop9): initial error at time 2000000068: ext4_free_branches:1023: inode 13 [ 325.848846][T28194] veth1_vlan: entered promiscuous mode [ 325.852020][ C1] [ 325.852031][ C1] EXT4-fs (loop9): last error at time 2000000068: ext4_free_branches:1023 [ 325.862672][T28392] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.867475][ C1] : inode 13 [ 325.899145][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.899145][ T1734] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 325.923607][T28392] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 325.931680][T28369] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 325.943042][T28392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 325.943141][T28369] EXT4-fs (loop9): 1 truncate cleaned up [ 325.943495][T28369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.979658][T28194] veth0_macvtap: entered promiscuous mode [ 325.981941][ T1734] kworker/u8:7: attempt to access beyond end of device [ 325.981941][ T1734] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 325.989643][T28392] EXT4-fs (loop4): orphan cleanup on readonly fs [ 326.021147][T28194] veth1_macvtap: entered promiscuous mode [ 326.046709][T28392] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10505: bg 0: block 361: padding at end of block bitmap is not set [ 326.062453][T28392] loop4: lost filesystem error report for type 5 error -117 [ 326.062715][T28392] EXT4-fs (loop4): Remounting filesystem read-only [ 326.076518][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 326.076535][ C1] EXT4-fs (loop4): initial error at time 2000000068: ext4_validate_block_bitmap:441 [ 326.076554][ C1] EXT4-fs (loop4): last error at time 2000000068: ext4_validate_block_bitmap:441 [ 326.081207][T28194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.110036][T28392] EXT4-fs (loop4): 1 truncate cleaned up [ 326.125100][T28369] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.10512: invalid indirect mapped block 1536 (level 1) [ 326.137017][T28392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 326.169873][T28194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.204683][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.215340][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.240677][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.251855][T28392] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.10505: dx entry: limit 0 != root limit 125 [ 326.269782][T23677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.278780][T28392] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.10505: Corrupt directory, running e2fsck is recommended [ 326.321721][ T1734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.390833][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 326.454617][T28434] loop2: detected capacity change from 0 to 512 [ 326.485291][T28434] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.10455: invalid block [ 326.511688][T28434] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 326.521640][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 326.532484][T28434] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10455: invalid indirect mapped block 4294967295 (level 1) [ 326.537240][ C1] EXT4-fs (loop2): initial error at time 2000000068: ext4_get_branch:178: inode 11: block 4294967295 [ 326.562137][ C1] EXT4-fs (loop2): last error at time 2000000068: ext4_get_branch:178: inode 11: block 4294967295 [ 326.599708][T28434] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 326.600382][T28434] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10455: invalid indirect mapped block 4294967295 (level 1) [ 326.623798][T28434] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 326.628929][T28434] EXT4-fs (loop2): 2 truncates cleaned up [ 326.662174][T28434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.736812][T28194] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.952169][T28482] loop4: detected capacity change from 0 to 1024 [ 326.989208][T28482] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.031016][T28482] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 327.045859][T28482] EXT4-fs (loop4): orphan cleanup on readonly fs [ 327.068733][T28482] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz.4.10523: Invalid inode table block 0 in block_group 0 [ 327.081786][T28482] loop4: lost filesystem error report for type 5 error -117 [ 327.082543][T28482] EXT4-fs (loop4): Remounting filesystem read-only [ 327.096397][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 327.096431][ C1] EXT4-fs (loop4): initial error at time 2000000069: __ext4_get_inode_loc:4782 [ 327.096465][ C1] EXT4-fs (loop4): last error at time 2000000069: __ext4_get_inode_loc:4782 [ 327.120765][T28482] EXT4-fs (loop4): 1 truncate cleaned up [ 327.132555][T28482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.271297][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.487874][T28561] __nla_validate_parse: 1 callbacks suppressed [ 327.487957][T28561] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10542'. [ 327.647849][T28579] bond1: ARP target 9.0.0.0 is already present [ 327.667659][T28579] bond1: option arp_ip_target: invalid value (9) [ 327.693436][T28577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.714779][T28579] bond1 (unregistering): Released all slaves [ 327.725914][T28577] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.761451][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 328.139381][T28639] netlink: 108 bytes leftover after parsing attributes in process `syz.7.10561'. [ 328.456498][T28645] tap0: tun_chr_ioctl cmd 2147767521 [ 328.477900][T28647] team0: No ports can be present during mode change [ 328.589039][T28662] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10572'. [ 328.624384][T28666] set_capacity_and_notify: 2 callbacks suppressed [ 328.624403][T28666] loop2: detected capacity change from 0 to 128 [ 328.698841][T28677] netlink: 'syz.7.10580': attribute type 9 has an invalid length. [ 328.812958][T28697] loop8: detected capacity change from 0 to 512 [ 328.843021][T28697] ext4 filesystem being mounted at /file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.859329][T28702] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10590'. [ 328.872620][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10591'. [ 328.881744][T28705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10591'. [ 328.935836][T28714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28714 comm=syz.2.10595 [ 328.969355][T28716] loop8: detected capacity change from 0 to 2048 [ 328.998741][T28720] loop2: detected capacity change from 0 to 1024 [ 329.007221][T28720] EXT4-fs: Ignoring removed orlov option [ 329.094154][T28731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10601'. [ 329.104575][T28729] bond2 (unregistering): Released all slaves [ 329.153386][T28736] loop2: detected capacity change from 0 to 2048 [ 329.183429][T28738] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10604'. [ 329.319584][T28755] program syz.2.10611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.372308][T28760] loop2: detected capacity change from 0 to 128 [ 329.384558][T28760] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.405750][T28760] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 329.435870][T28763] netlink: 'syz.8.10615': attribute type 1 has an invalid length. [ 329.455852][T28763] netlink: 'syz.8.10615': attribute type 1 has an invalid length. [ 329.696187][T28793] sctp: [Deprecated]: syz.2.10627 (pid 28793) Use of int in maxseg socket option. [ 329.696187][T28793] Use struct sctp_assoc_value instead [ 329.784724][T28800] netlink: 'syz.2.10632': attribute type 2 has an invalid length. [ 329.861796][T28814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10639'. [ 329.937221][T28820] loop2: detected capacity change from 0 to 1024 [ 329.980440][T28826] loop2: detected capacity change from 0 to 512 [ 330.017307][T28826] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 330.027395][T28826] System zones: 0-2, 18-18, 34-34 [ 330.042860][T28826] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 330.086529][T28826] EXT4-fs (loop2): Remounting filesystem read-only [ 330.093098][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 330.093120][ C1] EXT4-fs (loop2): initial error at time 2000000328: ext4_mb_generate_buddy:1315 [ 330.093144][ C1] EXT4-fs (loop2): last error at time 2000000328: ext4_mb_generate_buddy:1315 [ 330.123946][T28826] EXT4-fs (loop2): 1 truncate cleaned up [ 330.130046][T28826] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.141788][T22051] __quota_error: 20 callbacks suppressed [ 330.141802][T22051] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 330.163472][T22051] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 330.174098][T22051] Quota error (device loop2): write_blk: dquota write failed [ 330.181513][T22051] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 330.204370][T28837] loop4: detected capacity change from 0 to 1024 [ 330.205095][T22051] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 330.240924][T22051] Quota error (device loop2): write_blk: dquota write failed [ 330.274951][T22051] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 330.302934][T22051] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 330.302991][T22051] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 330.303023][T22051] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 330.303064][T22051] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 330.311949][T28845] batadv_slave_1: entered promiscuous mode [ 330.369111][T28849] loop4: detected capacity change from 0 to 256 [ 330.376658][T28844] batadv_slave_1: left promiscuous mode [ 330.391039][T28849] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.415952][T28849] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.622288][T28883] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 330.622288][T28883] The task syz.2.10660 (28883) triggered the difference, watch for misbehavior. [ 330.666300][T28884] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.735835][ T28] audit: type=1400 audit(2000000329.210:17940): avc: denied { remount } for pid=28881 comm="syz.8.10667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 330.779846][T28884] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 330.804559][ T28] audit: type=1400 audit(2000000329.280:17941): avc: denied { rmdir } for pid=28881 comm="syz.8.10667" name="control" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 330.964958][T28918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10683'. [ 331.482377][T28966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.515239][T28966] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.534729][T28966] EXT4-fs (loop4): shut down requested (0) [ 331.543064][T28966] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 331.558848][T28966] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 331.591128][T28966] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 331.810438][T28990] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.10714: corrupted inode contents [ 331.823994][T28990] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.10714: mark_inode_dirty error [ 331.842748][T28990] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.10714: corrupted inode contents [ 331.855042][T28990] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.10714: mark_inode_dirty error [ 331.881534][T28990] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.10714: corrupted inode contents [ 331.895490][T28990] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.10714: mark_inode_dirty error [ 331.909253][T28990] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.10714: corrupted inode contents [ 331.921789][T28990] EXT4-fs error (device loop8): ext4_truncate:4587: inode #15: comm syz.8.10714: mark_inode_dirty error [ 331.949336][T28990] EXT4-fs error (device loop8) in ext4_setattr:5983: Corrupt filesystem [ 331.987637][T28999] EXT4-fs: inline encryption not supported [ 332.418401][T29016] EXT4-fs: inline encryption not supported [ 332.438727][T29016] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.476991][T29016] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.10724: Freeing blocks not in datazone - block = 0, count = 4096 [ 332.491741][T29016] loop2: lost filesystem error report for type 5 error -117 [ 332.491955][T29016] EXT4-fs (loop2): Remounting filesystem read-only [ 332.505821][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 332.505844][ C1] EXT4-fs (loop2): initial error at time 2000000330: ext4_free_blocks:6724 [ 332.505878][ C1] EXT4-fs (loop2): last error at time 2000000330: ext4_free_blocks:6724 [ 332.536948][T29016] EXT4-fs (loop2): 1 orphan inode deleted [ 332.553646][T22051] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 332.581715][T22051] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 332.584958][T29016] EXT4-fs (loop2): shut down requested (1) [ 332.622788][T22051] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 332.637748][T29031] EXT4-fs: Ignoring removed nobh option [ 332.645168][T29031] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 332.666859][T29031] EXT4-fs (loop8): 1 truncate cleaned up [ 332.984974][ T30] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.099119][T29055] vxcan1 speed is unknown, defaulting to 1000 [ 333.186547][T29055] xfrm0 speed is unknown, defaulting to 1000 [ 333.228904][ T30] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.309482][ T30] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.459583][ T30] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.568470][T29109] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.591734][T29109] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.10764: lblock 0 mapped to illegal pblock 0 (length 1) [ 333.624989][T29055] chnl_net:caif_netlink_parms(): no params data found [ 333.632332][T29109] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 333.647770][T29109] EXT4-fs (loop4): This should not happen!! Data will be lost [ 333.647770][T29109] [ 333.679108][T29109] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.10764: lblock 0 mapped to illegal pblock 0 (length 1) [ 333.703550][T29055] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.717318][T29055] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.742060][T29055] bridge_slave_0: entered allmulticast mode [ 333.783367][T29055] bridge_slave_0: entered promiscuous mode [ 333.800133][T29055] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.808195][T29055] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.816024][T29055] bridge_slave_1: entered allmulticast mode [ 333.822592][T29055] bridge_slave_1: entered promiscuous mode [ 333.877257][T29055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.888076][T29055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.041351][T29141] __nla_validate_parse: 2 callbacks suppressed [ 334.041369][T29141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10772'. [ 334.060627][ T30] team0: Port device bond0 removed [ 334.067232][ T30] bond0 (unregistering): Released all slaves [ 334.083642][T29138] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10782'. [ 334.098096][T29055] team0: Port device team_slave_0 added [ 334.107383][T29055] team0: Port device team_slave_1 added [ 334.152046][T29055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.159014][T29055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.192285][T29145] set_capacity_and_notify: 11 callbacks suppressed [ 334.192301][T29145] loop4: detected capacity change from 0 to 512 [ 334.239057][T29055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.260957][T29055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.284423][T29055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.334890][T29055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.367669][T29161] netlink: 'syz.8.10783': attribute type 10 has an invalid length. [ 334.386206][T29161] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10783'. [ 334.397479][ T30] hsr_slave_0: left promiscuous mode [ 334.416117][ T30] hsr_slave_1: left promiscuous mode [ 334.430806][ T30] veth1_macvtap: left promiscuous mode [ 334.440518][ T30] veth0_macvtap: left promiscuous mode [ 334.463019][ T30] veth1_vlan: left promiscuous mode [ 334.473231][ T30] veth0_vlan: left promiscuous mode [ 334.606558][T29161] team0: Port device geneve1 added [ 334.646727][T29055] hsr_slave_0: entered promiscuous mode [ 334.663428][T29055] hsr_slave_1: entered promiscuous mode [ 334.678399][T29055] debugfs: 'hsr0' already exists in 'hsr' [ 334.691820][T29055] Cannot create hsr debugfs directory [ 335.263711][T29055] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 335.285094][T29055] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 335.301930][T29055] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 335.324333][T29273] loop8: detected capacity change from 0 to 1024 [ 335.326997][T29055] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 335.422634][T29055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.436213][T29055] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.446774][T29294] loop2: detected capacity change from 0 to 512 [ 335.463819][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.471241][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.491003][T29298] loop8: detected capacity change from 0 to 128 [ 335.506383][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.513526][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.655943][T29055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.770338][T29333] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.796599][T29333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10815'. [ 335.840028][T29339] loop4: detected capacity change from 0 to 1024 [ 335.871298][T29345] netlink: 'syz.2.10819': attribute type 1 has an invalid length. [ 335.923393][T29349] loop2: detected capacity change from 0 to 4096 [ 335.930505][T29339] EXT4-fs: Ignoring removed orlov option [ 335.954825][T29349] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.10820: corrupted inode contents [ 335.995311][T29055] veth0_vlan: entered promiscuous mode [ 336.016272][T29055] veth1_vlan: entered promiscuous mode [ 336.030963][T29349] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.10820: mark_inode_dirty error [ 336.039540][T29055] veth0_macvtap: entered promiscuous mode [ 336.050137][T29055] veth1_macvtap: entered promiscuous mode [ 336.061852][T29364] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10823'. [ 336.079254][T29349] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.10820: corrupted inode contents [ 336.095508][T29055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.122196][T29349] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.10820: mark_inode_dirty error [ 336.143188][T29055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.151924][T29349] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.10820: corrupted inode contents [ 336.175999][T29349] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.10820: mark_inode_dirty error [ 336.187971][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.207946][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.227146][T29349] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.10820: corrupted inode contents [ 336.239607][T29349] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.10820: mark_inode_dirty error [ 336.253266][T29349] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 336.263709][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.264138][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 336.264151][ T28] audit: type=1400 audit(2000000590.732:17962): avc: denied { connect } for pid=29382 comm="syz.7.10834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 336.302367][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.367100][T29392] loop4: detected capacity change from 0 to 1024 [ 336.384800][T29392] EXT4-fs: Ignoring removed orlov option [ 336.390567][T29392] EXT4-fs: Ignoring removed nobh option [ 336.658083][T29428] loop2: detected capacity change from 0 to 1024 [ 336.684448][T29428] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.711708][ T28] audit: type=1400 audit(2000000591.172:17963): avc: denied { ioctl } for pid=29432 comm="syz.9.10855" path="socket:[88760]" dev="sockfs" ino=88760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 336.748565][T29428] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.10852: lblock 0 mapped to illegal pblock 0 (length 1) [ 336.774135][T29428] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 336.786652][T29428] EXT4-fs (loop2): This should not happen!! Data will be lost [ 336.786652][T29428] [ 336.822151][T29428] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.10852: lblock 0 mapped to illegal pblock 0 (length 1) [ 336.866595][ T28] audit: type=1326 audit(2000000591.332:17964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 336.920156][T29446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10860'. [ 336.951069][ T28] audit: type=1326 audit(2000000591.332:17965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 336.987066][ T28] audit: type=1326 audit(2000000591.332:17966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 337.000055][T29451] loop9: detected capacity change from 0 to 1024 [ 337.013583][ T28] audit: type=1326 audit(2000000591.332:17967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 337.045480][ T28] audit: type=1326 audit(2000000591.332:17968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 337.069968][ T28] audit: type=1326 audit(2000000591.362:17969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 337.095372][ T28] audit: type=1326 audit(2000000591.362:17970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 337.119914][ T28] audit: type=1326 audit(2000000591.372:17971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29443 comm="syz.9.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210891c799 code=0x7ffc0000 [ 337.167477][T29451] ext4 filesystem being mounted at /8/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.208238][T29451] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.10863: lblock 0 mapped to illegal pblock 0 (length 6) [ 337.236321][T29463] netlink: 'syz.2.10866': attribute type 2 has an invalid length. [ 337.249134][T29451] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 337.280100][T29451] EXT4-fs (loop9): This should not happen!! Data will be lost [ 337.280100][T29451] [ 337.295269][T29451] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 8: comm syz.9.10863: lblock 8 mapped to illegal pblock 8 (length 8) [ 337.336900][T29451] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 337.366387][T29468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10868'. [ 337.369818][T29451] EXT4-fs (loop9): This should not happen!! Data will be lost [ 337.369818][T29451] [ 337.405066][T29451] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10863: bg 0: block 112: padding at end of block bitmap is not set [ 337.853075][T29500] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10883'. [ 337.873105][T29500] netlink: 'syz.9.10883': attribute type 5 has an invalid length. [ 338.514561][T29554] loop8: detected capacity change from 0 to 764 [ 338.541057][T29554] rock: directory entry would overflow storage [ 338.558085][T29554] rock: sig=0x5245, size=8, remaining=5 [ 338.834346][T29587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.874376][T29587] EXT4-fs mount: 42 callbacks suppressed [ 338.874394][T29587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.901125][T29587] EXT4-fs (loop4): shut down requested (1) [ 338.945800][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.151073][T29619] vxcan1 speed is unknown, defaulting to 1000 [ 339.201299][T29619] xfrm0 speed is unknown, defaulting to 1000 [ 339.300605][T29629] set_capacity_and_notify: 1 callbacks suppressed [ 339.300620][T29629] loop9: detected capacity change from 0 to 2048 [ 339.344301][T29629] loop9: p3 p4 < > [ 339.352555][T29629] loop9: p3 start 11362048 is beyond EOD, truncated [ 339.365691][ T2999] loop9: p3 p4 < > [ 339.371749][ T2999] loop9: p3 start 11362048 is beyond EOD, truncated [ 339.468596][T18930] udevd[18930]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 339.501357][T29648] netlink: 'syz.9.10951': attribute type 10 has an invalid length. [ 339.509652][T29648] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10951'. [ 339.524528][T29648] team0: Port device geneve1 added [ 339.669984][T29663] netlink: 128 bytes leftover after parsing attributes in process `syz.8.10958'. [ 339.843526][T29687] loop8: detected capacity change from 0 to 1024 [ 339.896313][T29687] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.950192][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.066504][T29714] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10982'. [ 340.088547][T29719] program syz.8.10985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.095519][T29714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10982'. [ 340.120766][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10987'. [ 340.135212][T29724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10987'. [ 340.179234][T29732] program syz.4.10989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.309169][T29749] loop9: detected capacity change from 0 to 4096 [ 340.329407][T29749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.368843][T29055] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.483685][T29767] loop9: detected capacity change from 0 to 2048 [ 340.535472][T29767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.548687][T29767] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.751673][T29782] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11013'. [ 340.924663][ T30] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 340.949830][ T30] EXT4-fs (loop9): Remounting filesystem read-only [ 340.956679][ T58] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 341.120465][T29055] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.242863][T29806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11024'. [ 341.363940][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 341.363956][ T28] audit: type=1326 audit(2000000595.832:18016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29820 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 341.419957][T29827] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 341.430033][ T28] audit: type=1400 audit(2000000595.832:18017): avc: denied { getopt } for pid=29823 comm="syz.4.11032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.451485][T29827] bond1 (unregistering): Released all slaves [ 341.460949][ T28] audit: type=1326 audit(2000000595.862:18018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29820 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 341.540510][T29837] netlink: 212 bytes leftover after parsing attributes in process `syz.2.11038'. [ 341.651566][T29856] loop2: detected capacity change from 0 to 128 [ 341.679979][T29856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.693675][T29858] loop9: detected capacity change from 0 to 128 [ 341.703052][T29856] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.726508][T29856] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.835640][T28194] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.967541][ T28] audit: type=1400 audit(2000000596.432:18019): avc: denied { getopt } for pid=29872 comm="syz.8.11054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.992512][T29879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11057'. [ 342.154893][ T28] audit: type=1400 audit(2000000596.622:18020): avc: denied { append } for pid=29895 comm="syz.2.11064" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 342.786167][T29958] loop9: detected capacity change from 0 to 128 [ 342.978940][ T28] audit: type=1400 audit(2000000597.442:18021): avc: denied { setopt } for pid=29982 comm="syz.7.11105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.994002][T29980] team0: Device gtp0 is of different type [ 343.154293][T29994] loop4: detected capacity change from 0 to 512 [ 343.196348][T29999] loop9: detected capacity change from 0 to 512 [ 343.235480][T30003] xt_TCPMSS: Only works on TCP SYN packets [ 343.242616][T29999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.257853][T29994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.273564][T29999] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 343.288664][T29999] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #11: comm syz.9.11112: corrupted inode contents [ 343.300693][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 343.300719][ C0] EXT4-fs (loop9): initial error at time 2000000597: mb_free_blocks:2047: inode 11: block 64 [ 343.300752][ C0] EXT4-fs (loop9): last error at time 2000000597: mb_free_blocks:2047: inode 11: block 64 [ 343.300762][T29994] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.318948][T29994] EXT4-fs (loop4): shut down requested (1) [ 343.327375][T29999] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.344786][T29999] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #11: comm syz.9.11112: mark_inode_dirty error [ 343.347955][T29994] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 343.355959][T29999] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.377596][T29994] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 343.391666][T29999] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.11112: invalid indirect mapped block 1 (level 1) [ 343.428900][T29999] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.429134][T29999] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #11: comm syz.9.11112: corrupted inode contents [ 343.456058][T29999] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.456267][T29999] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 343.475232][T29999] loop9: lost filesystem error report for type 5 error -117 [ 343.475457][T29999] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #11: comm syz.9.11112: corrupted inode contents [ 343.476182][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.483699][T29999] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.511675][T29999] EXT4-fs error (device loop9): ext4_truncate:4587: inode #11: comm syz.9.11112: mark_inode_dirty error [ 343.566928][T30027] usb usb8: usbfs: process 30027 (syz.4.11123) did not claim interface 0 before use [ 343.570634][T29999] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.588622][T29999] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 343.609495][T29999] loop9: lost filesystem error report for type 5 error -117 [ 343.611668][T29999] EXT4-fs (loop9): 1 truncate cleaned up [ 343.635492][T29999] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.664328][T29055] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.708561][T30036] sctp: [Deprecated]: syz.4.11126 (pid 30036) Use of int in maxseg socket option. [ 343.708561][T30036] Use struct sctp_assoc_value instead [ 343.762172][T30046] xt_socket: unknown flags 0x48 [ 343.901056][T30066] loop4: detected capacity change from 0 to 512 [ 343.911984][T30064] erspan0: entered promiscuous mode [ 343.959664][T30066] EXT4-fs: Ignoring removed bh option [ 343.972474][T30076] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.995568][T30066] EXT4-fs: inline encryption not supported [ 344.013756][T30076] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 344.020370][T30066] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.062408][T30066] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 344.079440][T30066] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11141: bg 0: block 248: padding at end of block bitmap is not set [ 344.087042][ T28] audit: type=1400 audit(2000000598.552:18022): avc: denied { lock } for pid=30083 comm="syz.7.11151" path="socket:[90805]" dev="sockfs" ino=90805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 344.094501][T30066] loop4: lost filesystem error report for type 5 error -117 [ 344.119221][T30066] Quota error (device loop4): write_blk: dquota write failed [ 344.126633][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 344.126654][ C0] EXT4-fs (loop4): last error at time 2000000598: ext4_validate_block_bitmap:441 [ 344.150325][T30066] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 344.160622][T30066] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.11141: Failed to acquire dquot type 1 [ 344.163340][T30091] tipc: Enabling of bearer rejected, failed to enable media [ 344.172115][T30066] loop4: lost filesystem error report for type 5 error -117 [ 344.194017][T30066] EXT4-fs (loop4): 1 truncate cleaned up [ 344.253792][T30066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 344.314302][T30066] syz.4.11141 (30066) used greatest stack depth: 8184 bytes left [ 344.374764][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 344.537884][ T28] audit: type=1326 audit(2000000599.002:18023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30123 comm="syz.8.11167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde2612c799 code=0x0 [ 344.748922][T30153] vxcan1 speed is unknown, defaulting to 1000 [ 344.800340][T30153] xfrm0 speed is unknown, defaulting to 1000 [ 344.946492][T30180] set_capacity_and_notify: 1 callbacks suppressed [ 344.946514][T30180] loop2: detected capacity change from 0 to 128 [ 345.311700][T30196] __nla_validate_parse: 7 callbacks suppressed [ 345.311773][T30196] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11202'. [ 345.700663][T30234] loop2: detected capacity change from 0 to 8192 [ 345.712795][T30234] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.841492][T30245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11224'. [ 346.163217][T30279] loop9: detected capacity change from 0 to 128 [ 346.230149][T30285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11244'. [ 346.245776][T30285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11244'. [ 346.288010][T30281] loop4: detected capacity change from 0 to 8192 [ 346.599288][T30325] loop8: detected capacity change from 0 to 512 [ 346.622621][T30325] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.654870][T30325] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.771987][T30325] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.833308][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.846990][T30338] veth1_to_bond: entered allmulticast mode [ 346.866474][T30337] veth1_to_bond: left allmulticast mode [ 346.875488][T30339] loop9: detected capacity change from 0 to 1024 [ 346.913644][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 346.913658][ T28] audit: type=1400 audit(2000000601.382:18026): avc: denied { ioctl } for pid=30342 comm="syz.8.11268" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 346.957317][T30339] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 346.992881][T30339] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 347.012060][T30339] EXT4-fs (loop9): invalid journal inode [ 347.020145][T30339] EXT4-fs (loop9): can't get journal size [ 347.033598][T30339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.065468][T30339] netlink: 56 bytes leftover after parsing attributes in process `syz.9.11266'. [ 347.357658][T30352] loop8: detected capacity change from 0 to 1024 [ 347.385339][T30352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.431559][T30352] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.11273: Allocating blocks 497-513 which overlap fs metadata [ 347.453093][T30352] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.11273: Allocating blocks 497-513 which overlap fs metadata [ 347.470333][T30351] EXT4-fs (loop8): pa ffff8881081e32a0: logic 48, phys. 177, len 21 [ 347.478508][T30351] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 347.478715][T30359] loop2: detected capacity change from 0 to 4096 [ 347.520147][T30359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.835426][T28194] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.837030][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.870165][T29055] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.058589][T30392] loop8: detected capacity change from 0 to 512 [ 348.093577][T30396] program syz.9.11291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.114802][T30392] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.11289: corrupted in-inode xattr: invalid ea_ino [ 348.131971][T30392] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 348.132523][T30392] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.11289: couldn't read orphan inode 15 (err -117) [ 348.141729][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 348.141751][ C0] EXT4-fs (loop8): initial error at time 2000000602: ext4_iget_extra_inode:5025: inode 15 [ 348.141777][ C0] EXT4-fs (loop8): last error at time 2000000602: ext4_iget_extra_inode:5025: inode 15 [ 348.208217][T30402] 9p: Unknown access argument 18446744073709551615: -34 [ 348.230579][T30392] loop8: lost filesystem error report for type 5 error -117 [ 348.237956][T30392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.272912][T30408] loop2: detected capacity change from 0 to 128 [ 348.285585][T30408] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 348.302345][T30408] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 348.305919][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.331965][T30410] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.350456][T30408] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.11296: checksumming directory block 0 [ 348.373713][T30410] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.11297: missing EA_INODE flag [ 348.375689][ T28] audit: type=1400 audit(2000000602.842:18027): avc: denied { link } for pid=30409 comm="syz.9.11297" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 348.408248][T30410] EXT4-fs (loop9): Remounting filesystem read-only [ 348.481741][T28194] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.491242][T30433] netlink: 'syz.8.11307': attribute type 30 has an invalid length. [ 348.499735][T29055] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.524770][T30436] netlink: 204 bytes leftover after parsing attributes in process `syz.2.11304'. [ 348.614455][T30445] program syz.2.11311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.663325][ T28] audit: type=1326 audit(2000000603.132:18028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.4.11313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ef903c799 code=0x0 [ 348.920364][T30479] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11325'. [ 348.948358][T30481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11326'. [ 348.972652][T30487] netlink: 88 bytes leftover after parsing attributes in process `syz.9.11329'. [ 349.007783][T30491] program syz.2.11330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.031896][T30490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.075385][T29055] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.088388][ T28] audit: type=1400 audit(2000000603.562:18029): avc: denied { write } for pid=30498 comm="syz.2.11334" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 349.238081][T30512] netlink: 277 bytes leftover after parsing attributes in process `syz.9.11339'. [ 349.334852][ T28] audit: type=1326 audit(2000000603.802:18030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30521 comm="syz.2.11344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 349.361815][ T28] audit: type=1326 audit(2000000603.802:18031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30521 comm="syz.2.11344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 349.434601][ T28] audit: type=1326 audit(2000000603.822:18032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30521 comm="syz.2.11344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 349.524004][ T28] audit: type=1326 audit(2000000603.822:18033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30521 comm="syz.2.11344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 349.590442][ T28] audit: type=1326 audit(2000000603.822:18034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30521 comm="syz.2.11344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 349.677310][T30545] tap0: tun_chr_ioctl cmd 35108 [ 349.714870][ T28] audit: type=1326 audit(2000000603.822:18035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30521 comm="syz.2.11344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fc12c12c799 code=0x7ffc0000 [ 349.826816][T30564] program syz.9.11364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.837919][T30558] vxcan1 speed is unknown, defaulting to 1000 [ 349.950981][T30558] xfrm0 speed is unknown, defaulting to 1000 [ 350.066274][T30589] set_capacity_and_notify: 2 callbacks suppressed [ 350.066290][T30589] loop9: detected capacity change from 0 to 512 [ 350.203633][T30598] 9p: Bad value for 'rfdno' [ 350.300922][T30605] loop9: detected capacity change from 0 to 2048 [ 350.493034][T30621] __nla_validate_parse: 5 callbacks suppressed [ 350.493054][T30621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11391'. [ 350.869874][T30653] IPv6: NLM_F_REPLACE set, but no existing node found! [ 351.323037][T30683] loop4: detected capacity change from 0 to 2048 [ 351.356955][T30683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.388311][T30683] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.408115][T30683] EXT4-fs (loop4): shut down requested (2) [ 351.425772][T30683] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 351.437217][T30683] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 351.457365][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.534910][T30692] dummy0: entered allmulticast mode [ 351.543976][T30692] dummy0: left allmulticast mode [ 351.563230][T30693] loop9: detected capacity change from 0 to 512 [ 351.587307][T30693] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.838026][T30709] loop8: detected capacity change from 0 to 1024 [ 351.858305][T30709] EXT4-fs: inline encryption not supported [ 351.917833][T30709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.978567][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.979786][T30721] vcan0: tx address claim with dest, not broadcast [ 352.118213][T30729] loop4: detected capacity change from 0 to 1024 [ 352.172461][T30729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.271331][T30729] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 352.381925][T30747] program syz.2.11449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.404511][T25952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.476108][T30750] loop8: detected capacity change from 0 to 2048 [ 352.516091][T30750] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.532854][T30755] netlink: 'syz.2.11450': attribute type 5 has an invalid length. [ 352.588767][T30750] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.600972][T30757] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11453'. [ 352.632300][T30757] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11453'. [ 352.696193][T30759] loop2: detected capacity change from 0 to 128 [ 352.739695][ T2999] ================================================================== [ 352.747809][ T2999] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 352.755716][ T2999] [ 352.758048][ T2999] write to 0xffff88811a55b9c0 of 4 bytes by task 18930 on cpu 0: [ 352.765771][ T2999] d_make_discardable+0x4f/0xa0 [ 352.770729][ T2999] simple_unlink+0x68/0x80 [ 352.775173][ T2999] shmem_unlink+0x12d/0x140 [ 352.779696][ T2999] vfs_unlink+0x1c7/0x490 [ 352.784034][ T2999] filename_unlinkat+0x1e2/0x410 [ 352.788991][ T2999] __se_sys_unlink+0x2b/0xe0 [ 352.793600][ T2999] __x64_sys_unlink+0x1f/0x30 [ 352.798278][ T2999] x64_sys_call+0x2eb6/0x3020 [ 352.802961][ T2999] do_syscall_64+0x12c/0x370 [ 352.807551][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.813450][ T2999] [ 352.815881][ T2999] read to 0xffff88811a55b9c0 of 4 bytes by task 2999 on cpu 1: [ 352.823424][ T2999] step_into_slowpath+0xea/0x4c0 [ 352.828392][ T2999] path_lookupat+0x330/0x500 [ 352.833172][ T2999] filename_lookup+0x190/0x390 [ 352.837945][ T2999] do_readlinkat+0x74/0x2f0 [ 352.842469][ T2999] __x64_sys_readlink+0x47/0x60 [ 352.847320][ T2999] x64_sys_call+0x2b51/0x3020 [ 352.852010][ T2999] do_syscall_64+0x12c/0x370 [ 352.856606][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.862586][ T2999] [ 352.864924][ T2999] value changed: 0x08300080 -> 0x00004080 [ 352.870651][ T2999] [ 352.873184][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 352.879427][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 352.888361][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.898511][ T2999] ================================================================== [ 353.145516][ T30] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 353.161218][ T30] EXT4-fs (loop8): Remounting filesystem read-only [ 353.168133][ T50] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:5037: inode #15: block 9: len 7: ext4_ext_map_blocks returned -30 [ 353.237044][T24497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.