last executing test programs: 3.010191406s ago: executing program 2 (id=520): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x87, &(0x7f0000000680)=""/135, 0x41000}, 0x94) 2.988299147s ago: executing program 3 (id=522): setns(0xc9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 2.89445182s ago: executing program 2 (id=525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x2}}}}}}, 0x0) 2.86746138s ago: executing program 2 (id=528): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.963374922s ago: executing program 2 (id=533): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x11, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fadvise64(r0, 0x6, 0x100001, 0x4) 1.963281082s ago: executing program 3 (id=534): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$kcm(0x11, 0x3, 0x0) 1.739184788s ago: executing program 1 (id=551): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500080000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.738748548s ago: executing program 0 (id=541): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) 1.545609262s ago: executing program 1 (id=542): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="0ed4000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) 1.545068022s ago: executing program 0 (id=554): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) 1.427912415s ago: executing program 0 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.322585198s ago: executing program 1 (id=546): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e23, 0x9, @empty, 0x7}}, 0x7fff, 0x8}, &(0x7f0000000100)=0x90) 1.206503891s ago: executing program 4 (id=547): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)={0xf, 0x0, 0x100000}, 0x20) 1.205164321s ago: executing program 3 (id=559): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 1.182007641s ago: executing program 0 (id=548): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x10000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000340)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.093371873s ago: executing program 4 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffee7, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x0, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) 1.088478174s ago: executing program 3 (id=562): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="02030e00d3fc02080000ab5d71b9edd7c9550385dc090000", 0x18, 0x400c820, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @multicast}, 0x14) 964.058717ms ago: executing program 3 (id=550): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) 912.994858ms ago: executing program 4 (id=552): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 788.930491ms ago: executing program 2 (id=553): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10030, 0x1000000, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 662.298004ms ago: executing program 4 (id=555): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x48, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 457.110659ms ago: executing program 0 (id=556): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 358.141411ms ago: executing program 4 (id=557): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@loopback, {0x0, 0x0, 0x2, 0x5, 0x10008000, 0x5}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae6}, 0x0, 0x3501, 0x2, 0x1, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}, 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 349.767292ms ago: executing program 1 (id=569): r0 = socket$l2tp6(0xa, 0x2, 0x73) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 339.022502ms ago: executing program 3 (id=558): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000500), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1000000004"], 0x20) gettid() 206.949225ms ago: executing program 1 (id=560): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_nolock}, {@grpquota}]}, 0xfe, 0x560, &(0x7f0000001040)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) 146.768497ms ago: executing program 0 (id=561): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x4ffe2, 0x0) 136.951607ms ago: executing program 4 (id=563): prctl$PR_SET_SECUREBITS(0x1c, 0x14) setuid(0xee01) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@acl}, {@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x613, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40086604, 0x0) 194µs ago: executing program 2 (id=564): unshare(0x68040000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$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") r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) 0s ago: executing program 1 (id=565): r0 = socket(0xa, 0x3, 0x87) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) kernel console output (not intermixed with test programs): syzkaller login: [ 20.627215][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 20.627235][ T29] audit: type=1400 audit(1791111729.864:95): avc: denied { write } for pid=3154 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.710942][ T29] audit: type=1400 audit(1791111729.954:96): avc: denied { write } for pid=3154 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.754350][ T29] audit: type=1400 audit(1791111729.994:97): avc: denied { write } for pid=3168 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.029526][ T29] audit: type=1400 audit(1791111730.274:98): avc: denied { transition } for pid=3176 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.029677][ T29] audit: type=1400 audit(1791111730.274:99): avc: denied { noatsecure } for pid=3176 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.030210][ T29] audit: type=1400 audit(1791111730.274:100): avc: denied { write } for pid=3176 comm="sh" path="pipe:[2400]" dev="pipefs" ino=2400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.030247][ T29] audit: type=1400 audit(1791111730.274:101): avc: denied { rlimitinh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.030290][ T29] audit: type=1400 audit(1791111730.274:102): avc: denied { siginh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.894039][ T29] audit: type=1400 audit(1791111734.134:103): avc: denied { search } for pid=3189 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.894080][ T29] audit: type=1400 audit(1791111734.134:104): avc: denied { search } for pid=3189 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.995845][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 25.995864][ T29] audit: type=1400 audit(1791111735.234:118): avc: denied { write } for pid=3231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.034275][ T29] audit: type=1400 audit(1791111735.274:119): avc: denied { write } for pid=3242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.197476][ T29] audit: type=1400 audit(1791111735.434:120): avc: denied { write } for pid=3245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.227541][ T29] audit: type=1400 audit(1791111735.464:121): avc: denied { write } for pid=3256 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.356570][ T29] audit: type=1400 audit(1791111735.594:122): avc: denied { write } for pid=3259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.393066][ T29] audit: type=1400 audit(1791111735.634:123): avc: denied { write } for pid=3270 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 27.221009][ T29] audit: type=1400 audit(1791111736.464:124): avc: denied { write } for pid=3277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.263774][ T29] audit: type=1400 audit(1791111736.504:125): avc: denied { write } for pid=3289 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.750661][ T29] audit: type=1400 audit(1791111738.994:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.750997][ T29] audit: type=1400 audit(1791111738.994:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.751622][ T3283] cgroup: Unknown subsys name 'net' [ 29.889073][ T3283] cgroup: Unknown subsys name 'cpuset' [ 29.889804][ T3283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.044446][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.065624][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.373843][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.373886][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.374015][ T3305] bridge_slave_0: entered allmulticast mode [ 31.374566][ T3305] bridge_slave_0: entered promiscuous mode [ 31.379397][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.379473][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.379528][ T3305] bridge_slave_1: entered allmulticast mode [ 31.380674][ T3305] bridge_slave_1: entered promiscuous mode [ 31.404231][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.407070][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.416302][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.416335][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.416453][ T3309] bridge_slave_0: entered allmulticast mode [ 31.416862][ T3309] bridge_slave_0: entered promiscuous mode [ 31.477662][ T3305] team0: Port device team_slave_0 added [ 31.490912][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.490961][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.491047][ T3309] bridge_slave_1: entered allmulticast mode [ 31.491667][ T3309] bridge_slave_1: entered promiscuous mode [ 31.502863][ T3305] team0: Port device team_slave_1 added [ 31.552791][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.552854][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.552982][ T3304] bridge_slave_0: entered allmulticast mode [ 31.553479][ T3304] bridge_slave_0: entered promiscuous mode [ 31.559138][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.559283][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.559419][ T3304] bridge_slave_1: entered allmulticast mode [ 31.560586][ T3304] bridge_slave_1: entered promiscuous mode [ 31.561971][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.562013][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.562117][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.598044][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.600889][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.609755][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.609791][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.609878][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.637479][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.637671][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.637841][ T3313] bridge_slave_0: entered allmulticast mode [ 31.639932][ T3313] bridge_slave_0: entered promiscuous mode [ 31.680966][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.681060][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.681262][ T3313] bridge_slave_1: entered allmulticast mode [ 31.682522][ T3313] bridge_slave_1: entered promiscuous mode [ 31.685855][ T3309] team0: Port device team_slave_0 added [ 31.690922][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.712758][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.712853][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.713039][ T3310] bridge_slave_0: entered allmulticast mode [ 31.714098][ T3310] bridge_slave_0: entered promiscuous mode [ 31.717857][ T3309] team0: Port device team_slave_1 added [ 31.741392][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.763035][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.763137][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.763325][ T3310] bridge_slave_1: entered allmulticast mode [ 31.765000][ T3310] bridge_slave_1: entered promiscuous mode [ 31.800562][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.812814][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.812856][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.812983][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.819545][ T3305] hsr_slave_0: entered promiscuous mode [ 31.820603][ T3305] hsr_slave_1: entered promiscuous mode [ 31.823652][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.836855][ T3304] team0: Port device team_slave_0 added [ 31.839574][ T3304] team0: Port device team_slave_1 added [ 31.851286][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.851328][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.851420][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.897175][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.906035][ T3313] team0: Port device team_slave_0 added [ 31.908161][ T3313] team0: Port device team_slave_1 added [ 31.919743][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.919787][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.919894][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.922405][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.941609][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.941657][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.941744][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.005951][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.006002][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.006130][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.008763][ T3310] team0: Port device team_slave_0 added [ 32.011690][ T3310] team0: Port device team_slave_1 added [ 32.023514][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.023556][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.023678][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.102962][ T3309] hsr_slave_0: entered promiscuous mode [ 32.103905][ T3309] hsr_slave_1: entered promiscuous mode [ 32.104553][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 32.104603][ T3309] Cannot create hsr debugfs directory [ 32.129963][ T3304] hsr_slave_0: entered promiscuous mode [ 32.131016][ T3304] hsr_slave_1: entered promiscuous mode [ 32.131501][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.131554][ T3304] Cannot create hsr debugfs directory [ 32.132389][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.132424][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.132510][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.147021][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.147073][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.147147][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.180810][ T3313] hsr_slave_0: entered promiscuous mode [ 32.181795][ T3313] hsr_slave_1: entered promiscuous mode [ 32.182394][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.182906][ T3313] Cannot create hsr debugfs directory [ 32.261768][ T3310] hsr_slave_0: entered promiscuous mode [ 32.264378][ T3310] hsr_slave_1: entered promiscuous mode [ 32.266441][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 32.266485][ T3310] Cannot create hsr debugfs directory [ 32.545242][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.547157][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.554544][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.559012][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.560638][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.565699][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.573302][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.580529][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.607412][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.611001][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.615587][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.625995][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.627306][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.632951][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.644700][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.654158][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.678721][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.681048][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.682419][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.684960][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.685588][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.687538][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.695527][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.707225][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.755748][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.761224][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.772691][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.774745][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.778170][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.788980][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.809527][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.811534][ T3313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.850648][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.852445][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.855135][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.857657][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.860912][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.862275][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.869622][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.882724][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.890617][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.922198][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.946609][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.956879][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.956983][ T711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.960042][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.970158][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.987871][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.987905][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.009794][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.009833][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.014412][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.028267][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.028445][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.050735][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.050871][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.074294][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.074323][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.110862][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.113135][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.125104][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.125170][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.176049][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.177970][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.200960][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.201003][ T711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.209438][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.209536][ T711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.232425][ T711] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.232556][ T711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.258935][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.259035][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.426362][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.513522][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.548637][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.602029][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.636008][ T3305] veth0_vlan: entered promiscuous mode [ 33.647311][ T3305] veth1_vlan: entered promiscuous mode [ 33.674949][ T3305] veth0_macvtap: entered promiscuous mode [ 33.688213][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.691365][ T3305] veth1_macvtap: entered promiscuous mode [ 33.717262][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.724164][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.779698][ T3309] veth0_vlan: entered promiscuous mode [ 33.800867][ T3309] veth1_vlan: entered promiscuous mode [ 33.803890][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.803903][ T29] audit: type=1400 audit(1791111743.044:146): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.7yB39K/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.803931][ T29] audit: type=1400 audit(1791111743.044:147): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.806493][ T29] audit: type=1400 audit(1791111743.044:148): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.7yB39K/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.807786][ T29] audit: type=1400 audit(1791111743.044:149): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.815073][ T29] audit: type=1400 audit(1791111743.054:150): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.7yB39K/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.817769][ T29] audit: type=1400 audit(1791111743.054:151): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.7yB39K/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.827018][ T29] audit: type=1400 audit(1791111743.064:152): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.839974][ T3309] veth0_macvtap: entered promiscuous mode [ 33.843653][ T3309] veth1_macvtap: entered promiscuous mode [ 33.848562][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.849659][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.857667][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.866479][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.873538][ T711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.875755][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.902699][ T711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.905742][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.906258][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.906625][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.927488][ T29] audit: type=1400 audit(1791111743.164:153): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.928946][ T29] audit: type=1400 audit(1791111743.164:154): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.091835][ T3313] veth0_vlan: entered promiscuous mode [ 34.116812][ T3305] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.128224][ T3313] veth1_vlan: entered promiscuous mode [ 34.176907][ T29] audit: type=1400 audit(1791111743.414:155): avc: denied { read } for pid=3305 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.222305][ T3313] veth0_macvtap: entered promiscuous mode [ 34.239447][ T3313] veth1_macvtap: entered promiscuous mode [ 34.262141][ T3304] veth0_vlan: entered promiscuous mode [ 34.274370][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.275242][ T3310] veth0_vlan: entered promiscuous mode [ 34.279107][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.283233][ T3310] veth1_vlan: entered promiscuous mode [ 34.314456][ T3304] veth1_vlan: entered promiscuous mode [ 34.350081][ T711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.350668][ T711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.350747][ T711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.350805][ T711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.389530][ T3310] veth0_macvtap: entered promiscuous mode [ 34.409151][ T3310] veth1_macvtap: entered promiscuous mode [ 34.411826][ T3304] veth0_macvtap: entered promiscuous mode [ 34.423151][ T3304] veth1_macvtap: entered promiscuous mode [ 34.440752][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.452698][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.472208][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.473802][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.518726][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.518775][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.518868][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.518909][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.571293][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.573185][ T3522] loop1: detected capacity change from 0 to 164 [ 34.588031][ T3522] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 34.588091][ T3522] isofs_fill_super: root inode is not a directory. Corrupted media? [ 34.639629][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.640009][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.640197][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.738954][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.739200][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.849749][ T3531] syz.3.4 (3531) used greatest stack depth: 11208 bytes left [ 34.970575][ T3517] loop2: detected capacity change from 0 to 65536 [ 35.030652][ T3547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 35.507890][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 35.508280][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 35.526038][ T3579] Zero length message leads to an empty skb [ 35.605455][ T3590] loop2: detected capacity change from 0 to 512 [ 35.621481][ T3590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.621668][ T3590] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.654277][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.710351][ T3604] FAULT_INJECTION: forcing a failure. [ 35.710351][ T3604] name failslab, interval 1, probability 0, space 0, times 1 [ 35.710442][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.710475][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 35.710500][ T3604] Call Trace: [ 35.710509][ T3604] [ 35.710519][ T3604] __dump_stack+0x1d/0x30 [ 35.710561][ T3604] dump_stack_lvl+0x95/0xd0 [ 35.710590][ T3604] dump_stack+0x15/0x1b [ 35.710629][ T3604] should_fail_ex+0x262/0x280 [ 35.710666][ T3604] should_failslab+0x8c/0xb0 [ 35.710703][ T3604] __kmalloc_node_noprof+0xdb/0x500 [ 35.710900][ T3604] ? futex_wait+0x18f/0x1c0 [ 35.710929][ T3604] ? load_msg+0x41/0x2f0 [ 35.710953][ T3604] ? load_msg+0x41/0x2f0 [ 35.710981][ T3604] load_msg+0x41/0x2f0 [ 35.711014][ T3604] do_msgsnd+0xe4/0xb50 [ 35.711041][ T3604] ? __se_sys_futex+0x2f6/0x370 [ 35.711084][ T3604] ? xfd_validate_state+0x45/0xf0 [ 35.711127][ T3604] __x64_sys_msgsnd+0xa8/0xc0 [ 35.711209][ T3604] x64_sys_call+0x227f/0x2550 [ 35.711246][ T3604] do_syscall_64+0x112/0x360 [ 35.711285][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.711314][ T3604] RIP: 0033:0x7fdaadcce159 [ 35.711342][ T3604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.711367][ T3604] RSP: 002b:00007fdaac727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 35.711476][ T3604] RAX: ffffffffffffffda RBX: 00007fdaadf55fa0 RCX: 00007fdaadcce159 [ 35.711496][ T3604] RDX: 000000000000007e RSI: 0000200000000500 RDI: 0000000000000000 [ 35.711514][ T3604] RBP: 00007fdaadd6506b R08: 0000000000000000 R09: 0000000000000000 [ 35.711532][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.711628][ T3604] R13: 00007fdaadf56038 R14: 00007fdaadf55fa0 R15: 00007ffff2ee6328 [ 35.711654][ T3604] [ 35.844361][ T3608] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 36.093003][ T3638] loop4: detected capacity change from 0 to 512 [ 36.105599][ T3638] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.55: iget: bad i_size value: 38620345925642 [ 36.105664][ T3638] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.106008][ T3638] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.55: couldn't read orphan inode 15 (err -117) [ 36.106041][ T3638] loop4: lost filesystem error report for type 5 error -117 [ 36.106646][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.137299][ T3638] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.55: bg 0: block 5: invalid block bitmap [ 36.138102][ T3638] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 36.138178][ T3638] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.138178][ T3638] [ 36.138219][ T3638] EXT4-fs (loop4): Total free blocks count 0 [ 36.138261][ T3638] EXT4-fs (loop4): Free/Dirty block details [ 36.144681][ T3638] EXT4-fs (loop4): free_blocks=0 [ 36.144728][ T3638] EXT4-fs (loop4): dirty_blocks=1 [ 36.144772][ T3638] EXT4-fs (loop4): Block reservation details [ 36.144806][ T3638] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 36.233957][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.247138][ T3638] syz.4.55 (3638) used greatest stack depth: 9616 bytes left [ 36.296780][ T3643] syz.4.56 uses obsolete (PF_INET,SOCK_PACKET) [ 36.353703][ T3647] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.354104][ T3647] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 36.484562][ T3657] loop3: detected capacity change from 0 to 512 [ 36.529221][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.529252][ T3657] FAT-fs (loop3): Filesystem has been set read-only [ 36.529495][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.529952][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.530079][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.536756][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.536927][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.537181][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.537437][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.537718][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.537810][ T3657] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 36.728519][ T3672] FAULT_INJECTION: forcing a failure. [ 36.728519][ T3672] name failslab, interval 1, probability 0, space 0, times 0 [ 36.728556][ T3672] CPU: 1 UID: 0 PID: 3672 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.728589][ T3672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.728619][ T3672] Call Trace: [ 36.728626][ T3672] [ 36.728633][ T3672] __dump_stack+0x1d/0x30 [ 36.728686][ T3672] dump_stack_lvl+0x95/0xd0 [ 36.728727][ T3672] dump_stack+0x15/0x1b [ 36.728776][ T3672] should_fail_ex+0x262/0x280 [ 36.728804][ T3672] should_failslab+0x8c/0xb0 [ 36.728847][ T3672] __kmalloc_node_noprof+0xdb/0x500 [ 36.728887][ T3672] ? futex_wait+0x18f/0x1c0 [ 36.728979][ T3672] ? load_msg+0x41/0x2f0 [ 36.729000][ T3672] ? load_msg+0x41/0x2f0 [ 36.729020][ T3672] load_msg+0x41/0x2f0 [ 36.729046][ T3672] do_msgsnd+0xe4/0xb50 [ 36.729080][ T3672] ? __se_sys_futex+0x2f6/0x370 [ 36.729121][ T3672] ? xfd_validate_state+0x45/0xf0 [ 36.729210][ T3672] __x64_sys_msgsnd+0xa8/0xc0 [ 36.729232][ T3672] x64_sys_call+0x227f/0x2550 [ 36.729259][ T3672] do_syscall_64+0x112/0x360 [ 36.729388][ T3672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.729419][ T3672] RIP: 0033:0x7f03a39ee159 [ 36.729439][ T3672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.729472][ T3672] RSP: 002b:00007f03a2447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 36.729537][ T3672] RAX: ffffffffffffffda RBX: 00007f03a3c75fa0 RCX: 00007f03a39ee159 [ 36.729613][ T3672] RDX: 000000000000007e RSI: 0000200000000500 RDI: 0000000000000000 [ 36.729626][ T3672] RBP: 00007f03a3a8506b R08: 0000000000000000 R09: 0000000000000000 [ 36.729649][ T3672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.729666][ T3672] R13: 00007f03a3c76038 R14: 00007f03a3c75fa0 R15: 00007fff07ed0438 [ 36.729745][ T3672] [ 36.729884][ T11] input: syz0 as /devices/virtual/misc/uhid/0005:057B:0009.0001/input/input5 [ 36.734027][ T11] hid-generic 0005:057B:0009.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz1 [ 36.932461][ T3673] fido_id[3673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.106639][ T3691] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3944. macoff=96 [ 37.159425][ T3696] loop4: detected capacity change from 0 to 512 [ 37.188834][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.188863][ T3696] FAT-fs (loop4): Filesystem has been set read-only [ 37.188996][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.189363][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.189461][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.189737][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.189858][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.190213][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.190414][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.190764][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.190887][ T3696] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 37.371013][ T3705] process 'syz.2.82' launched '/dev/fd/5' with NULL argv: empty string added [ 38.361323][ T3729] Illegal XDP return value 5 on prog (id 15) dev syz_tun, expect packet loss! [ 38.423144][ T3738] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 38.467326][ T3740] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.97'. [ 38.520927][ T3735] loop3: detected capacity change from 0 to 1024 [ 38.522782][ T3735] EXT4-fs: Ignoring removed bh option [ 38.526025][ T3735] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 38.564848][ T3735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.599368][ T3735] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.645094][ T3735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.650822][ T3754] capability: warning: `syz.2.103' uses deprecated v2 capabilities in a way that may be insecure [ 38.759920][ T3764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.760041][ T3764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.884948][ T3772] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.111'. [ 38.918223][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 38.918238][ T29] audit: type=1400 audit(1791111748.154:288): avc: denied { bind } for pid=3773 comm="syz.4.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.997778][ T29] audit: type=1400 audit(1791111748.234:289): avc: denied { create } for pid=3775 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.010775][ T29] audit: type=1400 audit(1791111748.244:290): avc: denied { setopt } for pid=3775 comm="syz.1.113" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.121691][ T29] audit: type=1400 audit(1791111748.364:291): avc: denied { write } for pid=3778 comm="syz.4.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 39.277012][ T29] audit: type=1400 audit(1791111748.514:292): avc: denied { write } for pid=3790 comm="syz.3.120" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.665288][ T3798] syzkaller1: entered promiscuous mode [ 39.665310][ T3798] syzkaller1: entered allmulticast mode [ 39.666468][ T29] audit: type=1400 audit(1791111748.904:293): avc: denied { ioctl } for pid=3797 comm="syz.2.122" path="socket:[5760]" dev="sockfs" ino=5760 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.785555][ T29] audit: type=1400 audit(1791111749.024:294): avc: denied { name_bind } for pid=3807 comm="syz.1.128" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.813799][ T3800] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 39.870298][ T3814] loop2: detected capacity change from 0 to 512 [ 39.873669][ T3814] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.873757][ T3814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.877481][ T3813] loop3: detected capacity change from 0 to 4096 [ 39.910429][ T3816] loop4: detected capacity change from 0 to 1024 [ 39.921442][ T3814] EXT4-fs (loop2): 1 truncate cleaned up [ 39.921904][ T3814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.924745][ T29] audit: type=1400 audit(1791111749.174:295): avc: denied { write } for pid=3812 comm="syz.2.139" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.924798][ T29] audit: type=1400 audit(1791111749.174:296): avc: denied { append } for pid=3812 comm="syz.2.139" path="/35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.959786][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.976809][ T29] audit: type=1400 audit(1791111749.214:297): avc: denied { ioctl } for pid=3812 comm="syz.2.139" path="/35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop2" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.014820][ T3816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 40.144520][ T3825] bonding: no command found in bonding_masters - use +ifname or -ifname [ 40.149927][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 40.168089][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.234995][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.270322][ T3836] loop3: detected capacity change from 0 to 512 [ 40.278975][ T3836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.281463][ T3836] EXT4-fs (loop3): 1 truncate cleaned up [ 40.282345][ T3836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.449006][ T3849] loop4: detected capacity change from 0 to 4096 [ 40.452381][ T3849] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.452418][ T3849] EXT4-fs: Ignoring removed bh option [ 40.453821][ T3852] syzkaller1: entered promiscuous mode [ 40.453842][ T3852] syzkaller1: entered allmulticast mode [ 40.498060][ T3849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.505232][ T3849] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.141: Failed to acquire dquot type 1 [ 40.558744][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.579886][ T3855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3855 comm=syz.4.143 [ 40.632149][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.632268][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.706856][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.757289][ T3863] loop0: detected capacity change from 0 to 4096 [ 40.792918][ T3863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.834210][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.848988][ T3868] bonding: no command found in bonding_masters - use +ifname or -ifname [ 41.274527][ T3889] loop0: detected capacity change from 0 to 4096 [ 41.276532][ T3889] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.276561][ T3889] EXT4-fs: Ignoring removed bh option [ 41.308899][ T3889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.332672][ T3889] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.157: Failed to acquire dquot type 1 [ 41.397997][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.575182][ T3908] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.615393][ T3914] loop2: detected capacity change from 0 to 512 [ 41.719498][ T3919] FAULT_INJECTION: forcing a failure. [ 41.719498][ T3919] name failslab, interval 1, probability 0, space 0, times 0 [ 41.719528][ T3919] CPU: 0 UID: 0 PID: 3919 Comm: syz.4.169 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.719573][ T3919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.719592][ T3919] Call Trace: [ 41.719601][ T3919] [ 41.719611][ T3919] __dump_stack+0x1d/0x30 [ 41.719717][ T3919] dump_stack_lvl+0x95/0xd0 [ 41.719756][ T3919] dump_stack+0x15/0x1b [ 41.719777][ T3919] should_fail_ex+0x262/0x280 [ 41.719827][ T3919] ? security_bpf_map_create+0x51/0x130 [ 41.719921][ T3919] should_failslab+0x8c/0xb0 [ 41.719959][ T3919] __kmalloc_noprof+0xd0/0x4d0 [ 41.719995][ T3919] ? security_bpf_map_create+0x51/0x130 [ 41.720048][ T3919] security_bpf_map_create+0x51/0x130 [ 41.720073][ T3919] map_create+0x28c/0xfe0 [ 41.720115][ T3919] __sys_bpf+0x99a/0xc30 [ 41.720255][ T3919] ? do_futex+0x370/0x460 [ 41.720300][ T3919] __x64_sys_bpf+0x69/0x80 [ 41.720324][ T3919] x64_sys_call+0xf26/0x2550 [ 41.720384][ T3919] do_syscall_64+0x112/0x360 [ 41.720416][ T3919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.720448][ T3919] RIP: 0033:0x7fc480e5e159 [ 41.720488][ T3919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.720508][ T3919] RSP: 002b:00007fc47f8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.720535][ T3919] RAX: ffffffffffffffda RBX: 00007fc4810e5fa0 RCX: 00007fc480e5e159 [ 41.720623][ T3919] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 41.720641][ T3919] RBP: 00007fc480ef506b R08: 0000000000000000 R09: 0000000000000000 [ 41.720659][ T3919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.720676][ T3919] R13: 00007fc4810e6038 R14: 00007fc4810e5fa0 R15: 00007ffda31458e8 [ 41.720724][ T3919] [ 42.262093][ T3952] FAULT_INJECTION: forcing a failure. [ 42.262093][ T3952] name failslab, interval 1, probability 0, space 0, times 0 [ 42.262122][ T3952] CPU: 1 UID: 0 PID: 3952 Comm: syz.2.185 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.262147][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.262163][ T3952] Call Trace: [ 42.262171][ T3952] [ 42.262179][ T3952] __dump_stack+0x1d/0x30 [ 42.262289][ T3952] dump_stack_lvl+0x95/0xd0 [ 42.262320][ T3952] dump_stack+0x15/0x1b [ 42.262343][ T3952] should_fail_ex+0x262/0x280 [ 42.262417][ T3952] ? security_bpf_map_create+0x51/0x130 [ 42.262501][ T3952] should_failslab+0x8c/0xb0 [ 42.262536][ T3952] __kmalloc_noprof+0xd0/0x4d0 [ 42.262585][ T3952] ? security_bpf_map_create+0x51/0x130 [ 42.262608][ T3952] security_bpf_map_create+0x51/0x130 [ 42.262711][ T3952] map_create+0x28c/0xfe0 [ 42.262746][ T3952] __sys_bpf+0x99a/0xc30 [ 42.262773][ T3952] ? do_futex+0x370/0x460 [ 42.262843][ T3952] __x64_sys_bpf+0x69/0x80 [ 42.262879][ T3952] x64_sys_call+0xf26/0x2550 [ 42.262904][ T3952] do_syscall_64+0x112/0x360 [ 42.262930][ T3952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.262951][ T3952] RIP: 0033:0x7fdaadcce159 [ 42.263022][ T3952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.263046][ T3952] RSP: 002b:00007fdaac727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.263123][ T3952] RAX: ffffffffffffffda RBX: 00007fdaadf55fa0 RCX: 00007fdaadcce159 [ 42.263142][ T3952] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 42.263157][ T3952] RBP: 00007fdaadd6506b R08: 0000000000000000 R09: 0000000000000000 [ 42.263170][ T3952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.263232][ T3952] R13: 00007fdaadf56038 R14: 00007fdaadf55fa0 R15: 00007ffff2ee6328 [ 42.263257][ T3952] [ 42.444173][ T3958] loop2: detected capacity change from 0 to 512 [ 42.588091][ T3960] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 42.623992][ T3963] loop1: detected capacity change from 0 to 256 [ 42.648715][ T3963] ======================================================= [ 42.648715][ T3963] WARNING: The mand mount option has been deprecated and [ 42.648715][ T3963] and is ignored by this kernel. Remove the mand [ 42.648715][ T3963] option from the mount to silence this warning. [ 42.648715][ T3963] ======================================================= [ 42.744139][ T3965] syz.1.189: attempt to access beyond end of device [ 42.744139][ T3965] loop1: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 42.744270][ T3965] syz.1.189: attempt to access beyond end of device [ 42.744270][ T3965] loop1: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 42.744348][ T3965] syz.1.189: attempt to access beyond end of device [ 42.744348][ T3965] loop1: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 42.744479][ T3965] syz.1.189: attempt to access beyond end of device [ 42.744479][ T3965] loop1: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 42.744591][ T3965] syz.1.189: attempt to access beyond end of device [ 42.744591][ T3965] loop1: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 42.744873][ T3965] syz.1.189: attempt to access beyond end of device [ 42.744873][ T3965] loop1: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 42.744955][ T3965] syz.1.189: attempt to access beyond end of device [ 42.744955][ T3965] loop1: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 42.745274][ T3965] syz.1.189: attempt to access beyond end of device [ 42.745274][ T3965] loop1: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 42.745396][ T3965] syz.1.189: attempt to access beyond end of device [ 42.745396][ T3965] loop1: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 42.745556][ T3965] syz.1.189: attempt to access beyond end of device [ 42.745556][ T3965] loop1: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 42.794179][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.794511][ T3958] FAT-fs (loop2): Filesystem has been set read-only [ 42.795346][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.807090][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.808095][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.823362][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.830035][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.843702][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.857215][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.887318][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.916792][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.940119][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.949139][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.977696][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 42.985851][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 43.003503][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 43.010774][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 43.014248][ T3958] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 43.015048][ T3958] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 43.485424][ T711] Buffer I/O error on dev loop1, logical block 1137, lost async page write [ 43.597713][ T3987] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.610930][ T3987] EXT4-fs (loop0): 1 truncate cleaned up [ 43.611367][ T3987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.812741][ T4000] EXT4-fs: Ignoring removed bh option [ 43.829958][ T4000] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 43.853875][ T4000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.175814][ T4000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.176657][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.384993][ T4012] synth uevent: /bus/acpi: unknown uevent action string [ 44.452768][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 44.452785][ T29] audit: type=1400 audit(1791111753.694:319): avc: denied { mount } for pid=4014 comm="syz.1.212" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.509774][ T29] audit: type=1400 audit(1791111753.754:320): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.558101][ T29] audit: type=1400 audit(1791111753.794:321): avc: denied { write } for pid=4018 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.718645][ T4023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.718712][ T4023] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.724609][ T29] audit: type=1400 audit(1791111753.964:322): avc: denied { write } for pid=4022 comm="syz.1.216" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.724638][ T29] audit: type=1400 audit(1791111753.964:323): avc: denied { append } for pid=4022 comm="syz.1.216" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.725910][ T4023] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.216: lblock 0 mapped to illegal pblock 0 (length 6) [ 44.726325][ T4023] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 44.726353][ T4023] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.726353][ T4023] [ 44.729328][ T4023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.216: bg 0: block 112: padding at end of block bitmap is not set [ 44.729616][ T4023] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 44.729665][ T4023] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.729665][ T4023] [ 44.729764][ T4023] EXT4-fs (loop1): Total free blocks count 0 [ 44.729777][ T4023] EXT4-fs (loop1): Free/Dirty block details [ 44.729788][ T4023] EXT4-fs (loop1): free_blocks=0 [ 44.729800][ T4023] EXT4-fs (loop1): dirty_blocks=48 [ 44.729816][ T4023] EXT4-fs (loop1): Block reservation details [ 44.859580][ T51] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 44.861791][ T3313] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 44.937819][ T29] audit: type=1400 audit(1791111754.174:324): avc: denied { create } for pid=4033 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.957623][ T29] audit: type=1400 audit(1791111754.184:325): avc: denied { getopt } for pid=4033 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.012476][ T4040] set_capacity_and_notify: 5 callbacks suppressed [ 45.012492][ T4040] loop3: detected capacity change from 0 to 512 [ 45.433187][ T4045] loop3: detected capacity change from 0 to 512 [ 45.573862][ T4055] loop0: detected capacity change from 0 to 512 [ 45.574284][ T4055] EXT4-fs: Ignoring removed oldalloc option [ 45.593633][ T4055] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.237: bg 0: block 5: invalid block bitmap [ 45.593669][ T4055] loop0: lost filesystem error report for type 5 error -117 [ 45.593856][ T4055] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.593877][ T4055] loop0: lost filesystem error report for type 5 error -117 [ 45.594055][ T4055] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.237: invalid indirect mapped block 3 (level 2) [ 45.594104][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.594119][ T4055] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.594184][ T4045] FAT-fs (loop3): Filesystem has been set read-only [ 45.594354][ T4055] EXT4-fs (loop0): 1 orphan inode deleted [ 45.594395][ T4055] EXT4-fs (loop0): 1 truncate cleaned up [ 45.594817][ T4055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.611249][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.615993][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.621837][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.633215][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.642681][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.651307][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.651829][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.657418][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.658527][ T4059] loop1: detected capacity change from 0 to 512 [ 45.667420][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.696301][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.696915][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.710701][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.711573][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.716390][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.726244][ T4059] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.227: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 45.726394][ T4059] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 45.726945][ T4059] EXT4-fs error (device loop1): ext4_quota_enable:7263: comm syz.1.227: Bad quota inode: 4, type: 1 [ 45.727057][ T4059] loop1: lost filesystem error report for type 5 error -117 [ 45.727431][ T4059] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.729389][ T4059] EXT4-fs (loop1): mount failed [ 45.731721][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.738131][ T4045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 45.747202][ T4045] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.926104][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.942247][ T4064] loop3: detected capacity change from 0 to 1024 [ 45.978107][ T4041] loop4: detected capacity change from 0 to 65536 [ 45.986177][ T4064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.986252][ T4064] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.015416][ T29] audit: type=1400 audit(1791111755.264:326): avc: denied { write } for pid=4063 comm="syz.3.228" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.044698][ T4064] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.228: lblock 0 mapped to illegal pblock 0 (length 6) [ 46.045021][ T4064] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 46.045053][ T4064] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.045053][ T4064] [ 46.084557][ T4064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.228: bg 0: block 112: padding at end of block bitmap is not set [ 46.099901][ T4064] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 46.099936][ T4064] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.099936][ T4064] [ 46.100030][ T4064] EXT4-fs (loop3): Total free blocks count 0 [ 46.100059][ T4064] EXT4-fs (loop3): Free/Dirty block details [ 46.100075][ T4064] EXT4-fs (loop3): free_blocks=0 [ 46.100134][ T4064] EXT4-fs (loop3): dirty_blocks=48 [ 46.100151][ T4064] EXT4-fs (loop3): Block reservation details [ 46.186029][ T711] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 46.191526][ T3304] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 46.333766][ T4078] loop0: detected capacity change from 0 to 512 [ 46.468937][ T29] audit: type=1400 audit(1791111755.704:327): avc: denied { mounton } for pid=4082 comm="syz.0.236" path="/53/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.627524][ T4091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 46.722436][ T29] audit: type=1400 audit(1791111755.964:328): avc: denied { cpu } for pid=4093 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.835372][ T4096] loop0: detected capacity change from 0 to 1024 [ 46.872947][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.873118][ T4096] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.913797][ T4096] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.244: lblock 0 mapped to illegal pblock 0 (length 6) [ 46.916438][ T4096] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 46.916470][ T4096] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.916470][ T4096] [ 46.961415][ T4096] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.244: bg 0: block 112: padding at end of block bitmap is not set [ 46.963075][ T4096] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 46.963122][ T4096] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.963122][ T4096] [ 46.963151][ T4096] EXT4-fs (loop0): Total free blocks count 0 [ 46.963166][ T4096] EXT4-fs (loop0): Free/Dirty block details [ 46.963180][ T4096] EXT4-fs (loop0): free_blocks=0 [ 46.963196][ T4096] EXT4-fs (loop0): dirty_blocks=48 [ 46.963208][ T4096] EXT4-fs (loop0): Block reservation details [ 47.021547][ T4100] synth uevent: /bus/acpi: unknown uevent action string [ 47.062265][ T51] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 47.063052][ T3305] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 47.134850][ T4110] loop4: detected capacity change from 0 to 1024 [ 47.154695][ T4110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.243826][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.315829][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 47.355099][ T4127] loop0: detected capacity change from 0 to 1024 [ 47.366663][ T4127] EXT4-fs: Ignoring removed bh option [ 47.375526][ T4127] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 47.393828][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.603161][ T4127] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.791973][ T4142] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 47.984819][ T4159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 48.096353][ T4163] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.280: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 48.096436][ T4163] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 48.096652][ T4163] EXT4-fs error (device loop2): ext4_quota_enable:7263: comm syz.2.280: Bad quota inode: 4, type: 1 [ 48.096739][ T4163] loop2: lost filesystem error report for type 5 error -117 [ 48.096832][ T4163] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.098312][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 48.098334][ C1] EXT4-fs (loop2): initial error at time 1791111757: ext4_ext_check_inode:521: inode 4 [ 48.098373][ C1] EXT4-fs (loop2): last error at time 1791111757: ext4_quota_enable:7263 [ 48.160128][ T4163] EXT4-fs (loop2): mount failed [ 48.277603][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 48.424123][ T4186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.424195][ T4186] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.538805][ T3031] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 48.546008][ T4174] EXT4-fs: Ignoring removed bh option [ 48.567974][ T4174] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 48.597970][ T4174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.851673][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.851909][ T4174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.954398][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.954502][ T4215] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.031762][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.121554][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.121595][ T4219] FAT-fs (loop4): Filesystem has been set read-only [ 49.123197][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.125806][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.135999][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.138129][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.140934][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.148294][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.150945][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.152059][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.154351][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.159798][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.160367][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.177354][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.186369][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.187461][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.209656][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.209941][ T4219] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 49.210536][ T4219] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 49.246257][ T4231] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.282: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 49.246398][ T4231] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 49.248192][ T4231] EXT4-fs error (device loop3): ext4_quota_enable:7263: comm syz.3.282: Bad quota inode: 4, type: 1 [ 49.248384][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.248439][ C0] EXT4-fs (loop3): initial error at time 1791111758: ext4_ext_check_inode:521: inode 4 [ 49.248534][ C0] EXT4-fs (loop3): last error at time 1791111758: ext4_ext_check_inode:521: inode 4 [ 49.248640][ T4231] loop3: lost filesystem error report for type 5 error -117 [ 49.255731][ T4231] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.262080][ T4231] EXT4-fs (loop3): mount failed [ 49.410610][ T4237] EXT4-fs: Ignoring removed oldalloc option [ 49.428472][ T4237] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.283: bg 0: block 5: invalid block bitmap [ 49.428509][ T4237] loop4: lost filesystem error report for type 5 error -117 [ 49.429250][ T4237] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 49.429276][ T4237] loop4: lost filesystem error report for type 5 error -117 [ 49.429472][ T4237] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.283: invalid indirect mapped block 3 (level 2) [ 49.429584][ T4237] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.431429][ T4237] EXT4-fs (loop4): 1 orphan inode deleted [ 49.431465][ T4237] EXT4-fs (loop4): 1 truncate cleaned up [ 49.431965][ T4237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.568154][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.654819][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 49.654834][ T29] audit: type=1400 audit(1791111758.894:360): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.884758][ T4260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.905701][ T4256] EXT4-fs: Ignoring removed bh option [ 49.906677][ T29] audit: type=1400 audit(1791111759.144:361): avc: denied { write } for pid=4259 comm="syz.1.294" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.937497][ T4256] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 49.951157][ T4245] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 49.972953][ T4256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.996950][ T4250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 50.027953][ T4256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.115122][ T4273] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 50.126309][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.126936][ T4273] syz_tun: entered promiscuous mode [ 50.150440][ T4273] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 50.174418][ T4279] set_capacity_and_notify: 9 callbacks suppressed [ 50.174493][ T4279] loop4: detected capacity change from 0 to 512 [ 50.175065][ T4279] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.208204][ T4279] EXT4-fs (loop4): 1 truncate cleaned up [ 50.208794][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.232363][ T29] audit: type=1400 audit(1791111759.474:362): avc: denied { write } for pid=4278 comm="syz.4.302" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.308242][ T4290] loop3: detected capacity change from 0 to 512 [ 50.326794][ T4290] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.330721][ T4290] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.306: corrupted in-inode xattr: e_value size too large [ 50.330971][ T4290] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.332024][ T4290] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.306: couldn't read orphan inode 15 (err -117) [ 50.332119][ T4290] loop3: lost filesystem error report for type 5 error -117 [ 50.334932][ T4290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.393042][ T29] audit: type=1400 audit(1791111759.634:363): avc: denied { write } for pid=4289 comm="syz.3.306" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.393077][ T29] audit: type=1400 audit(1791111759.634:364): avc: denied { create } for pid=4289 comm="syz.3.306" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.393129][ T29] audit: type=1400 audit(1791111759.634:365): avc: denied { write } for pid=4289 comm="syz.3.306" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.398955][ T29] audit: type=1400 audit(1791111759.644:366): avc: denied { write } for pid=4289 comm="syz.3.306" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.414659][ T29] audit: type=1400 audit(1791111759.644:367): avc: denied { write } for pid=4289 comm="syz.3.306" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.414779][ T29] audit: type=1400 audit(1791111759.644:368): avc: denied { create } for pid=4289 comm="syz.3.306" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.584931][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.679434][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.712743][ T29] audit: type=1400 audit(1791111759.944:369): avc: denied { connect } for pid=4301 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.980698][ T4304] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 51.033046][ T4345] loop1: detected capacity change from 0 to 512 [ 51.036325][ T4345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.037527][ T4345] EXT4-fs (loop1): 1 truncate cleaned up [ 51.045855][ T4345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.103296][ T4345] EXT4-fs (loop1): Online defrag not supported for non-extent files [ 51.174602][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.312095][ T4365] loop0: detected capacity change from 0 to 512 [ 51.334767][ T4365] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.336: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 51.334894][ T4365] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 51.335014][ T4365] EXT4-fs error (device loop0): ext4_quota_enable:7263: comm syz.0.336: Bad quota inode: 4, type: 1 [ 51.335045][ T4365] loop0: lost filesystem error report for type 5 error -117 [ 51.335200][ T4365] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.336981][ T4365] EXT4-fs (loop0): mount failed [ 51.635461][ T4397] loop2: detected capacity change from 0 to 512 [ 51.652105][ T4397] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.673671][ T4397] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.351: bad orphan inode 13 [ 51.673697][ T4397] loop2: lost filesystem error report for type 5 error -117 [ 51.673970][ T4397] ext4_test_bit(bit=12, block=18) = 1 [ 51.673984][ T4397] is_bad_inode(inode)=0 [ 51.674044][ T4397] NEXT_ORPHAN(inode)=0 [ 51.674051][ T4397] max_ino=32 [ 51.674057][ T4397] i_nlink=1 [ 51.674552][ T4397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 51.734227][ T4397] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.735216][ T4397] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.351: bg 0: block 248: padding at end of block bitmap is not set [ 51.753691][ T4397] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.351: Failed to acquire dquot type 1 [ 51.786976][ T4394] loop0: detected capacity change from 0 to 1024 [ 51.797059][ T4394] EXT4-fs: Ignoring removed bh option [ 51.806268][ T4394] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 51.822978][ T4382] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 51.843031][ T4394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.867303][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 51.912825][ T4394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.930421][ T4411] loop4: detected capacity change from 0 to 256 [ 52.017700][ T4417] bio_check_eod: 444 callbacks suppressed [ 52.017721][ T4417] syz.4.358: attempt to access beyond end of device [ 52.017721][ T4417] loop4: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 52.017793][ T4417] syz.4.358: attempt to access beyond end of device [ 52.017793][ T4417] loop4: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 52.017894][ T4417] syz.4.358: attempt to access beyond end of device [ 52.017894][ T4417] loop4: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 52.017954][ T4417] syz.4.358: attempt to access beyond end of device [ 52.017954][ T4417] loop4: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 52.018160][ T4417] syz.4.358: attempt to access beyond end of device [ 52.018160][ T4417] loop4: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 52.018224][ T4417] syz.4.358: attempt to access beyond end of device [ 52.018224][ T4417] loop4: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 52.019287][ T4417] syz.4.358: attempt to access beyond end of device [ 52.019287][ T4417] loop4: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 52.019436][ T4417] syz.4.358: attempt to access beyond end of device [ 52.019436][ T4417] loop4: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 52.019552][ T4417] syz.4.358: attempt to access beyond end of device [ 52.019552][ T4417] loop4: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 52.019712][ T4417] syz.4.358: attempt to access beyond end of device [ 52.019712][ T4417] loop4: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 52.883097][ T4438] loop3: detected capacity change from 0 to 512 [ 52.885326][ T4438] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.902512][ T4438] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.366: bad orphan inode 13 [ 52.902673][ T4438] loop3: lost filesystem error report for type 5 error -117 [ 52.904044][ T4438] ext4_test_bit(bit=12, block=18) = 1 [ 52.904089][ T4438] is_bad_inode(inode)=0 [ 52.904123][ T4438] NEXT_ORPHAN(inode)=0 [ 52.904145][ T4438] max_ino=32 [ 52.904247][ T4438] i_nlink=1 [ 52.905345][ T4438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 52.935597][ T4438] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.936221][ T4438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.366: bg 0: block 248: padding at end of block bitmap is not set [ 52.937486][ T4438] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.366: Failed to acquire dquot type 1 [ 53.000487][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 53.012671][ T4443] loop4: detected capacity change from 0 to 512 [ 53.028549][ T4443] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.360: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 53.028593][ T4443] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 53.033670][ T4443] EXT4-fs error (device loop4): ext4_quota_enable:7263: comm syz.4.360: Bad quota inode: 4, type: 1 [ 53.033699][ T4443] loop4: lost filesystem error report for type 5 error -117 [ 53.035354][ T4443] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.037212][ T4443] EXT4-fs (loop4): mount failed [ 53.038312][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 53.038335][ C1] EXT4-fs (loop4): initial error at time 1791111762: ext4_ext_check_inode:521: inode 4 [ 53.038571][ C1] EXT4-fs (loop4): last error at time 1791111762: ext4_quota_enable:7263 [ 53.620253][ T4476] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 53.667461][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 53.670042][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 53.833018][ T4504] syzkaller0: entered promiscuous mode [ 53.833043][ T4504] syzkaller0: entered allmulticast mode [ 53.836573][ T4513] loop3: detected capacity change from 0 to 512 [ 53.873201][ T4513] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.396: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 53.873302][ T4513] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 53.875509][ T4513] EXT4-fs error (device loop3): ext4_quota_enable:7263: comm syz.3.396: Bad quota inode: 4, type: 1 [ 53.875565][ T4513] loop3: lost filesystem error report for type 5 error -117 [ 53.877028][ T4513] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.878312][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 53.878332][ C1] EXT4-fs (loop3): initial error at time 1791111763: ext4_ext_check_inode:521: inode 4 [ 53.878372][ C1] EXT4-fs (loop3): last error at time 1791111763: ext4_quota_enable:7263 [ 53.930566][ T4513] EXT4-fs (loop3): mount failed [ 54.041307][ T4509] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 54.149590][ T4532] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.165881][ T4532] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.407: bad orphan inode 13 [ 54.165987][ T4532] loop4: lost filesystem error report for type 5 error -117 [ 54.166299][ T4532] ext4_test_bit(bit=12, block=18) = 1 [ 54.166426][ T4532] is_bad_inode(inode)=0 [ 54.166448][ T4532] NEXT_ORPHAN(inode)=0 [ 54.166470][ T4532] max_ino=32 [ 54.166491][ T4532] i_nlink=1 [ 54.173466][ T4532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 54.239861][ T4539] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.419: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 54.239942][ T4539] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 54.240552][ T4539] EXT4-fs error (device loop3): ext4_quota_enable:7263: comm syz.3.419: Bad quota inode: 4, type: 1 [ 54.240584][ T4539] loop3: lost filesystem error report for type 5 error -117 [ 54.240847][ T4539] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.241187][ T4539] EXT4-fs (loop3): mount failed [ 54.249622][ T4532] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.251309][ T4532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.407: bg 0: block 248: padding at end of block bitmap is not set [ 54.251972][ T4532] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.407: Failed to acquire dquot type 1 [ 54.350346][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 54.431232][ T4533] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 54.723809][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 54.723829][ T29] audit: type=1400 audit(1791111763.964:416): avc: denied { setopt } for pid=4546 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.763512][ T4551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.765769][ T4551] EXT4-fs (loop1): 1 truncate cleaned up [ 54.775307][ T29] audit: type=1400 audit(1791111764.014:417): avc: denied { create } for pid=4552 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.784199][ T29] audit: type=1400 audit(1791111764.024:418): avc: denied { write } for pid=4552 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.784290][ T29] audit: type=1400 audit(1791111764.024:419): avc: denied { nlmsg_write } for pid=4552 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.794827][ T4551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.850458][ T29] audit: type=1400 audit(1791111764.094:420): avc: denied { write } for pid=4550 comm="syz.1.408" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.923450][ T4561] netlink: 'syz.2.414': attribute type 15 has an invalid length. [ 54.924600][ T4561] netlink: 'syz.2.414': attribute type 15 has an invalid length. [ 54.985521][ T4566] syzkaller0: entered promiscuous mode [ 54.985547][ T4566] syzkaller0: entered allmulticast mode [ 55.269704][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.339863][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 55.369137][ T4585] Invalid argument reading file caps for ./file0 [ 55.692288][ T29] audit: type=1326 audit(1791111764.934:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.2.438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadcce159 code=0x7ffc0000 [ 55.692362][ T29] audit: type=1326 audit(1791111764.934:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.2.438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadcce159 code=0x7ffc0000 [ 55.692414][ T29] audit: type=1326 audit(1791111764.934:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.2.438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdaadcce159 code=0x7ffc0000 [ 55.692446][ T29] audit: type=1326 audit(1791111764.934:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.2.438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadcce159 code=0x7ffc0000 [ 55.693893][ T29] audit: type=1326 audit(1791111764.934:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.2.438" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaadcce159 code=0x7ffc0000 [ 55.832130][ T4616] set_capacity_and_notify: 3 callbacks suppressed [ 55.832149][ T4616] loop3: detected capacity change from 0 to 512 [ 55.838248][ T4616] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.843154][ T4616] EXT4-fs (loop3): 1 truncate cleaned up [ 55.844099][ T4616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.071607][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.275572][ T4628] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 56.596722][ T4662] netlink: 'syz.4.462': attribute type 15 has an invalid length. [ 56.609020][ T4662] netlink: 'syz.4.462': attribute type 15 has an invalid length. [ 56.792356][ T4661] loop0: detected capacity change from 0 to 512 [ 56.916671][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 56.916753][ T4661] FAT-fs (loop0): Filesystem has been set read-only [ 56.918031][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 56.944478][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 56.947422][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 56.968804][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 56.973178][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 56.975912][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 56.978078][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.015240][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.028736][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.032330][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.036533][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.066445][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.077766][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.089440][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.092400][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.094100][ T4661] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 57.095820][ T4661] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 57.599087][ T4701] loop1: detected capacity change from 0 to 512 [ 57.751654][ T4701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.753427][ T4701] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.825078][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.116851][ T4730] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 58.362279][ T4761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'. [ 58.387826][ T4757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.499'. [ 58.796095][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 58.796119][ T4819] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 58.996116][ T4815] loop2: detected capacity change from 0 to 512 [ 59.110662][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.110712][ T4815] FAT-fs (loop2): Filesystem has been set read-only [ 59.115211][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.152083][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.155091][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.183283][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.201290][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.224357][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.240664][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.261295][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.267108][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.293463][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.308033][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.319306][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.322650][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.348897][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.356325][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.381618][ T4815] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 59.386118][ T4815] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 59.743553][ T4848] loop2: detected capacity change from 0 to 256 [ 59.754757][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 59.754776][ T29] audit: type=1400 audit(1791111769.004:511): avc: denied { create } for pid=4847 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.758720][ T29] audit: type=1400 audit(1791111769.004:512): avc: denied { connect } for pid=4847 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.762453][ T29] audit: type=1400 audit(1791111769.004:513): avc: denied { bind } for pid=4847 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.829050][ T29] audit: type=1400 audit(1791111769.074:514): avc: denied { write } for pid=4849 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.914212][ T4862] bio_check_eod: 268 callbacks suppressed [ 59.914228][ T4862] syz.2.533: attempt to access beyond end of device [ 59.914228][ T4862] loop2: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 59.914375][ T4862] syz.2.533: attempt to access beyond end of device [ 59.914375][ T4862] loop2: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 59.914527][ T4862] syz.2.533: attempt to access beyond end of device [ 59.914527][ T4862] loop2: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 59.914597][ T4862] syz.2.533: attempt to access beyond end of device [ 59.914597][ T4862] loop2: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 59.914707][ T4862] syz.2.533: attempt to access beyond end of device [ 59.914707][ T4862] loop2: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 59.916243][ T4862] syz.2.533: attempt to access beyond end of device [ 59.916243][ T4862] loop2: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 59.916370][ T4862] syz.2.533: attempt to access beyond end of device [ 59.916370][ T4862] loop2: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 59.916481][ T4862] syz.2.533: attempt to access beyond end of device [ 59.916481][ T4862] loop2: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 59.916554][ T4862] syz.2.533: attempt to access beyond end of device [ 59.916554][ T4862] loop2: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 59.916701][ T4862] syz.2.533: attempt to access beyond end of device [ 59.916701][ T4862] loop2: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 60.014533][ T4863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.551'. [ 60.573914][ T4890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'. [ 60.656712][ T4894] loop3: detected capacity change from 0 to 512 [ 60.657256][ T4894] EXT4-fs: Ignoring removed bh option [ 60.736764][ T4894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.736834][ T4894] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.747297][ T29] audit: type=1400 audit(1791111769.984:515): avc: denied { write } for pid=4893 comm="syz.3.550" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.880127][ T4887] loop0: detected capacity change from 0 to 512 [ 60.947009][ T29] audit: type=1400 audit(1791111770.184:516): avc: denied { setopt } for pid=4901 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.992386][ T29] audit: type=1400 audit(1791111770.224:517): avc: denied { write } for pid=4901 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.993652][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 60.994079][ T4887] FAT-fs (loop0): Filesystem has been set read-only [ 60.996756][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.001323][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.002251][ T4904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'. [ 61.002357][ T4904] netlink: 'syz.4.555': attribute type 7 has an invalid length. [ 61.002399][ T4904] netlink: 'syz.4.555': attribute type 8 has an invalid length. [ 61.002435][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 61.004719][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.015738][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.016236][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.022904][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.023544][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.024190][ T4904] erspan0: entered promiscuous mode [ 61.026824][ T29] audit: type=1400 audit(1791111770.274:518): avc: denied { bind } for pid=4901 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.028259][ T4904] gretap0: entered promiscuous mode [ 61.038815][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.039779][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.042327][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.045019][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.048849][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.049665][ T4904] erspan0: left promiscuous mode [ 61.054071][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.059578][ T4904] gretap0: left promiscuous mode [ 61.061477][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.061945][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.062333][ T4887] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 61.062932][ T4887] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 61.303091][ T29] audit: type=1400 audit(1791111770.544:519): avc: denied { create } for pid=4910 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.305084][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.316166][ T29] audit: type=1400 audit(1791111770.554:520): avc: denied { ioctl } for pid=4910 comm="syz.1.569" path="socket:[9491]" dev="sockfs" ino=9491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.472740][ T4917] loop1: detected capacity change from 0 to 1024 [ 61.513442][ T4917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.538543][ T4924] loop4: detected capacity change from 0 to 1024 [ 61.542991][ T4924] EXT4-fs: inline encryption not supported [ 61.546313][ T4924] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.571664][ T4924] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.563: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.571726][ T4924] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.571958][ T4924] EXT4-fs (loop4): Remounting filesystem read-only [ 61.572010][ T4924] EXT4-fs (loop4): 1 orphan inode deleted [ 61.572373][ T4924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.572781][ T2992] ================================================================== [ 61.572811][ T2992] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 61.572856][ T2992] [ 61.572864][ T2992] write to 0xffff888106094780 of 4 bytes by task 3293 on cpu 0: [ 61.572885][ T2992] d_make_discardable+0x4f/0x90 [ 61.572918][ T2992] simple_unlink+0x68/0x80 [ 61.572942][ T2992] shmem_unlink+0x12d/0x140 [ 61.572970][ T2992] vfs_unlink+0x1c3/0x490 [ 61.572994][ T2992] filename_unlinkat+0x1dc/0x410 [ 61.573018][ T2992] __se_sys_unlink+0x2b/0xe0 [ 61.573042][ T2992] __x64_sys_unlink+0x1f/0x30 [ 61.573067][ T2992] x64_sys_call+0x18ee/0x2550 [ 61.573101][ T2992] do_syscall_64+0x112/0x360 [ 61.573132][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.573160][ T2992] [ 61.573168][ T2992] read to 0xffff888106094780 of 4 bytes by task 2992 on cpu 1: [ 61.573189][ T2992] step_into_slowpath+0xea/0x4c0 [ 61.573214][ T2992] path_lookupat+0x2eb/0x4c0 [ 61.573242][ T2992] filename_lookup+0x18f/0x390 [ 61.573273][ T2992] do_readlinkat+0x74/0x2f0 [ 61.573306][ T2992] __x64_sys_readlink+0x47/0x60 [ 61.573330][ T2992] x64_sys_call+0x1d41/0x2550 [ 61.573355][ T2992] do_syscall_64+0x112/0x360 [ 61.573376][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.573396][ T2992] [ 61.573399][ T2992] value changed: 0x08300080 -> 0x00004080 [ 61.573414][ T2992] [ 61.573419][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 61.573433][ T2992] CPU: 1 UID: 0 PID: 2992 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 61.573462][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.573474][ T2992] ================================================================== [ 61.658707][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.733124][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.928738][ T4930] loop2: detected capacity change from 0 to 512 [ 62.211688][ T4930] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)