last executing test programs: 3m9.302842019s ago: executing program 0 (id=225): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xd, 0x8003, 0x401, 0x8, r1}, &(0x7f0000000200)=0x10) 3m9.301438009s ago: executing program 0 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x21, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m9.191456503s ago: executing program 0 (id=232): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe20, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 3m9.168707484s ago: executing program 0 (id=234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002102, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3m8.293379081s ago: executing program 0 (id=263): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) 3m7.900903934s ago: executing program 0 (id=270): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2m52.818846263s ago: executing program 32 (id=270): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 2m45.103035139s ago: executing program 4 (id=487): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m45.007390602s ago: executing program 4 (id=493): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000140)) 2m42.772189813s ago: executing program 4 (id=531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3f, 0x7, 0x0, "e28af67fa3165ab8e4b3bee3ab8bc68d5ff30ea405ae2d97d2fc83f5e86a0a59389e0094b9bbcce6e7480f3be49b7e2e942b8f3111ec7a3f9936ae40"}]}}}}}}}, 0x0) 2m41.908561391s ago: executing program 4 (id=555): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0x3) 2m41.865278362s ago: executing program 4 (id=556): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m41.845869672s ago: executing program 4 (id=557): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 2m26.773321842s ago: executing program 33 (id=557): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 1m51.824880543s ago: executing program 6 (id=1532): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x22020600) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) socket$inet6(0xa, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 1m51.782372655s ago: executing program 6 (id=1533): bind$rds(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'bond_slave_0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1m51.761279865s ago: executing program 6 (id=1534): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 1m51.740247006s ago: executing program 6 (id=1535): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 1m51.711692037s ago: executing program 6 (id=1536): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x111880, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m51.543705482s ago: executing program 6 (id=1538): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m36.21470911s ago: executing program 34 (id=1538): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 31.777200399s ago: executing program 5 (id=3358): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002800)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_TABLE={0x8, 0xf, 0x7fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0xfff8}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 31.335916953s ago: executing program 5 (id=3364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 31.253500976s ago: executing program 5 (id=3369): r0 = socket$kcm(0x2, 0x3, 0x84) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) 31.196279318s ago: executing program 5 (id=3371): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 30.884155288s ago: executing program 5 (id=3386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) 30.319192065s ago: executing program 5 (id=3387): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 30.294118616s ago: executing program 35 (id=3387): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 17.864773921s ago: executing program 1 (id=3650): lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="5ba0", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x4040891) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 16.702620958s ago: executing program 1 (id=3660): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x3ff, 0xd89, 0x5, 0x3e20}) 16.273808472s ago: executing program 1 (id=3670): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x992}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x10001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x10) 15.250119585s ago: executing program 1 (id=3682): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) 15.249711785s ago: executing program 1 (id=3685): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) syz_io_uring_setup(0x5b14, &(0x7f0000000280)={0x0, 0x33b6, 0x40040, 0x3, 0x269}, 0x0, 0x0, 0x0) 15.055155041s ago: executing program 1 (id=3688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x9fb, 0x5}, 0x8) 15.048430431s ago: executing program 36 (id=3688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x9fb, 0x5}, 0x8) 1.284708379s ago: executing program 7 (id=4020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20) 1.23976594s ago: executing program 7 (id=4023): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000021c0)='/sys/power/hibernate_compression_threads', 0x80, 0x0) mount$9p_fd(0x0, &(0x7f0000002300)='./cgroup\x00', &(0x7f0000002200), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.194729841s ago: executing program 3 (id=4033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x401, 0x200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 1.172407053s ago: executing program 3 (id=4026): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000003000000fa09000085", @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1.055081876s ago: executing program 8 (id=4030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) 1.015670537s ago: executing program 8 (id=4032): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x9) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 955.660409ms ago: executing program 3 (id=4034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xffff, r2, 0x6859}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4008894) 955.479269ms ago: executing program 8 (id=4035): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = inotify_init1(0x80000) r2 = dup3(r0, r1, 0x80000) listen(r2, 0x7) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 955.174189ms ago: executing program 3 (id=4036): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) setuid(0xee00) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 869.306122ms ago: executing program 8 (id=4037): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 869.161192ms ago: executing program 3 (id=4038): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007"], 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x640, 0x2000}, 0x3, {0x1, 0xfc}}) 858.079462ms ago: executing program 8 (id=4039): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) chdir(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000001100)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c00108008000340000000"], 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 857.951252ms ago: executing program 3 (id=4040): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0xd) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 753.140626ms ago: executing program 9 (id=4042): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80540, 0x1d4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 752.738356ms ago: executing program 8 (id=4043): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r0, 0x10}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 694.801837ms ago: executing program 9 (id=4044): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x27) mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x2000000, 0x0) 677.396928ms ago: executing program 9 (id=4045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf01b8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x43a1bd78, 0x8, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) 644.138299ms ago: executing program 2 (id=4046): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x2}]}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 616.09533ms ago: executing program 9 (id=4047): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 590.920641ms ago: executing program 2 (id=4048): r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x2a2f, &(0x7f0000000140)={0x0, 0x87e0, 0x20, 0x6, 0x152, 0x0, r1}) 510.744293ms ago: executing program 2 (id=4049): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 475.498695ms ago: executing program 2 (id=4050): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x100) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 446.798025ms ago: executing program 2 (id=4051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x3e) 382.822218ms ago: executing program 7 (id=4052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 340.315979ms ago: executing program 2 (id=4053): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 336.815309ms ago: executing program 7 (id=4054): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x40800) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40) 264.228871ms ago: executing program 7 (id=4055): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230055) close(r1) 188.590813ms ago: executing program 9 (id=4056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fsopen(&(0x7f00000001c0)='gadgetfs\x00', 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 139.737046ms ago: executing program 9 (id=4057): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000180)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 7 (id=4058): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): T4-fs (loop2): dirty_blocks=64 [ 173.604754][T10432] EXT4-fs (loop2): Block reservation details [ 173.618185][T10436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.633221][ T8383] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 173.650681][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 173.684616][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.016018][T10475] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 174.085627][T10481] lo speed is unknown, defaulting to 1000 [ 174.353986][T10506] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 174.681196][T10542] loop1: detected capacity change from 0 to 2048 [ 174.688521][T10542] EXT4-fs: quotafile must be on filesystem root [ 174.754630][T10547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.763323][T10547] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.773392][T10547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.802389][T10552] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 174.816140][T10547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.824460][T10547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.839641][T10547] veth1_vlan: left promiscuous mode [ 174.846093][T10547] veth0_vlan: left promiscuous mode [ 174.851922][T10547] veth0_vlan: entered promiscuous mode [ 174.860825][T10547] veth1_vlan: entered promiscuous mode [ 174.869745][T10547] veth1_macvtap: left promiscuous mode [ 174.876725][T10547] veth0_macvtap: left promiscuous mode [ 174.884559][T10547] veth0_macvtap: entered promiscuous mode [ 174.892469][T10547] veth1_macvtap: entered promiscuous mode [ 174.901900][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.910622][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.919799][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.928709][T10547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.941487][T10547] geneve2: left promiscuous mode [ 174.944172][T10559] loop1: detected capacity change from 0 to 256 [ 174.984289][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.991907][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.001813][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.008971][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.049276][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.059945][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.079491][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.090790][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.170694][T10565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.183826][T10565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34468 - 0 [ 175.248126][T10565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.259158][T10565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34468 - 0 [ 175.428607][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2729'. [ 175.503027][T10580] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 175.653981][T10595] bond0: left promiscuous mode [ 175.659522][T10595] bond_slave_0: left promiscuous mode [ 175.675969][T10595] bond_slave_1: left promiscuous mode [ 175.858492][T10615] loop5: detected capacity change from 0 to 512 [ 175.895742][T10615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.924428][T10615] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.953296][T10615] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2749: corrupted xattr block 33: invalid header [ 176.003138][T10615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 176.028304][T10615] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2749: corrupted xattr block 33: invalid header [ 176.070332][T10615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 176.081642][T10615] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2749: corrupted xattr block 33: invalid header [ 176.096433][T10615] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 176.159804][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.196954][T10631] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2756'. [ 176.366533][T10565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.386109][T10565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34468 - 0 [ 176.453064][T10565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.475471][T10565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34468 - 0 [ 176.518633][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.536595][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.555755][T10665] netlink: 'syz.3.2769': attribute type 27 has an invalid length. [ 176.565510][T10665] netlink: 'syz.3.2769': attribute type 28 has an invalid length. [ 176.573466][T10665] netlink: 'syz.3.2769': attribute type 29 has an invalid length. [ 176.581614][T10665] netlink: 'syz.3.2769': attribute type 30 has an invalid length. [ 176.590003][T10665] netlink: 'syz.3.2769': attribute type 31 has an invalid length. [ 176.598001][T10665] netlink: 'syz.3.2769': attribute type 32 has an invalid length. [ 176.606074][ T8381] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.614631][ T8381] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 34468 - 0 [ 176.628822][T10665] netlink: 'syz.3.2769': attribute type 33 has an invalid length. [ 176.637305][T10665] netlink: 'syz.3.2769': attribute type 35 has an invalid length. [ 176.650129][T10665] netlink: 'syz.3.2769': attribute type 37 has an invalid length. [ 176.663270][T10665] netlink: 'syz.3.2769': attribute type 39 has an invalid length. [ 176.671250][ T8381] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.680054][ T8381] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 34468 - 0 [ 176.689712][T10665] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2769'. [ 176.699166][ T8381] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.707828][ T8381] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 34468 - 0 [ 176.733311][ T8381] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.742015][ T8381] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 34468 - 0 [ 176.825912][T10682] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.837300][T10682] bond0: (slave team0): Enslaving as an active interface with an up link [ 176.854290][T10682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2776'. [ 176.872661][T10682] team0: entered promiscuous mode [ 176.878156][T10682] team_slave_0: entered promiscuous mode [ 176.883985][T10682] team_slave_1: entered promiscuous mode [ 176.892123][T10682] team0: entered allmulticast mode [ 176.901626][T10682] team_slave_0: entered allmulticast mode [ 176.908822][T10682] team_slave_1: entered allmulticast mode [ 176.918369][T10682] bond0: (slave team0): Releasing backup interface [ 176.937484][T10682] bridge0: port 3(team0) entered blocking state [ 176.949971][T10682] bridge0: port 3(team0) entered disabled state [ 177.048959][T10710] loop2: detected capacity change from 0 to 128 [ 177.537814][T10777] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.559911][T10783] loop5: detected capacity change from 0 to 512 [ 177.580318][T10783] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.2824: corrupted in-inode xattr: invalid ea_ino [ 177.595923][T10783] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.597670][T10783] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2824: couldn't read orphan inode 15 (err -117) [ 177.606949][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 177.606976][ C1] EXT4-fs (loop5): initial error at time 1781906682: ext4_iget_extra_inode:5180: inode 15 [ 177.607019][ C1] EXT4-fs (loop5): last error at time 1781906682: ext4_iget_extra_inode:5180: inode 15 [ 177.645222][T10783] loop5: lost filesystem error report for type 5 error -117 [ 177.649124][T10783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.781176][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.843443][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2831'. [ 177.867003][T10802] macvlan2: entered promiscuous mode [ 177.881406][T10802] gretap0: entered promiscuous mode [ 177.886983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.887166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.887374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.915676][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2831'. [ 177.921702][T10802] macvlan2: entered allmulticast mode [ 177.943438][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 177.958054][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 177.967381][T10802] gretap0: entered allmulticast mode [ 177.989891][T10804] macvlan3: entered promiscuous mode [ 177.994396][T10809] loop7: detected capacity change from 0 to 1024 [ 178.012142][T10804] macvlan3: entered allmulticast mode [ 178.034234][T10809] loop7: detected capacity change from 0 to 512 [ 178.086786][T10809] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 178.120277][T10809] System zones: 0-2, 18-18, 34-35 [ 178.128101][T10809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.141136][T10809] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.249633][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.270256][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 178.270279][ T28] audit: type=1326 audit(1781906683.385:71499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.309043][ T28] audit: type=1326 audit(1781906683.385:71500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.363019][ T28] audit: type=1326 audit(1781906683.385:71501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.417879][ T28] audit: type=1326 audit(1781906683.385:71502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.448895][T10851] tmpfs: Too small a size for current use [ 178.464571][ T28] audit: type=1326 audit(1781906683.385:71503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.490633][ T28] audit: type=1326 audit(1781906683.385:71504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.524501][ T28] audit: type=1326 audit(1781906683.395:71505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.552090][ T28] audit: type=1326 audit(1781906683.395:71506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.590256][ T28] audit: type=1326 audit(1781906683.395:71507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 178.616711][ T28] audit: type=1326 audit(1781906683.395:71508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc6d0ce59 code=0x7ffc0000 [ 179.197686][T10885] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2868'. [ 179.238229][T10887] loop5: detected capacity change from 0 to 2048 [ 179.257103][T10887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.270029][T10887] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.294698][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.298098][T10896] x_tables: duplicate underflow at hook 1 [ 179.394005][T10904] loop5: detected capacity change from 0 to 512 [ 179.403507][T10904] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 179.417611][T10904] EXT4-fs (loop5): 1 truncate cleaned up [ 179.423989][T10904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.437892][T10904] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2877: invalid indirect mapped block 4294901760 (level 0) [ 179.440679][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2878'. [ 179.455498][T10904] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2877: invalid indirect mapped block 2185560079 (level 0) [ 179.475559][T10904] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.2877: corrupted inode contents [ 179.488397][T10904] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #13: comm syz.5.2877: mark_inode_dirty error [ 179.492505][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ca7ac00: rx timeout, send abort [ 179.500765][T10904] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2877: invalid indirect mapped block 65535 (level 2) [ 179.528168][T10904] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.2877: corrupted inode contents [ 179.540653][T10904] EXT4-fs error (device loop5): ext4_truncate:4691: inode #13: comm syz.5.2877: mark_inode_dirty error [ 179.568362][T10904] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem [ 179.577608][T10910] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #13: comm syz.5.2877: corrupted inode contents [ 179.612470][T10910] EXT4-fs error (device loop5): __ext4_unlink:3289: inode #13: comm syz.5.2877: mark_inode_dirty error [ 179.651320][ T4251] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 179.651533][ T4251] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 179.661164][ T4251] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 179.682647][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.700258][T10918] loop2: detected capacity change from 0 to 128 [ 179.710513][T10918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 179.726698][T10918] System zones: 1-3, 19-19, 35-36 [ 179.732376][T10918] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 179.753596][T10918] ext4 filesystem being mounted at /589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.792355][T10918] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 179.825797][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.880357][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2884'. [ 179.895684][T10932] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2886'. [ 180.007996][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ca7ac00: abort rx timeout. Force session deactivation [ 180.063969][T10956] loop1: detected capacity change from 0 to 1024 [ 180.099996][T10956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.117767][T10956] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.134291][T10956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2900: bg 0: block 112: padding at end of block bitmap is not set [ 180.151404][T10956] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 180.165242][T10956] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.165242][T10956] [ 180.175473][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2903'. [ 180.190563][T10956] EXT4-fs (loop1): Total free blocks count 0 [ 180.198720][T10956] EXT4-fs (loop1): Free/Dirty block details [ 180.214625][T10956] EXT4-fs (loop1): free_blocks=0 [ 180.222809][T10956] EXT4-fs (loop1): dirty_blocks=16 [ 180.228540][T10956] EXT4-fs (loop1): Block reservation details [ 180.234775][T10956] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 180.273757][ T8275] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 180.286615][ T8275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 180.320688][T10981] loop2: detected capacity change from 0 to 1024 [ 180.345315][T10981] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 180.386268][T10985] syzkaller1: entered promiscuous mode [ 180.391914][T10985] syzkaller1: entered allmulticast mode [ 180.429576][T10981] loop2: detected capacity change from 0 to 8192 [ 180.971891][T11067] lo speed is unknown, defaulting to 1000 [ 181.648847][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2957'. [ 181.743236][T11178] loop7: detected capacity change from 0 to 8192 [ 181.927856][T11205] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.359296][T11240] loop2: detected capacity change from 0 to 1024 [ 182.380032][T11240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.398996][T11240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.422262][T11240] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 182.430663][T11240] System zones: 0-1, 3-36 [ 182.437202][T11240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.485871][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.495514][T11250] loop1: detected capacity change from 0 to 1024 [ 182.502316][T11250] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 182.558703][T11250] loop1: detected capacity change from 0 to 8192 [ 183.086572][T11303] syzkaller1: entered promiscuous mode [ 183.094816][T11303] syzkaller1: entered allmulticast mode [ 183.274165][T11314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.295342][T11314] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3011: invalid indirect mapped block 4294967295 (level 0) [ 183.317171][T11314] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 183.317359][T11314] EXT4-fs (loop2): Remounting filesystem read-only [ 183.326627][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 183.326651][ C0] EXT4-fs (loop2): initial error at time 1781906688: ext4_free_branches:1023: inode 16 [ 183.326681][ C0] EXT4-fs (loop2): last error at time 1781906688: ext4_free_branches:1023: inode 16 [ 183.398340][T11314] EXT4-fs (loop2): 1 orphan inode deleted [ 183.404252][T11314] EXT4-fs (loop2): 1 truncate cleaned up [ 183.410219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.410447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.410651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.449100][T11314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.502274][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.965550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.974314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.004809][T11410] lo speed is unknown, defaulting to 1000 [ 184.043447][T11412] lo speed is unknown, defaulting to 1000 [ 184.154664][T11414] lo speed is unknown, defaulting to 1000 [ 184.663919][T11439] validate_nla: 18 callbacks suppressed [ 184.663936][T11439] netlink: 'syz.7.3037': attribute type 10 has an invalid length. [ 184.729651][T11439] netlink: 'syz.7.3037': attribute type 10 has an invalid length. [ 184.755816][T11439] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3037'. [ 185.223324][ T3510] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.233511][ T3510] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.283583][T11471] set_capacity_and_notify: 1 callbacks suppressed [ 185.283603][T11471] loop5: detected capacity change from 0 to 4096 [ 185.335291][T11471] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 185.601670][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 185.641841][T11488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.704597][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.915784][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 185.915799][ T28] audit: type=1400 audit(1781906691.035:71537): avc: denied { ioctl } for pid=11498 comm="syz.2.3064" path="socket:[30887]" dev="sockfs" ino=30887 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.954643][ T8387] tipc: Subscription rejected, illegal request [ 186.450885][T11521] lo speed is unknown, defaulting to 1000 [ 186.747275][T11536] loop1: detected capacity change from 0 to 512 [ 186.787897][T11536] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3081: inode has both inline data and extents flags [ 186.856117][T11536] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.856668][T11536] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3081: couldn't read orphan inode 15 (err -117) [ 186.867063][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 186.867095][ C0] EXT4-fs (loop1): initial error at time 1781906691: ext4_orphan_get:1399: inode 15 [ 186.867176][ C0] EXT4-fs (loop1): last error at time 1781906691: ext4_orphan_get:1399: inode 15 [ 186.945591][T11536] loop1: lost filesystem error report for type 5 error -117 [ 187.015526][ T28] audit: type=1400 audit(1781906692.125:71538): avc: denied { write } for pid=11535 comm="syz.1.3081" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.258669][T11549] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 187.318237][T11554] netlink: 392 bytes leftover after parsing attributes in process `syz.7.3088'. [ 187.346744][T11554] netlink: 58 bytes leftover after parsing attributes in process `syz.7.3088'. [ 187.575279][T11576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3098'. [ 187.631447][T11582] loop7: detected capacity change from 0 to 256 [ 187.915403][T11600] lo speed is unknown, defaulting to 1000 [ 188.166515][ T28] audit: type=1400 audit(1781906693.285:71539): avc: denied { append } for pid=11616 comm="syz.2.3117" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.205382][T11602] loop7: detected capacity change from 0 to 512 [ 188.272200][T11602] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.294738][T11602] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 188.345906][T11602] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 188.378020][T11602] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 188.443603][T11602] System zones: 0-2, 18-18, 34-35 [ 188.524289][T11631] loop2: detected capacity change from 0 to 512 [ 188.525786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.539050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.547465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.572334][T11631] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 188.651438][T11631] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 188.683275][T11631] loop2: detected capacity change from 0 to 512 [ 188.691447][T11631] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 188.861608][T11639] veth1_to_bond: entered allmulticast mode [ 188.868826][T11637] veth1_to_bond: left allmulticast mode [ 188.952297][T11646] lo speed is unknown, defaulting to 1000 [ 189.044864][T11652] loop1: detected capacity change from 0 to 256 [ 189.068591][T11652] msdos: Unknown parameter 'dFscard' [ 189.453137][ T28] audit: type=1400 audit(1781906694.565:71540): avc: denied { ioctl } for pid=11673 comm="syz.1.3141" path="/newroot/dev/usbmon9" dev="devtmpfs" ino=169 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.571397][ T279] IPVS: starting estimator thread 0... [ 189.645524][T11679] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3143'. [ 189.656743][T11681] lo speed is unknown, defaulting to 1000 [ 189.675586][T11677] IPVS: using max 1920 ests per chain, 96000 per kthread [ 189.689100][T11679] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3143'. [ 189.780745][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'. [ 189.823645][T11689] vlan2: entered promiscuous mode [ 189.830671][T11689] batadv0: entered promiscuous mode [ 189.839785][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'. [ 189.900307][T11692] vlan2: entered promiscuous mode [ 190.170653][T11703] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3162'. [ 190.295057][T11695] loop1: detected capacity change from 0 to 32768 [ 191.218760][ T28] audit: type=1326 audit(1781906696.335:71541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11718 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e718ce59 code=0x7fc00000 [ 191.281239][T11723] lo speed is unknown, defaulting to 1000 [ 191.529180][T11738] lo speed is unknown, defaulting to 1000 [ 191.617440][T11744] loop5: detected capacity change from 0 to 2048 [ 191.633783][T11742] lo speed is unknown, defaulting to 1000 [ 191.647198][T11744] EXT4-fs: quotafile must be on filesystem root [ 192.114175][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3173'. [ 192.152884][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3173'. [ 192.225539][ T28] audit: type=1400 audit(1781906697.335:71542): avc: denied { getopt } for pid=11760 comm="syz.5.3174" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.320111][T11763] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 192.326721][T11763] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.374097][T11767] netlink: 'syz.7.3176': attribute type 3 has an invalid length. [ 192.374306][T11763] vhci_hcd vhci_hcd.0: Device attached [ 192.432341][T11764] vhci_hcd: connection closed [ 192.433258][ T8389] vhci_hcd vhci_hcd.5: stop threads [ 192.464183][ T8389] vhci_hcd vhci_hcd.5: release socket [ 192.478435][ T8389] vhci_hcd vhci_hcd.5: disconnect device [ 192.716092][T11780] loop7: detected capacity change from 0 to 512 [ 192.730450][T11780] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 192.741775][T11780] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.3183: invalid block [ 192.753343][T11780] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 192.754165][T11780] EXT4-fs (loop7): 1 truncate cleaned up [ 192.763522][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 192.763546][ C1] EXT4-fs (loop7): initial error at time 1781906697: ext4_get_branch:178: inode 13: block 1024 [ 192.763600][ C1] EXT4-fs (loop7): last error at time 1781906697: ext4_get_branch:178: inode 13: block 1024 [ 192.808470][T11780] EXT4-fs mount: 4 callbacks suppressed [ 192.808484][T11780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.865471][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.225318][ T28] audit: type=1400 audit(1781906698.335:71543): avc: denied { watch } for pid=11816 comm="syz.3.3198" path="/758/file0" dev="tmpfs" ino=3920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 193.345832][T11820] lo speed is unknown, defaulting to 1000 [ 193.497677][T11833] netlink: 'syz.5.3204': attribute type 5 has an invalid length. [ 193.620242][T11839] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.630428][T11839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.649765][ T8400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.658409][ T8389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.666683][ T8389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.674892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.683983][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.695448][ T8400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.704414][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.713409][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.722231][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.733974][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.766547][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.775794][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.792028][T11839] veth1_vlan: left promiscuous mode [ 193.798704][T11839] veth0_vlan: left promiscuous mode [ 193.806163][T11839] veth0_vlan: entered promiscuous mode [ 193.814096][T11839] veth1_vlan: entered promiscuous mode [ 193.826469][T11839] veth1_macvtap: left promiscuous mode [ 193.833948][T11839] veth0_macvtap: left promiscuous mode [ 193.864439][T11839] veth0_macvtap: entered promiscuous mode [ 193.881528][T11839] veth1_macvtap: entered promiscuous mode [ 193.910219][T11839] 8021q: adding VLAN 0 to HW filter on device eth0 [ 193.934120][T11839] 8021q: adding VLAN 0 to HW filter on device eth1 [ 193.954828][T11839] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.975951][T11839] 8021q: adding VLAN 0 to HW filter on device eth3 [ 194.015698][T11839] bond0: entered promiscuous mode [ 194.029274][T11839] bond_slave_0: entered promiscuous mode [ 194.035609][T11839] bond_slave_1: entered promiscuous mode [ 194.046522][T11839] macvlan2: left promiscuous mode [ 194.053759][T11839] bond0: left promiscuous mode [ 194.301765][T11856] loop5: detected capacity change from 0 to 256 [ 194.320461][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.328556][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.347771][T11856] msdos: Unknown parameter 'dFscard' [ 194.384009][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.392007][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.604897][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.618542][ T68] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 52706 - 0 [ 194.663634][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.698060][ T68] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 52706 - 0 [ 194.749963][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.772892][ T68] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 52706 - 0 [ 194.800689][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.828982][ T68] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 52706 - 0 [ 194.979873][ T28] audit: type=1326 audit(1781906700.095:71544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.3232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf379ce59 code=0x7ffc0000 [ 195.069638][T11898] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3233'. [ 195.088197][ T28] audit: type=1326 audit(1781906700.095:71545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.3232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf379ce59 code=0x7ffc0000 [ 195.190685][ T28] audit: type=1326 audit(1781906700.135:71546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.3232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf379ce59 code=0x7ffc0000 [ 195.261685][T11909] loop2: detected capacity change from 0 to 512 [ 195.289719][T11906] pim6reg1: entered promiscuous mode [ 195.303951][ T28] audit: type=1326 audit(1781906700.135:71547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.3232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf379ce59 code=0x7ffc0000 [ 195.310007][T11909] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.339796][T11906] pim6reg1: entered allmulticast mode [ 195.429459][ T28] audit: type=1326 audit(1781906700.135:71548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.3232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf379ce59 code=0x7ffc0000 [ 195.488651][T11909] EXT4-fs (loop2): 1 truncate cleaned up [ 195.496553][ T28] audit: type=1326 audit(1781906700.135:71549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.3232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcbf379ce59 code=0x7ffc0000 [ 195.525411][ T28] audit: type=1326 audit(1781906700.135:71550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.5.3232" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcbf379cbc2 code=0x7ffc0000 [ 195.538181][T11909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.717743][T11933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.727803][T11933] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.739435][T11933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.787835][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.856746][T11933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.886008][T11942] loop2: detected capacity change from 0 to 512 [ 195.897952][T11933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.922987][T11933] veth1_vlan: left promiscuous mode [ 195.945220][T11942] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3251: inode has both inline data and extents flags [ 195.961773][T11933] veth0_vlan: left promiscuous mode [ 195.967601][T11933] veth0_vlan: entered promiscuous mode [ 195.975148][T11942] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.977975][T11933] veth1_vlan: entered promiscuous mode [ 195.986379][T11942] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3251: couldn't read orphan inode 15 (err -117) [ 195.991104][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 195.994197][T11942] loop2: lost filesystem error report for type 5 error -117 [ 196.009405][ C0] EXT4-fs (loop2): initial error at time 1781906701: ext4_orphan_get:1399: inode 15 [ 196.030879][ C0] EXT4-fs (loop2): last error at time 1781906701: ext4_orphan_get:1399: inode 15 [ 196.044822][T11933] veth1_macvtap: left promiscuous mode [ 196.053079][T11933] veth0_macvtap: left promiscuous mode [ 196.060333][T11933] veth0_macvtap: entered promiscuous mode [ 196.067745][T11933] veth1_macvtap: entered promiscuous mode [ 196.080149][T11947] loop7: detected capacity change from 0 to 1024 [ 196.091428][T11933] geneve2: left promiscuous mode [ 196.099358][T11933] veth0_to_bond: entered promiscuous mode [ 196.105139][T11933] veth0_to_bond: entered allmulticast mode [ 196.113194][T11933] macsec1: left promiscuous mode [ 196.118826][T11942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.133280][T11933] macvlan2: left promiscuous mode [ 196.159698][T11947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.203701][T11933] macvlan3: left promiscuous mode [ 196.218560][T11947] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.234808][T11933] 8021q: adding VLAN 0 to HW filter on device eth0 [ 196.272899][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 196.272930][ T28] audit: type=1400 audit(1781906701.385:71562): avc: denied { write } for pid=11946 comm="syz.7.3253" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.307881][T11933] 8021q: adding VLAN 0 to HW filter on device eth1 [ 196.336677][T11947] EXT4-fs (loop7): shut down requested (0) [ 196.347920][T11933] 8021q: adding VLAN 0 to HW filter on device eth2 [ 196.398565][T11933] 8021q: adding VLAN 0 to HW filter on device eth3 [ 196.418885][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.444289][ T3510] lo speed is unknown, defaulting to 1000 [ 196.472631][ T3510] syz2: Port: 1 Link ACTIVE [ 196.574039][ T68] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.604349][ T68] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 59554 - 0 [ 196.644749][ T68] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.681812][ T68] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 59554 - 0 [ 196.736043][ T68] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.783229][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3256'. [ 196.802901][ T68] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 59554 - 0 [ 196.832197][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.845146][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3256'. [ 196.856171][ T68] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.873022][ T68] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 59554 - 0 [ 196.888180][T11155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.903111][T11957] vlan2: entered promiscuous mode [ 196.909495][T11957] batadv0: entered promiscuous mode [ 196.944501][T11961] vlan2: entered promiscuous mode [ 197.035684][T11973] vcan0: tx address claim with dest, not broadcast [ 197.043297][T11975] lo speed is unknown, defaulting to 1000 [ 197.070469][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.091048][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.100093][T11978] netlink: 'syz.1.3266': attribute type 16 has an invalid length. [ 197.111977][T11978] netlink: 'syz.1.3266': attribute type 17 has an invalid length. [ 197.281158][T11985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.290420][T11985] batadv_slave_0: entered promiscuous mode [ 197.396632][T11989] sctp: [Deprecated]: syz.1.3272 (pid 11989) Use of int in maxseg socket option. [ 197.396632][T11989] Use struct sctp_assoc_value instead [ 197.497827][T11998] loop1: detected capacity change from 0 to 1024 [ 197.504412][ T28] audit: type=1400 audit(1781906702.615:71563): avc: denied { setopt } for pid=11999 comm="syz.3.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.508388][T11998] EXT4-fs: Ignoring removed orlov option [ 197.533650][ T28] audit: type=1400 audit(1781906702.645:71564): avc: denied { bind } for pid=11999 comm="syz.3.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 197.580971][T11998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.621220][ T28] audit: type=1400 audit(1781906702.735:71565): avc: denied { write } for pid=11997 comm="syz.1.3276" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.646923][T12009] lo speed is unknown, defaulting to 1000 [ 197.716872][ T8275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.843828][ T28] audit: type=1400 audit(1781906702.955:71566): avc: denied { connect } for pid=12016 comm="syz.5.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.076449][T12031] loop1: detected capacity change from 0 to 1024 [ 198.118917][T12031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.178206][T12031] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.221799][ T28] audit: type=1400 audit(1781906703.335:71567): avc: denied { write } for pid=12029 comm="syz.1.3289" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.297092][T12031] EXT4-fs (loop1): shut down requested (0) [ 198.345155][T12047] loop5: detected capacity change from 0 to 512 [ 198.362696][ T8275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.414119][T12047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.475801][T12047] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.507957][ T28] audit: type=1400 audit(1781906703.625:71568): avc: denied { write } for pid=12043 comm="syz.5.3293" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.565375][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.695374][ C0] net_ratelimit: 38 callbacks suppressed [ 198.695401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.781076][T12066] loop5: detected capacity change from 0 to 128 [ 198.799142][T12066] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.816829][T12066] ext4 filesystem being mounted at /590/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.864134][ T8385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.874783][ T3510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.886269][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.909008][ T28] audit: type=1400 audit(1781906704.015:71569): avc: denied { write } for pid=12065 comm="syz.5.3301" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.925941][ T3375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.960032][ T4251] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.204352][T12085] loop1: detected capacity change from 0 to 1024 [ 199.246666][T12085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.301538][ T28] audit: type=1400 audit(1781906704.415:71570): avc: denied { write } for pid=12084 comm="syz.1.3309" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.348136][ T8275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.405474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.415005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.424348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.725194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.806781][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.863492][T12122] lo speed is unknown, defaulting to 1000 [ 200.014646][T12133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.040325][T12133] batadv_slave_0: entered promiscuous mode [ 200.249859][T12142] loop5: detected capacity change from 0 to 256 [ 200.600902][T12159] loop1: detected capacity change from 0 to 256 [ 200.653282][T12159] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.748420][T12164] loop5: detected capacity change from 0 to 2048 [ 200.780645][T12164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.822028][ T28] audit: type=1400 audit(1781906705.935:71571): avc: denied { write } for pid=12162 comm="syz.5.3337" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.889730][T12162] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 200.942309][T12162] EXT4-fs (loop5): Remounting filesystem read-only [ 200.951025][T12162] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 200.957545][T12175] loop7: detected capacity change from 0 to 256 [ 201.043770][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.176157][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.188094][T12196] lo speed is unknown, defaulting to 1000 [ 201.303602][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 201.330336][T12206] vlan2: entered promiscuous mode [ 201.333859][T12208] loop5: detected capacity change from 0 to 1024 [ 201.343838][T12208] EXT4-fs: Ignoring removed orlov option [ 201.347724][T12206] batadv0: entered promiscuous mode [ 201.367558][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 201.380044][T12209] vlan2: entered promiscuous mode [ 201.396819][T12208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.415909][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 201.415941][ T28] audit: type=1400 audit(1781906706.525:71577): avc: denied { write } for pid=12207 comm="syz.5.3357" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.453749][ T4251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.527330][T12214] lo speed is unknown, defaulting to 1000 [ 201.573982][T12219] netlink: 'syz.5.3358': attribute type 16 has an invalid length. [ 201.592695][T12219] netlink: 'syz.5.3358': attribute type 17 has an invalid length. [ 201.699116][T12219] batadv_slave_0: left promiscuous mode [ 201.708573][T12219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.747616][T12219] macsec1: left allmulticast mode [ 201.752822][T12219] veth0_to_bond: left allmulticast mode [ 201.762207][T12219] macvlan2: left allmulticast mode [ 201.769867][T12219] macvlan3: left allmulticast mode [ 201.775303][T12219] gretap0: left allmulticast mode [ 201.841246][T12223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.850044][T12223] batadv_slave_0: entered promiscuous mode [ 202.001359][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3370'. [ 202.059004][T12244] loop5: detected capacity change from 0 to 512 [ 202.066264][T12244] EXT4-fs: Ignoring removed i_version option [ 202.076504][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3370'. [ 202.093795][T12237] vlan0: entered promiscuous mode [ 202.099684][T12237] batadv0: entered promiscuous mode [ 202.117472][T12244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.137971][T12244] ext4 filesystem being mounted at /605/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.162988][T12245] vlan0: entered promiscuous mode [ 202.172171][ T28] audit: type=1400 audit(1781906707.285:71578): avc: denied { write } for pid=12243 comm="syz.5.3371" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.201198][ T68] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.211868][ T68] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.235227][ T3403] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.244799][ T4251] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 202.252071][ T28] audit: type=1400 audit(1781906707.355:71579): avc: denied { write } for pid=4251 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.299273][ T4251] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 202.380444][ T3510] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.391782][T12261] lo speed is unknown, defaulting to 1000 [ 202.421056][ T5456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.439348][T12262] netlink: 'syz.3.3375': attribute type 16 has an invalid length. [ 202.461399][T12262] netlink: 'syz.3.3375': attribute type 17 has an invalid length. [ 202.566062][T12262] batadv_slave_0: left promiscuous mode [ 202.574417][T12262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.933967][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3383'. [ 202.944338][ T3510] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.119460][T12297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=12297 comm=syz.7.3392 [ 203.204937][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3394'. [ 203.224212][T12304] netlink: 'syz.7.3394': attribute type 30 has an invalid length. [ 203.242826][T12304] netlink: 'syz.7.3394': attribute type 29 has an invalid length. [ 203.261469][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3394'. [ 203.313410][T12291] lo speed is unknown, defaulting to 1000 [ 203.584986][T12291] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.592962][T12291] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.601757][T12291] bridge_slave_0: entered allmulticast mode [ 203.609411][T12291] bridge_slave_0: entered promiscuous mode [ 203.654660][T12291] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.686390][T12291] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.693755][T12291] bridge_slave_1: entered allmulticast mode [ 203.700457][T12291] bridge_slave_1: entered promiscuous mode [ 203.706372][T12331] net_ratelimit: 186 callbacks suppressed [ 203.706387][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.728853][T12291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.740047][T12291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.778325][T12337] Invalid argument reading file caps for ./file0 [ 203.785888][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.788402][T12291] team0: Port device team_slave_0 added [ 203.811024][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.821564][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.832612][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.847047][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.855578][T12342] loop2: detected capacity change from 0 to 256 [ 203.864275][T12342] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.868095][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.884844][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.891547][T12291] team0: Port device team_slave_1 added [ 203.897019][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.909255][T12331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.928051][T12291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.935160][T12291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.966741][T12291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.978216][T12291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.986816][T12291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.013188][T12291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.044434][T12291] hsr_slave_0: entered promiscuous mode [ 204.050880][T12291] hsr_slave_1: entered promiscuous mode [ 204.056942][T12291] debugfs: 'hsr0' already exists in 'hsr' [ 204.063448][T12291] Cannot create hsr debugfs directory [ 204.306566][T12291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 204.329005][T12291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.340206][T12291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 204.357295][T12291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.374083][T12359] pimreg: entered allmulticast mode [ 204.379703][T12357] loop7: detected capacity change from 0 to 2048 [ 204.390210][T12359] pimreg: left allmulticast mode [ 204.399783][T12291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 204.411590][T12291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.419778][T12291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.429473][T12291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.438334][T12357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.459490][T12357] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.501396][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.546647][T12371] loop2: detected capacity change from 0 to 2048 [ 204.560420][T12377] loop7: detected capacity change from 0 to 512 [ 204.581529][T12291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.583314][T12371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.624967][T12377] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3417: inode has both inline data and extents flags [ 204.648979][T12291] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.662519][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.669724][ T8387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.678294][ T28] audit: type=1400 audit(1781906709.775:71580): avc: denied { write } for pid=12370 comm="syz.2.3418" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.700775][T12377] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.701356][T12377] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3417: couldn't read orphan inode 15 (err -117) [ 204.710727][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 204.710798][ C1] EXT4-fs (loop7): initial error at time 1781906709: ext4_orphan_get:1399: inode 15 [ 204.710858][ C1] EXT4-fs (loop7): last error at time 1781906709: ext4_orphan_get:1399: inode 15 [ 204.749807][ T28] audit: type=1400 audit(1781906709.775:71581): avc: denied { create } for pid=12370 comm="syz.2.3418" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 204.771071][ T28] audit: type=1400 audit(1781906709.815:71582): avc: denied { read write } for pid=12370 comm="syz.2.3418" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 204.794510][T12377] loop7: lost filesystem error report for type 5 error -117 [ 204.796122][ T28] audit: type=1400 audit(1781906709.815:71583): avc: denied { open } for pid=12370 comm="syz.2.3418" path="/717/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 204.805029][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.828394][T12377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.849312][ T28] audit: type=1400 audit(1781906709.825:71584): avc: denied { write } for pid=12370 comm="syz.2.3418" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.877610][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.884826][ T8387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.909428][ T28] audit: type=1400 audit(1781906709.955:71585): avc: denied { write } for pid=12375 comm="syz.7.3417" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.950347][T12291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.961423][T12291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.157734][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.176016][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.186140][T12291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.274230][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.284849][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 205.741235][T12291] veth0_vlan: entered promiscuous mode [ 205.749962][T12291] veth1_vlan: entered promiscuous mode [ 205.781911][T12291] veth0_macvtap: entered promiscuous mode [ 205.794125][T12445] loop2: detected capacity change from 0 to 512 [ 205.811090][T12291] veth1_macvtap: entered promiscuous mode [ 205.817390][T12445] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3437: iget: bad i_size value: 38620345925642 [ 205.865761][T12291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.890139][T12445] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.893618][T12291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.895156][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 205.910348][T12445] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3437: couldn't read orphan inode 15 (err -117) [ 205.916574][ C1] EXT4-fs (loop2): initial error at time 1781906711: ext4_orphan_get:1399: inode 15 [ 205.916612][ C1] EXT4-fs (loop2): last error at time 1781906711: ext4_orphan_get:1399: inode 15 [ 205.952160][T12445] loop2: lost filesystem error report for type 5 error -117 [ 205.955977][T12445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.992631][ T8385] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.007411][T12444] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3437: bg 0: block 5: invalid block bitmap [ 206.007659][ T28] audit: type=1400 audit(1781906711.125:71586): avc: denied { write } for pid=12444 comm="syz.2.3437" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.056353][ T8385] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.084618][ T8385] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.100027][ T8385] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.112683][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.144349][T12462] loop7: detected capacity change from 0 to 512 [ 206.166892][T12462] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 206.193463][T12464] loop2: detected capacity change from 0 to 2048 [ 206.203801][T12462] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3445'. [ 206.230898][T12462] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3445'. [ 206.259107][T12464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.285213][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.319609][ T8385] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.394328][T12463] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 206.441655][T12463] EXT4-fs (loop2): Remounting filesystem read-only [ 206.458832][T12463] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 206.576525][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.620887][T12485] loop1: detected capacity change from 0 to 2048 [ 206.657832][T12485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.666360][T12487] lo speed is unknown, defaulting to 1000 [ 206.699577][T12485] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.730895][ T8275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.746211][T12487] netlink: 'syz.2.3451': attribute type 16 has an invalid length. [ 206.754186][T12487] netlink: 'syz.2.3451': attribute type 17 has an invalid length. [ 206.814577][ T9931] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 206.832698][ T9931] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.897796][T12497] fido_id[12497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.365174][ T3646] Bluetooth: hci0: command 0x1003 tx timeout [ 208.371828][ T4425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.467459][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 208.467476][ T28] audit: type=1400 audit(1781906713.585:71589): avc: denied { ioctl } for pid=12551 comm="syz.1.3479" path="socket:[34372]" dev="sockfs" ino=34372 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.508222][ T28] audit: type=1400 audit(1781906713.625:71590): avc: denied { lock } for pid=12553 comm="syz.7.3480" path="socket:[34376]" dev="sockfs" ino=34376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 208.614717][ T28] audit: type=1400 audit(1781906713.725:71591): avc: denied { map } for pid=12559 comm="syz.2.3482" path="socket:[33740]" dev="sockfs" ino=33740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.655357][ T28] audit: type=1400 audit(1781906713.725:71592): avc: denied { read } for pid=12559 comm="syz.2.3482" path="socket:[33740]" dev="sockfs" ino=33740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.690390][ T28] audit: type=1400 audit(1781906713.795:71593): avc: denied { watch watch_reads } for pid=12561 comm="syz.1.3483" path="/proc/678/net/pfkey" dev="proc" ino=4026533020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 208.755156][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 208.864882][T12570] loop2: detected capacity change from 0 to 256 [ 208.874492][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 208.921388][T12572] team0: Port device team_slave_0 removed [ 210.025320][T12638] lo speed is unknown, defaulting to 1000 [ 210.205512][ C0] net_ratelimit: 856 callbacks suppressed [ 210.205541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.221348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.230685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.389354][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 210.511646][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3529'. [ 210.520882][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3529'. [ 210.596411][ T28] audit: type=1400 audit(1781906715.715:71594): avc: denied { mounton } for pid=12672 comm="syz.7.3532" path="/" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 210.648649][T12676] loop7: detected capacity change from 0 to 1024 [ 210.656813][T12676] EXT4-fs: Ignoring removed nobh option [ 210.662553][T12676] EXT4-fs: Ignoring removed i_version option [ 210.689362][T12676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.713269][ T28] audit: type=1400 audit(1781906715.825:71595): avc: denied { write } for pid=12675 comm="syz.7.3533" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.777758][T12676] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 210.792784][T12676] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1776 with error 28 [ 210.806334][T12676] EXT4-fs (loop7): This should not happen!! Data will be lost [ 210.806334][T12676] [ 210.817110][T12676] EXT4-fs (loop7): Total free blocks count 0 [ 210.823279][T12676] EXT4-fs (loop7): Free/Dirty block details [ 210.830957][T12676] EXT4-fs (loop7): free_blocks=20480 [ 210.836671][T12676] EXT4-fs (loop7): dirty_blocks=1792 [ 210.842316][T12676] EXT4-fs (loop7): Block reservation details [ 210.849269][T12676] EXT4-fs (loop7): i_reserved_data_blocks=112 [ 211.022319][ T8387] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1776 with error 28 [ 211.046655][ T7789] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 211.112038][ T28] audit: type=1400 audit(1781906716.215:71596): avc: denied { create } for pid=12691 comm="syz.3.3537" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 211.289691][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.296991][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.307429][T12697] bond_slave_0: left promiscuous mode [ 211.319308][T12697] bond_slave_1: left promiscuous mode [ 211.341652][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3542'. [ 211.402068][T12697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.412986][T12697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.555446][T12704] team0: Port device team_slave_0 removed [ 211.583808][T11159] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.592944][T11159] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 52706 - 0 [ 211.639828][T11159] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.669991][T11159] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 52706 - 0 [ 211.702733][T12715] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.710941][T11159] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.730127][T11159] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 52706 - 0 [ 211.745553][T11159] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.755642][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 211.766689][T11159] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 52706 - 0 [ 211.857186][T12724] loop8: detected capacity change from 0 to 512 [ 211.867434][T12724] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.935897][T12291] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 212.313674][T12767] loop2: detected capacity change from 0 to 128 [ 212.325941][T12769] netlink: 'syz.3.3570': attribute type 30 has an invalid length. [ 212.368920][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'. [ 212.383977][T12774] gtp1: entered promiscuous mode [ 212.391455][T12774] gtp1: entered allmulticast mode [ 212.439851][T12782] xt_hashlimit: size too large, truncated to 1048576 [ 212.586447][T12789] loop1: detected capacity change from 0 to 1024 [ 212.594280][T12789] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 212.619633][T12789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.644153][ T28] audit: type=1400 audit(1781906717.755:71597): avc: denied { write } for pid=12788 comm="syz.1.3577" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.706845][ T8275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.873111][ T28] audit: type=1326 audit(1781906717.985:71598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.3.3583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b546dce59 code=0x0 [ 212.883797][T12806] lo speed is unknown, defaulting to 1000 [ 213.050852][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3586'. [ 213.570682][T11159] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.580573][T11159] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 59554 - 0 [ 213.608396][T11159] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.618655][T11159] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 59554 - 0 [ 213.668033][T11159] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.678171][T11159] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 59554 - 0 [ 213.739481][T11159] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.750166][T11159] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 59554 - 0 [ 213.807352][T12860] xt_hashlimit: size too large, truncated to 1048576 [ 213.863246][T12865] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 213.990669][T11159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.008107][T11159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.018965][T11159] bond0 (unregistering): Released all slaves [ 214.036019][T11159] bond1 (unregistering): Released all slaves [ 214.146861][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.155817][T11159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.172740][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.188199][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 214.208628][T11159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.219663][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 214.243118][T11159] veth0_to_bond: left promiscuous mode [ 214.254898][T11159] veth1_macvtap: left promiscuous mode [ 214.263128][T11159] veth0_macvtap: left promiscuous mode [ 214.268899][T11159] veth1_vlan: left promiscuous mode [ 214.280677][T11159] veth0_vlan: left promiscuous mode [ 214.343604][ T28] audit: type=1400 audit(1781906719.455:71599): avc: denied { write } for pid=12872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.376152][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3613'. [ 214.419382][ T28] audit: type=1400 audit(1781906719.535:71600): avc: denied { write } for pid=12905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.466813][T11159] team0 (unregistering): Port device team_slave_1 removed [ 214.477706][T11159] team0 (unregistering): Port device team_slave_0 removed [ 214.538133][ T6181] lo speed is unknown, defaulting to 1000 [ 214.544111][ T6181] infiniband syz2: ib_query_port failed (-19) [ 214.548792][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 214.563589][ T68] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.574114][ T68] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.591255][T12915] sctp: [Deprecated]: syz.3.3619 (pid 12915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.591255][T12915] Use struct sctp_sack_info instead [ 214.621735][ T68] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.646873][ T68] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.718256][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3625'. [ 214.765359][ T28] audit: type=1400 audit(1781906719.875:71601): avc: denied { create } for pid=12935 comm="syz.3.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 214.789720][T12940] netlink: 67 bytes leftover after parsing attributes in process `syz.7.3625'. [ 214.887185][T12953] netlink: 'syz.3.3634': attribute type 4 has an invalid length. [ 214.916855][T12958] loop1: detected capacity change from 0 to 512 [ 214.932696][T12958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.949137][T11159] IPVS: stop unused estimator thread 0... [ 214.955218][ T28] audit: type=1400 audit(1781906720.065:71602): avc: denied { write } for pid=12921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.995628][T12958] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3633: corrupted in-inode xattr: invalid ea_ino [ 215.012872][T12958] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.015156][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 215.016651][T12958] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3633: couldn't read orphan inode 15 (err -117) [ 215.024377][ C1] EXT4-fs (loop1): initial error at time 1781906720: ext4_iget_extra_inode:5180: inode 15 [ 215.024415][ C1] EXT4-fs (loop1): last error at time 1781906720: ext4_iget_extra_inode:5180: inode 15 [ 215.069970][ T28] audit: type=1400 audit(1781906720.185:71603): avc: denied { write } for pid=12967 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.102482][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3637'. [ 215.103354][T12958] loop1: lost filesystem error report for type 5 error -117 [ 215.115031][T12958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.148924][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 215.397270][ T8275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.533797][T12994] netlink: 'syz.3.3643': attribute type 29 has an invalid length. [ 215.545852][T12994] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3643'. [ 215.638243][ T28] audit: type=1400 audit(1781906720.755:71604): avc: denied { write } for pid=12987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.734977][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.742382][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.774337][ T28] audit: type=1400 audit(1781906720.885:71605): avc: denied { write } for pid=13014 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.799242][T13013] loop2: detected capacity change from 0 to 4096 [ 215.823330][T13013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.868702][T13005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.881452][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.889007][T13005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.977028][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 215.995603][ T3422] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.005012][ T3422] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.024746][ T3422] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.045352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.053741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.062265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.072059][ T3422] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.374785][ T28] audit: type=1400 audit(1781906721.485:71606): avc: denied { write } for pid=13024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.388041][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.407539][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.426984][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.434557][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.442510][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.484589][ T28] audit: type=1400 audit(1781906721.595:71607): avc: denied { write } for pid=13047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.487514][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.529753][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.537592][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.545413][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.582326][T13055] loop1: detected capacity change from 0 to 2048 [ 216.589726][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 216.605510][ T3510] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 216.642412][ T3510] hid-generic 0006:0008:0001.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 216.657274][T13055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.691815][ T28] audit: type=1400 audit(1781906721.805:71608): avc: denied { write } for pid=13053 comm="syz.1.3660" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.717090][T13055] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 216.732646][T13055] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 216.752459][T13055] EXT4-fs (loop1): This should not happen!! Data will be lost [ 216.752459][T13055] [ 216.767868][T13074] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 216.785165][T13055] EXT4-fs (loop1): Total free blocks count 0 [ 216.795948][T13055] EXT4-fs (loop1): Free/Dirty block details [ 216.803290][T13074] EXT4-fs (loop1): This should not happen!! Data will be lost [ 216.803290][T13074] [ 216.813337][T13055] EXT4-fs (loop1): free_blocks=2415919104 [ 216.819189][T13055] EXT4-fs (loop1): dirty_blocks=64 [ 216.824588][T13074] EXT4-fs (loop1): Total free blocks count 0 [ 216.833015][T13069] fido_id[13069]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.579453][T13094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3672'. [ 217.803397][ T8275] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 218.150165][ T8385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.208321][ T8385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.263399][ T8385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.322311][ T8385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.459691][ T8385] bridge_slave_1: left allmulticast mode [ 218.465582][ T8385] bridge_slave_1: left promiscuous mode [ 218.489083][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.503308][ T8385] bridge_slave_0: left allmulticast mode [ 218.524459][ T8385] bridge_slave_0: left promiscuous mode [ 218.530428][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.623169][ T8385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.644020][ T8385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.656984][ T8385] bond0 (unregistering): Released all slaves [ 218.737850][ T8385] hsr_slave_0: left promiscuous mode [ 218.749879][ T8385] hsr_slave_1: left promiscuous mode [ 218.755810][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.770301][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.787029][ T8385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.794908][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.812736][ T8385] veth1_macvtap: left promiscuous mode [ 218.820221][ T8385] veth0_macvtap: left promiscuous mode [ 218.840034][ T8385] veth1_vlan: left promiscuous mode [ 218.845517][ T8385] veth0_vlan: left promiscuous mode [ 218.962390][ T8385] team0 (unregistering): Port device team_slave_1 removed [ 219.032930][ T3018] 8021q: adding VLAN 0 to HW filter on device eth14 [ 219.058564][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.071382][T13130] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.078915][T13130] bridge_slave_0: entered allmulticast mode [ 219.085837][T13130] bridge_slave_0: entered promiscuous mode [ 219.092849][T13130] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.100578][T13130] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.107906][T13130] bridge_slave_1: entered allmulticast mode [ 219.114636][T13130] bridge_slave_1: entered promiscuous mode [ 219.160713][T13130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.172707][T13130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.203358][T13130] team0: Port device team_slave_0 added [ 219.211518][T13130] team0: Port device team_slave_1 added [ 219.246264][T13130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.260495][T13217] loop8: detected capacity change from 0 to 512 [ 219.273219][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.300323][T13217] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 219.311343][T13130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.328782][T13217] EXT4-fs (loop8): 1 truncate cleaned up [ 219.329977][T13130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.337102][T13217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.354051][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.380025][T13130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.390810][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 219.390826][ T28] audit: type=1400 audit(1781906724.495:71613): avc: denied { write } for pid=13216 comm="syz.8.3707" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.418916][ T28] audit: type=1400 audit(1781906724.505:71614): avc: denied { write } for pid=13216 comm="syz.8.3707" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.447288][ T8385] IPVS: stop unused estimator thread 0... [ 219.462315][T13130] hsr_slave_0: entered promiscuous mode [ 219.469557][ T28] audit: type=1400 audit(1781906724.505:71615): avc: denied { write } for pid=13216 comm="syz.8.3707" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.492216][T13130] hsr_slave_1: entered promiscuous mode [ 219.499687][T13130] debugfs: 'hsr0' already exists in 'hsr' [ 219.505552][ T28] audit: type=1400 audit(1781906724.515:71616): avc: denied { write } for pid=13216 comm="syz.8.3707" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.527698][T13130] Cannot create hsr debugfs directory [ 219.547140][T12291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.563200][ T28] audit: type=1400 audit(1781906724.675:71617): avc: denied { write } for pid=13207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.637173][ T28] audit: type=1400 audit(1781906724.735:71618): avc: denied { write } for pid=13234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.691493][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 219.713461][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3713'. [ 219.822286][T13256] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3717'. [ 219.833915][T13130] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 219.853143][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.888020][T13130] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 219.908848][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.934249][T13130] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 219.948780][ T28] audit: type=1400 audit(1781906725.055:71619): avc: denied { write } for pid=13248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.976990][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.984876][T13130] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 220.007207][T13130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.037102][T13130] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.044272][T13130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.072482][ T28] audit: type=1400 audit(1781906725.175:71620): avc: denied { write } for pid=13276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.112819][T13130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.131066][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.165051][ T3018] 8021q: adding VLAN 0 to HW filter on device eth15 [ 220.190074][T13130] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.230760][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.237387][T13293] loop9: detected capacity change from 0 to 1 [ 220.237965][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.284982][T11159] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.292167][T11159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.431955][ T28] audit: type=1400 audit(1781906725.545:71621): avc: denied { write } for pid=13294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.524320][ T28] audit: type=1400 audit(1781906725.635:71622): avc: denied { write } for pid=13315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.588700][ T3018] 8021q: adding VLAN 0 to HW filter on device eth16 [ 220.604430][T11155] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.713976][T13130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.864610][T13130] veth0_vlan: entered promiscuous mode [ 220.871519][T13323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.875053][T13130] veth1_vlan: entered promiscuous mode [ 220.883887][T13323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.904545][T13130] veth0_macvtap: entered promiscuous mode [ 220.912427][T13130] veth1_macvtap: entered promiscuous mode [ 220.923578][T13130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.933577][T13130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.950976][ T3422] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.960051][ T3422] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.971223][ T3422] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.980456][ T3422] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.031736][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3689'. [ 221.165353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.175182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.183528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.433097][T13383] all (unregistering): Released all slaves [ 221.549532][T13396] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 221.549532][T13396] program syz.2.3752 not setting count and/or reply_len properly [ 221.587417][T13399] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 221.873547][T13421] loop8: detected capacity change from 0 to 256 [ 221.931268][T13421] FAT-fs (loop8): Directory bread(block 64) failed [ 221.944258][T13421] FAT-fs (loop8): Directory bread(block 65) failed [ 221.952062][T13421] FAT-fs (loop8): Directory bread(block 66) failed [ 221.970417][T13421] FAT-fs (loop8): Directory bread(block 67) failed [ 221.995193][T13421] FAT-fs (loop8): Directory bread(block 68) failed [ 222.013332][T13421] FAT-fs (loop8): Directory bread(block 69) failed [ 222.022977][T13426] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.027098][T13421] FAT-fs (loop8): Directory bread(block 70) failed [ 222.030558][T13426] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.048232][T13421] FAT-fs (loop8): Directory bread(block 71) failed [ 222.062015][T13421] FAT-fs (loop8): Directory bread(block 72) failed [ 222.075418][T13421] FAT-fs (loop8): Directory bread(block 73) failed [ 222.118755][T13421] syz.8.3763: attempt to access beyond end of device [ 222.118755][T13421] loop8: rw=2051, sector=1224, nr_sectors = 544 limit=256 [ 222.139848][T13426] batadv_slave_0: left promiscuous mode [ 222.203768][T13432] loop8: detected capacity change from 0 to 512 [ 222.219672][T13432] EXT4-fs: Ignoring removed i_version option [ 222.256909][ T8389] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.257733][T13432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.265674][ T8389] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 34468 - 0 [ 222.311779][T13432] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.328661][ T8389] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.337341][ T8389] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 34468 - 0 [ 222.366787][ T8389] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.380544][ T8389] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 34468 - 0 [ 222.391750][ T8389] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.400510][ T8389] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 34468 - 0 [ 222.446820][T12291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.605808][T13460] loop2: detected capacity change from 0 to 512 [ 222.617236][ T4425] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.623318][T13460] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.824618][T13468] xt_hashlimit: size too large, truncated to 1048576 [ 223.003514][T13483] loop7: detected capacity change from 0 to 512 [ 223.034102][T13483] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 223.064499][T13486] loop2: detected capacity change from 0 to 2048 [ 223.080707][T13483] EXT4-fs (loop7): 1 truncate cleaned up [ 223.092068][T13449] syz.9.3774 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 223.104228][T13483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.117771][T13449] CPU: 1 UID: 0 PID: 13449 Comm: syz.9.3774 Not tainted syzkaller #0 PREEMPT(lazy) [ 223.117913][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.117930][T13449] Call Trace: [ 223.117938][T13449] [ 223.117948][T13449] __dump_stack+0x1d/0x30 [ 223.117973][T13449] dump_stack_lvl+0x95/0xd0 [ 223.117992][T13449] dump_stack+0x15/0x1b [ 223.118014][T13449] dump_header+0x80/0x240 [ 223.118089][T13449] oom_kill_process+0x295/0x350 [ 223.118123][T13449] out_of_memory+0x981/0xbc0 [ 223.118205][T13449] try_charge_memcg+0x621/0xa00 [ 223.118335][T13449] charge_memcg+0x6d/0x120 [ 223.118373][T13449] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 223.118479][T13449] swap_cache_alloc_folio+0x47b/0x5e0 [ 223.118519][T13449] swap_cluster_readahead+0x2b1/0x460 [ 223.118581][T13449] swapin_readahead+0xd8/0x8a0 [ 223.118652][T13449] ? _raw_spin_unlock+0x9/0x30 [ 223.118679][T13449] ? swap_put_entries_cluster+0x49c/0x4c0 [ 223.118746][T13449] ? __rcu_read_unlock+0x4e/0x70 [ 223.118777][T13449] ? swap_cache_get_folio+0x1f7/0x200 [ 223.118919][T13449] do_swap_page+0x2a2/0x1ec0 [ 223.118948][T13449] ? __css_rstat_updated+0xbb/0x280 [ 223.118997][T13449] ? __rcu_read_lock+0x36/0x50 [ 223.119019][T13449] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 223.119147][T13449] handle_mm_fault+0xb3c/0x2da0 [ 223.119197][T13449] do_user_addr_fault+0x634/0x1060 [ 223.119228][T13449] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 223.119296][T13449] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 223.119323][T13449] ? trace_page_fault_user+0x1f/0xa0 [ 223.119351][T13449] exc_page_fault+0x62/0xa0 [ 223.119404][T13449] asm_exc_page_fault+0x26/0x30 [ 223.119429][T13449] RIP: 0033:0x7fbf31c77fb8 [ 223.119446][T13449] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 223.119464][T13449] RSP: 002b:00007ffeb0855710 EFLAGS: 00010246 [ 223.119490][T13449] RAX: 0000000000000000 RBX: 00005555776a1500 RCX: 00007fbf31c7d68e [ 223.119561][T13449] RDX: 00007ffeb0855760 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.119578][T13449] RBP: 00007fbf31f37da0 R08: 0000000000000000 R09: 0000000000000000 [ 223.119593][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000367f1 [ 223.119607][T13449] R13: 00007fbf31f3609c R14: 0000000000036523 R15: 00007ffeb0855890 [ 223.119626][T13449] [ 223.363672][T13449] memory: usage 307200kB, limit 307200kB, failcnt 179 [ 223.382979][T13449] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 223.409667][T13486] Alternate GPT is invalid, using primary GPT. [ 223.416727][T13486] loop2: p2 p3 p7 [ 223.442058][T13449] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 223.470750][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.477091][T13449] Memory cgroup stats for /syz9: [ 223.483220][T13449] cache 0 [ 223.522045][T13449] rss 0 [ 223.531585][T13449] shmem 0 [ 223.540051][ T7805] udevd[7805]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 223.542159][T13449] mapped_file 0 [ 223.561089][ T7798] udevd[7798]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 223.574292][ T7805] udevd[7805]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 223.578003][T13449] dirty 0 [ 223.610023][T13449] writeback 0 [ 223.622895][T13449] workingset_refault_anon 69 [ 223.654225][T13449] workingset_refault_file 0 [ 223.665460][T13449] swap 184320 [ 223.668944][T13449] swapcached 471040 [ 223.673937][T13449] pgpgin 4141 [ 223.684615][T13449] pgpgout 4140 [ 223.695483][T13449] pgfault 5211 [ 223.727917][T13449] pgmajfault 30 [ 223.737744][T13506] sctp: [Deprecated]: syz.7.3796 (pid 13506) Use of int in maxseg socket option. [ 223.737744][T13506] Use struct sctp_assoc_value instead [ 223.753962][T13449] inactive_anon 0 [ 223.757762][T13503] all (unregistering): Released all slaves [ 223.764060][T13449] active_anon 4096 [ 223.769739][T13449] inactive_file 0 [ 223.776309][T13449] active_file 0 [ 223.781528][T13449] unevictable 0 [ 223.788260][T13449] hierarchical_memory_limit 314572800 [ 223.809986][T13449] hierarchical_memsw_limit 9223372036854771712 [ 223.823278][T13508] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3797'. [ 223.835659][T13449] total_cache 0 [ 223.851737][T13449] total_rss 0 [ 223.861276][T13449] total_shmem 0 [ 223.872608][T13449] total_mapped_file 0 [ 223.876788][T13449] total_dirty 0 [ 223.883789][T13449] total_writeback 0 [ 223.890632][T13449] total_workingset_refault_anon 69 [ 223.896944][T13449] total_workingset_refault_file 0 [ 223.902180][T13449] total_swap 184320 [ 223.906516][T13449] total_swapcached 471040 [ 223.910923][T13449] total_pgpgin 4141 [ 223.914809][T13449] total_pgpgout 4140 [ 223.935305][T13449] total_pgfault 5211 [ 223.947225][T13449] total_pgmajfault 30 [ 223.953334][T13449] total_inactive_anon 0 [ 223.958436][T13449] total_active_anon 4096 [ 223.962958][T13449] total_inactive_file 0 [ 223.967509][T13449] total_active_file 0 [ 223.971963][T13449] total_unevictable 0 [ 223.976471][T13449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3774,pid=13449,uid=0 [ 224.000687][T13449] Memory cgroup out of memory: Killed process 13449 (syz.9.3774) total-vm:94096kB, anon-rss:1232kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 224.013685][T13451] syz.9.3774 (13451) used greatest stack depth: 9144 bytes left [ 224.159977][T13539] netlink: 'syz.3.3810': attribute type 3 has an invalid length. [ 224.167998][T13539] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3810'. [ 224.203445][T13537] 9pnet: p9_errstr2errno: server reported unknown error [ 224.232316][T13547] loop9: detected capacity change from 0 to 512 [ 224.240935][T13547] EXT4-fs: quotafile must be on filesystem root [ 224.249992][T13522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.261684][T13522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.428183][T13565] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.435532][T13565] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.474432][T13565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.484568][T13565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.519390][ T8389] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.529394][ T8389] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.539517][ T8389] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.548756][ T8389] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.658289][T13576] 9pnet: p9_errstr2errno: server reported unknown error [ 224.677522][T13581] xt_hashlimit: size too large, truncated to 1048576 [ 224.838140][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 224.838158][ T28] audit: type=1400 audit(1781906729.955:71639): avc: denied { lock } for pid=13600 comm="syz.7.3838" path="socket:[38263]" dev="sockfs" ino=38263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 224.908118][T13605] netlink: 'syz.3.3840': attribute type 1 has an invalid length. [ 224.926459][T13605] netlink: 'syz.3.3840': attribute type 2 has an invalid length. [ 225.125697][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3845'. [ 225.147194][T13617] gtp2: entered allmulticast mode [ 225.285583][T13627] loop7: detected capacity change from 0 to 512 [ 225.300509][T13627] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 225.317883][T13627] EXT4-fs (loop7): 1 truncate cleaned up [ 225.324343][T13627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.351321][ T28] audit: type=1400 audit(1781906730.465:71640): avc: denied { write } for pid=13626 comm="syz.7.3848" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.397205][ T28] audit: type=1400 audit(1781906730.495:71641): avc: denied { write } for pid=13626 comm="syz.7.3848" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.421944][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.455799][ T28] audit: type=1400 audit(1781906730.495:71642): avc: denied { write } for pid=13626 comm="syz.7.3848" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.533456][ T28] audit: type=1400 audit(1781906730.495:71643): avc: denied { write } for pid=13626 comm="syz.7.3848" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.824588][T13656] loop7: detected capacity change from 0 to 1024 [ 225.847704][T13656] EXT4-fs: Ignoring removed bh option [ 225.887908][T13656] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 225.929981][T13656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.982220][ T28] audit: type=1400 audit(1781906731.085:71644): avc: denied { write } for pid=13652 comm="syz.7.3859" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.038812][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.201083][T13674] loop8: detected capacity change from 0 to 1024 [ 226.225341][T13674] EXT4-fs: Ignoring removed nobh option [ 226.250602][T13674] EXT4-fs: Ignoring removed i_version option [ 226.346776][T13674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.385239][ T28] audit: type=1400 audit(1781906731.475:71645): avc: denied { write } for pid=13673 comm="syz.8.3878" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.434218][T13674] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 226.487363][T13674] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1180 with error 28 [ 226.545130][T13674] EXT4-fs (loop8): This should not happen!! Data will be lost [ 226.545130][T13674] [ 226.555483][T13674] EXT4-fs (loop8): Total free blocks count 0 [ 226.561535][T13674] EXT4-fs (loop8): Free/Dirty block details [ 226.568579][T13674] EXT4-fs (loop8): free_blocks=20480 [ 226.574112][T13674] EXT4-fs (loop8): dirty_blocks=1184 [ 226.579794][T13674] EXT4-fs (loop8): Block reservation details [ 226.586005][T13674] EXT4-fs (loop8): i_reserved_data_blocks=74 [ 226.676342][T13690] loop7: detected capacity change from 0 to 1024 [ 226.700119][T13690] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.731196][T13690] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 226.751523][T13690] EXT4-fs (loop7): orphan cleanup on readonly fs [ 226.753481][ T68] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1180 with error 28 [ 226.766030][T13690] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.3871: Freeing blocks not in datazone - block = 0, count = 4096 [ 226.811955][T12291] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 226.820602][T13690] loop7: lost filesystem error report for type 5 error -117 [ 226.836559][T13690] EXT4-fs (loop7): 1 orphan inode deleted [ 226.850011][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 226.850034][ C0] EXT4-fs (loop7): initial error at time 1781906731: ext4_free_blocks:6718 [ 226.850060][ C0] EXT4-fs (loop7): last error at time 1781906731: ext4_free_blocks:6718 [ 226.955957][T13707] loop9: detected capacity change from 0 to 256 [ 226.979161][T13690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.012550][ T28] audit: type=1400 audit(1781906732.125:71646): avc: denied { write } for pid=13681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.039521][T13690] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.3871: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 227.150537][ T28] audit: type=1400 audit(1781906732.265:71647): avc: denied { write } for pid=13717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.201427][ T7789] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.299038][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3884'. [ 227.473347][ T28] audit: type=1400 audit(1781906732.585:71648): avc: denied { write } for pid=13723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.801195][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 227.836042][T13783] loop8: detected capacity change from 0 to 512 [ 227.844586][T13783] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 227.866717][T13783] EXT4-fs (loop8): 1 truncate cleaned up [ 227.891380][T13783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.003793][T12291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.045883][T13804] netlink: 'syz.2.3910': attribute type 3 has an invalid length. [ 228.061672][T13804] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3910'. [ 228.132187][T13814] gtp1: left promiscuous mode [ 228.148588][T13814] gtp1: left allmulticast mode [ 228.167820][T13814] gtp2: left allmulticast mode [ 228.177392][T13812] syzkaller1: entered promiscuous mode [ 228.199357][ T68] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.215015][ T68] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.258323][ T68] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.283807][ T68] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.493510][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'. [ 228.514229][T13847] loop8: detected capacity change from 0 to 128 [ 228.673104][ T9931] IPVS: starting estimator thread 0... [ 228.778046][T13859] IPVS: using max 1968 ests per chain, 98400 per kthread [ 229.003367][T13887] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3943'. [ 229.082824][T13893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3945'. [ 229.182104][T13903] futex_wake_op: syz.2.3948 tries to shift op by 35; fix this program [ 229.224609][T13906] loop8: detected capacity change from 0 to 512 [ 229.234193][T13906] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.506581][T13931] loop9: detected capacity change from 0 to 512 [ 229.515635][T13931] EXT4-fs: Ignoring removed i_version option [ 229.551802][T13931] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.565347][T13931] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.621109][T13936] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3963'. [ 229.652238][T13936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3963'. [ 229.690542][T13130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.710574][T13945] loop2: detected capacity change from 0 to 512 [ 229.740281][T13945] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 229.784923][T13945] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 229.795406][T13945] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3966: Corrupt directory, running e2fsck is recommended [ 229.809806][T13945] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 229.835729][T13945] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.3966: corrupted in-inode xattr: e_name out of bounds [ 229.852048][T13945] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.852450][T13945] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3966: couldn't read orphan inode 15 (err -117) [ 229.855151][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 229.880095][ C1] EXT4-fs (loop2): initial error at time 1781906734: ext4_iget_extra_inode:5180: inode 15 [ 229.890069][ C1] EXT4-fs (loop2): last error at time 1781906734: ext4_iget_extra_inode:5180: inode 15 [ 229.901198][T13945] loop2: lost filesystem error report for type 5 error -117 [ 229.901941][T13945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.954866][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 229.954885][ T28] audit: type=1400 audit(1781906735.065:71654): avc: denied { write } for pid=13937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.012407][T13945] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.033599][ T28] audit: type=1400 audit(1781906735.125:71655): avc: denied { write } for pid=13944 comm="syz.2.3966" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.061387][T13945] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 230.093885][T13945] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3966: Corrupt directory, running e2fsck is recommended [ 230.134031][T13986] tipc: Enabling of bearer rejected, failed to enable media [ 230.143492][T13978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.153527][ T28] audit: type=1400 audit(1781906735.145:71656): avc: denied { write } for pid=13969 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.158437][T13975] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.199656][T13975] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 230.212948][T13975] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3966: Corrupt directory, running e2fsck is recommended [ 230.227146][ T28] audit: type=1400 audit(1781906735.275:71657): avc: denied { write } for pid=13944 comm="syz.2.3966" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.243266][T13981] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.270260][T13981] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 230.286648][T13981] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3966: Corrupt directory, running e2fsck is recommended [ 230.302516][T13988] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 230.398383][T13130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.410442][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.526067][ T3513] kernel write not supported for file /ppp (pid: 3513 comm: kworker/0:6) [ 230.854478][T14023] set_capacity_and_notify: 1 callbacks suppressed [ 230.854497][T14023] loop2: detected capacity change from 0 to 8192 [ 230.902693][T14023] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.984927][T14039] batadv_slave_1: entered promiscuous mode [ 231.002931][T14038] batadv_slave_1: left promiscuous mode [ 231.110395][T14050] loop7: detected capacity change from 0 to 128 [ 231.145025][ T28] audit: type=1400 audit(1781906736.255:71658): avc: denied { write } for pid=14030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.274219][ T28] audit: type=1400 audit(1781906736.385:71659): avc: denied { write } for pid=14057 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.327983][T14023] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 231.359179][T14064] loop7: detected capacity change from 0 to 512 [ 231.369467][T14064] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 231.382674][T14023] FAT-fs (loop2): Filesystem has been set read-only [ 231.389872][T14023] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 231.399200][T14023] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 231.528332][T14068] loop9: detected capacity change from 0 to 4096 [ 231.551579][T14068] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.600141][T14077] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.622292][ T3301] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 231.648444][T14077] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.689532][T13130] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.756637][T14084] syzkaller1: entered promiscuous mode [ 231.765746][T14084] syzkaller1: entered allmulticast mode [ 231.877339][T14097] macvlan0: entered promiscuous mode [ 231.890137][T14095] loop9: detected capacity change from 0 to 8192 [ 231.924161][T14095] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.991934][T14109] netlink: 'syz.3.4033': attribute type 1 has an invalid length. [ 232.021940][T14109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.058685][T14113] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4024'. [ 232.069591][T14113] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4024'. [ 232.165501][T14126] netlink: 'syz.8.4030': attribute type 1 has an invalid length. [ 232.198280][T14129] syzkaller1: entered promiscuous mode [ 232.208927][T14129] syzkaller1: entered allmulticast mode [ 232.226592][T14133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14133 comm=syz.3.4034 [ 232.327523][ T28] audit: type=1400 audit(1781906737.445:71660): avc: denied { write } for pid=14127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.394896][ T28] audit: type=1400 audit(1781906737.505:71661): avc: denied { write } for pid=14155 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.396685][T14158] netlink: 216 bytes leftover after parsing attributes in process `syz.8.4039'. [ 232.433899][T14158] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4039'. [ 232.496154][ T28] audit: type=1400 audit(1781906737.615:71662): avc: denied { mounton } for pid=14168 comm="syz.9.4044" path="/syzcgroup/unified/syz9/cgroup.procs" dev="cgroup2" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 232.609408][ T28] audit: type=1400 audit(1781906737.725:71663): avc: denied { write } for pid=14170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.894445][T14219] loop2: detected capacity change from 0 to 128 [ 232.919091][T14219] syz.2.4053: attempt to access beyond end of device [ 232.919091][T14219] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 232.940499][T14219] syz.2.4053: attempt to access beyond end of device [ 232.940499][T14219] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 232.964042][T14219] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 232.989562][T14219] syz.2.4053: attempt to access beyond end of device [ 232.989562][T14219] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 233.004043][T14219] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 233.016437][T14219] syz.2.4053: attempt to access beyond end of device [ 233.016437][T14219] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 233.030951][T14219] syz.2.4053: attempt to access beyond end of device [ 233.030951][T14219] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 233.056737][T14219] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 233.065924][T14219] syz.2.4053: attempt to access beyond end of device [ 233.065924][T14219] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 233.079440][T14219] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 233.092823][T14219] syz.2.4053: attempt to access beyond end of device [ 233.092823][T14219] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 233.106686][T14229] loop9: detected capacity change from 0 to 128 [ 233.109160][T14219] syz.2.4053: attempt to access beyond end of device [ 233.109160][T14219] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 233.127439][T14219] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 233.136286][T14219] syz.2.4053: attempt to access beyond end of device [ 233.136286][T14219] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 233.150078][T14229] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 233.150128][T14219] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 233.150632][T14219] syz.2.4053: attempt to access beyond end of device [ 233.150632][T14219] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 233.181627][T14219] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 233.190167][T14219] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 233.199062][T14219] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 233.207714][T14219] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 233.235141][ T8387] ================================================================== [ 233.243304][ T8387] BUG: KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic [ 233.251979][ T8387] [ 233.254326][ T8387] write to 0xffff88814c941c1c of 4 bytes by task 14219 on cpu 1: [ 233.262064][ T8387] __fat_write_inode+0x235/0x540 [ 233.267045][ T8387] fat_write_inode+0xbb/0xd0 [ 233.271655][ T8387] __writeback_single_inode+0x327/0x660 [ 233.277216][ T8387] writeback_single_inode+0x16d/0x400 [ 233.282620][ T8387] sync_inode_metadata+0x6e/0xa0 [ 233.287592][ T8387] fat_flush_inodes+0x77/0x150 [ 233.292383][ T8387] fat_truncate_blocks+0x536/0x5b0 [ 233.297521][ T8387] fat_write_end+0xba/0x160 [ 233.302062][ T8387] generic_perform_write+0x314/0x490 [ 233.307384][ T8387] __generic_file_write_iter+0x9e/0x120 [ 233.313057][ T8387] generic_file_write_iter+0x77/0x1f0 [ 233.318462][ T8387] vfs_write+0x57d/0x990 [ 233.322754][ T8387] ksys_write+0xdc/0x1a0 [ 233.327126][ T8387] __x64_sys_write+0x40/0x50 [ 233.331738][ T8387] x64_sys_call+0x27e1/0x3020 [ 233.336442][ T8387] do_syscall_64+0x136/0x3c0 [ 233.341061][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.346980][ T8387] [ 233.349320][ T8387] read to 0xffff88814c941c00 of 1024 bytes by task 8387 on cpu 0: [ 233.357139][ T8387] copy_folio_from_iter_atomic+0x728/0x10a0 [ 233.363075][ T8387] generic_perform_write+0x2c4/0x490 [ 233.368475][ T8387] shmem_file_write_iter+0xc5/0xf0 [ 233.373626][ T8387] lo_rw_aio+0x6a9/0x760 [ 233.377896][ T8387] loop_process_work+0x567/0xac0 [ 233.382855][ T8387] loop_workfn+0x31/0x40 [ 233.387126][ T8387] process_scheduled_works+0x4d4/0x9a0 [ 233.392629][ T8387] worker_thread+0x569/0x750 [ 233.397250][ T8387] kthread+0x221/0x270 [ 233.401343][ T8387] ret_from_fork+0x146/0x330 [ 233.405971][ T8387] ret_from_fork_asm+0x1a/0x30 [ 233.410767][ T8387] [ 233.413105][ T8387] Reported by Kernel Concurrency Sanitizer on: [ 233.419296][ T8387] CPU: 0 UID: 0 PID: 8387 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(lazy) [ 233.428870][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.439050][ T8387] Workqueue: loop2 loop_workfn [ 233.443845][ T8387] ==================================================================