last executing test programs: 1m3.809376572s ago: executing program 2 (id=111): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m3.749176343s ago: executing program 2 (id=113): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m3.612922186s ago: executing program 2 (id=115): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7fffffff, @private1, 0x80000001}}, 0x6, 0xf801, 0xcd42, 0x8, 0x8, 0xd166, 0x9}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000010000f807"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x122, @tick=0x7, 0x0, {}, 0xfc, 0x0, 0x8}) 1m3.543532318s ago: executing program 2 (id=117): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) 1m3.293177673s ago: executing program 2 (id=125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000300), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 1m3.042579198s ago: executing program 2 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc2) 1m3.003378539s ago: executing program 32 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc2) 49.494427233s ago: executing program 3 (id=332): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000044c0)=@deltfilter={0x10a8, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1070, 0x2, [@TCA_CGROUP_ACT={0x106c, 0x1, [@m_csum={0x1ac, 0x1e, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x10000000, 0x7, 0x500}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xf79a, 0xffffffffffffffff, 0x6, 0x3}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0xd6b, 0x10000000, 0x1d0, 0xe7}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x0, 0x8, 0x360}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x3, 0x5, 0x7, 0x7}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x10000000, 0x4, 0x10001}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xfffffff8, 0x20000000, 0x7fffffff, 0xd4b}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xd3, 0xffffffffffffffff, 0x400, 0x3}, 0x13}}]}, {0x9d, 0x6, "f6dd9ce9423a1b441da007de45d5c247e7620975aa86d5c3c046de6677a1aa67ddcc7663b7a6bcc20b1d07d5341cd6a8d9f61f5a581677028ebb99ce0cd29de72cfd50ace619f9f52fd2485859a46d2795c4d4af6b6ede57348ceb8617c16eb1af44f4a1600689cf35589dc58c50735b142c75f509a61cbd16e997bef23f8e1e07feb225951a001f0c871c0b168f1c829e7298455825c85b6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10004, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x3ab6, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x3, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x7ffffffc, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x8, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0x2c8, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x6, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x10a8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.438908655s ago: executing program 3 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x0) 49.237805039s ago: executing program 3 (id=339): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) chroot(&(0x7f0000000300)='.\x00') openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x8a6fe, 0x2) 49.155010031s ago: executing program 3 (id=340): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 49.146360171s ago: executing program 3 (id=341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 48.806877188s ago: executing program 3 (id=348): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) 48.792332719s ago: executing program 33 (id=348): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) 4.458684723s ago: executing program 4 (id=1091): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x48, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 4.392096215s ago: executing program 4 (id=1092): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.995471223s ago: executing program 4 (id=1102): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x18100, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 3.984427043s ago: executing program 4 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x37, 0xcd2, 0x67, 0x0, 0xb, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4, 0x8d, 0x1, 0x1}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 3.936967855s ago: executing program 4 (id=1105): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd6c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\xf0Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 3.919565595s ago: executing program 4 (id=1106): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x37, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x51801400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.989219435s ago: executing program 0 (id=1133): syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000240)='./bus\x00', 0x32600, &(0x7f0000000380)={[{@nodiscard}], [{@euid_lt}, {@subj_role}, {@fsuuid={'fsuuid', 0x3d, {[0x54, 0x63, 0x39, 0x65, 0x65, 0x35, 0x37, 0x30], 0x2d, [0x62, 0x61, 0x63, 0xc14963190a5ee209], 0x2d, [0x32, 0x39, 0x54, 0x64], 0x2d, [0x38, 0x31, 0x63, 0x61], 0x2d, [0x64, 0x62, 0x32, 0x33, 0x35, 0x36, 0x36, 0x39]}}}, {@seclabel}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x19, 0x4, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$FIBMAP(r0, 0x1, &(0x7f00000004c0)=0x2) 2.870107048s ago: executing program 0 (id=1134): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = syz_io_uring_setup(0x2, &(0x7f0000000600)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 2.75649874s ago: executing program 0 (id=1135): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0xc000) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) 2.30995414s ago: executing program 0 (id=1140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) 1.929014708s ago: executing program 1 (id=1145): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@nombcache}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x105180, 0x85) preadv2(r1, &(0x7f0000000c80)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0xf1ff, 0x7, 0xe) 1.705132923s ago: executing program 6 (id=1148): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2414, 0x802}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x40148b0) 1.671832204s ago: executing program 1 (id=1149): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 1.330243691s ago: executing program 0 (id=1153): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(0x0, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 1.303244852s ago: executing program 6 (id=1154): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 1.265848083s ago: executing program 5 (id=1155): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) statfs(0x0, 0x0) 1.204290004s ago: executing program 6 (id=1156): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x70) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x20009a2) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1.166762785s ago: executing program 0 (id=1157): getdents64(0xffffffffffffffff, 0x0, 0x22) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.166549165s ago: executing program 5 (id=1159): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket(0x2, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.115941216s ago: executing program 6 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000) 928.43407ms ago: executing program 6 (id=1161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xe}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x18, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 846.953372ms ago: executing program 1 (id=1162): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x4, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 544.927938ms ago: executing program 1 (id=1163): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x3, 0x5}, 0x0) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 474.26058ms ago: executing program 5 (id=1164): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10, 0x0}, 0x0) 460.66485ms ago: executing program 1 (id=1165): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 453.33044ms ago: executing program 6 (id=1166): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0xc000) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) 424.241791ms ago: executing program 5 (id=1167): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x3}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 117.267058ms ago: executing program 1 (id=1168): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40010080) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 42.811269ms ago: executing program 5 (id=1169): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(0x0, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) 0s ago: executing program 5 (id=1170): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000980)=[{&(0x7f0000000900)=""/111, 0x6f}], 0x1, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/11, 0xb}], 0x1, 0x0) kernel console output (not intermixed with test programs): ][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.353618][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.379702][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.393162][ T3300] hsr_slave_0: entered promiscuous mode [ 32.399419][ T3300] hsr_slave_1: entered promiscuous mode [ 32.425809][ T3296] hsr_slave_0: entered promiscuous mode [ 32.431901][ T3296] hsr_slave_1: entered promiscuous mode [ 32.438129][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.443879][ T3296] Cannot create hsr debugfs directory [ 32.465835][ T3297] hsr_slave_0: entered promiscuous mode [ 32.472059][ T3297] hsr_slave_1: entered promiscuous mode [ 32.478106][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 32.483892][ T3297] Cannot create hsr debugfs directory [ 32.526229][ T3306] hsr_slave_0: entered promiscuous mode [ 32.533247][ T3306] hsr_slave_1: entered promiscuous mode [ 32.539430][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.546003][ T3306] Cannot create hsr debugfs directory [ 32.560503][ T3299] hsr_slave_0: entered promiscuous mode [ 32.566537][ T3299] hsr_slave_1: entered promiscuous mode [ 32.572281][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 32.578184][ T3299] Cannot create hsr debugfs directory [ 32.772305][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.781428][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.789219][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.802591][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.810590][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.819776][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.830271][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.838985][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.863060][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.871756][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.880597][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.889495][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.897321][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.905872][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.913674][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.922432][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.952849][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.961455][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.969243][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.978335][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.986075][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.995027][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.004252][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.013602][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.049243][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.057898][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.065994][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.074448][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.082080][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.090603][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.102260][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.110987][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.146176][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.156833][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.165861][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.178924][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.188263][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.201342][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.210481][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.219004][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.227818][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.262405][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.278748][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.286108][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.298329][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.316765][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.323942][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.336079][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.347441][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.369705][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.377355][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.394248][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.408441][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.417152][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.424289][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.442029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.449210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.458123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.469223][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.493348][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.506592][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.516541][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.530964][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.547928][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.560146][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.567352][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.593122][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.610053][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.641401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.648536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.663902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.671441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.764032][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.888133][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.913352][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.948973][ T3297] veth0_vlan: entered promiscuous mode [ 33.976870][ T3297] veth1_vlan: entered promiscuous mode [ 33.993352][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.007077][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.036798][ T3297] veth0_macvtap: entered promiscuous mode [ 34.045031][ T3297] veth1_macvtap: entered promiscuous mode [ 34.074506][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.109416][ T3296] veth0_vlan: entered promiscuous mode [ 34.117084][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.143265][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.160804][ T3296] veth1_vlan: entered promiscuous mode [ 34.179785][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.189159][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.203621][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.226512][ T3299] veth0_vlan: entered promiscuous mode [ 34.243463][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 34.243481][ T28] audit: type=1400 audit(1784657784.296:146): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.prrtRp/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.252505][ T3296] veth0_macvtap: entered promiscuous mode [ 34.276494][ T28] audit: type=1400 audit(1784657784.296:147): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.298799][ T3306] veth0_vlan: entered promiscuous mode [ 34.303623][ T28] audit: type=1400 audit(1784657784.306:148): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.prrtRp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.333029][ T28] audit: type=1400 audit(1784657784.306:149): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.357096][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.361959][ T3299] veth1_vlan: entered promiscuous mode [ 34.375987][ T28] audit: type=1400 audit(1784657784.306:150): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.prrtRp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.387722][ T3300] veth0_vlan: entered promiscuous mode [ 34.413326][ T28] audit: type=1400 audit(1784657784.306:151): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.prrtRp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.444438][ T3296] veth1_macvtap: entered promiscuous mode [ 34.444589][ T28] audit: type=1400 audit(1784657784.306:152): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.456350][ T3306] veth1_vlan: entered promiscuous mode [ 34.471511][ T28] audit: type=1400 audit(1784657784.346:153): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.498988][ T28] audit: type=1400 audit(1784657784.346:154): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=3679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.530301][ T3299] veth0_macvtap: entered promiscuous mode [ 34.536479][ T28] audit: type=1400 audit(1784657784.586:155): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.555656][ T3300] veth1_vlan: entered promiscuous mode [ 34.575026][ T3299] veth1_macvtap: entered promiscuous mode [ 34.593891][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.602609][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.622665][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.632211][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.647669][ T1000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.656504][ T1000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.671461][ T1000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.681073][ T1000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.690652][ T3300] veth0_macvtap: entered promiscuous mode [ 34.709978][ T3300] veth1_macvtap: entered promiscuous mode [ 34.717266][ T3306] veth0_macvtap: entered promiscuous mode [ 34.726629][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.743273][ T3306] veth1_macvtap: entered promiscuous mode [ 34.751560][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.760712][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.774838][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.790101][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.808401][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.827721][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.853906][ T2503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.871934][ T2503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.886935][ T2503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.900900][ T2503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.911649][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.950573][ T2503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.972503][ T2503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.990857][ T2503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.012429][ T2503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.169143][ T3527] loop1: detected capacity change from 0 to 512 [ 35.200298][ T3527] ======================================================= [ 35.200298][ T3527] WARNING: The mand mount option has been deprecated and [ 35.200298][ T3527] and is ignored by this kernel. Remove the mand [ 35.200298][ T3527] option from the mount to silence this warning. [ 35.200298][ T3527] ======================================================= [ 35.229534][ T3526] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10'. [ 35.256373][ T3527] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.2: invalid block [ 35.256406][ T3527] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.256725][ T3527] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2: couldn't read orphan inode 11 (err -117) [ 35.256755][ T3527] loop1: lost filesystem error report for type 5 error -117 [ 35.257268][ T3527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.426541][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.525220][ T3547] loop2: detected capacity change from 0 to 2048 [ 35.531282][ T3549] process 'syz.1.18' launched './file1' with NULL argv: empty string added [ 35.577500][ T3554] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 35.637644][ T3560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'. [ 35.647652][ T3560] Zero length message leads to an empty skb [ 35.738749][ T3547] loop2: unable to read partition table [ 35.752094][ T3547] loop2: partition table beyond EOD, truncated [ 35.776771][ T3547] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 35.871427][ T2981] loop2: unable to read partition table [ 35.877904][ T2981] loop2: partition table beyond EOD, truncated [ 36.010811][ T3574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 36.024470][ T3574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 36.166952][ T3582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 36.178577][ T3576] loop3: detected capacity change from 0 to 8192 [ 36.208393][ T3576] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.419625][ T3597] loop3: detected capacity change from 0 to 4096 [ 36.464905][ T3597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.492284][ T3603] 9pnet: p9_errstr2errno: server reported unknown error e_0 [ 36.890837][ T3625] syz.2.51 (3625) used greatest stack depth: 10344 bytes left [ 36.942213][ T3639] loop2: detected capacity change from 0 to 2048 [ 37.017263][ T3639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.118470][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.205305][ T1000] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 37.244629][ T1000] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.267737][ T3661] loop3: detected capacity change from 0 to 128 [ 37.273696][ T1000] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.273696][ T1000] [ 37.289335][ T1000] EXT4-fs (loop2): Total free blocks count 0 [ 37.295666][ T1000] EXT4-fs (loop2): Free/Dirty block details [ 37.307985][ T1000] EXT4-fs (loop2): free_blocks=4096 [ 37.314941][ T1000] EXT4-fs (loop2): dirty_blocks=16 [ 37.328077][ T1000] EXT4-fs (loop2): Block reservation details [ 37.334783][ T1000] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 37.344131][ T2503] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 16 with error 28 [ 37.357136][ T3296] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 38.954069][ T3682] bond0: (slave bond_slave_0): Releasing backup interface [ 39.002732][ T3691] mmap: syz.0.75 (3691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.075898][ T3693] loop1: detected capacity change from 0 to 4096 [ 39.096322][ T3701] netlink: 'syz.4.79': attribute type 3 has an invalid length. [ 39.097457][ T3700] netlink: 'syz.0.80': attribute type 14 has an invalid length. [ 39.119843][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 39.143852][ T3700] netlink: 'syz.0.80': attribute type 14 has an invalid length. [ 39.144567][ T311] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.151812][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 39.161515][ T3693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.173849][ T2503] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.207464][ T2503] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.225485][ T311] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.323130][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 39.323150][ T28] audit: type=1400 audit(1784657789.376:259): avc: denied { write } for pid=3692 comm="syz.1.76" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.361077][ T3712] batman_adv: batadv0: Adding interface: dummy0 [ 39.380583][ T28] audit: type=1400 audit(1784657789.386:260): avc: denied { create } for pid=3692 comm="syz.1.76" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.390341][ T3712] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.460142][ T28] audit: type=1400 audit(1784657789.406:261): avc: denied { create } for pid=3713 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 39.473179][ T3712] batman_adv: batadv0: Interface activated: dummy0 [ 39.485480][ T28] audit: type=1400 audit(1784657789.416:262): avc: denied { ioctl } for pid=3713 comm="syz.0.84" path="socket:[6249]" dev="sockfs" ino=6249 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 39.514605][ T3719] batadv0: mtu less than device minimum [ 39.563543][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.563613][ T28] audit: type=1400 audit(1784657789.436:263): avc: denied { connect } for pid=3715 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.574652][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.595846][ T28] audit: type=1400 audit(1784657789.436:264): avc: denied { bind } for pid=3715 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.604326][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.625080][ T28] audit: type=1400 audit(1784657789.436:265): avc: denied { write } for pid=3715 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.633792][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.663728][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.665518][ T28] audit: type=1400 audit(1784657789.536:266): avc: denied { read } for pid=3692 comm="syz.1.76" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.674708][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.729269][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.734762][ T28] audit: type=1400 audit(1784657789.796:267): avc: denied { mount } for pid=3723 comm="syz.0.87" name="/" dev="ramfs" ino=5278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.740920][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.773274][ T3719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 39.796482][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.866811][ T28] audit: type=1400 audit(1784657789.926:268): avc: denied { ioctl } for pid=3727 comm="syz.2.90" path="/22/file0" dev="tmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.116755][ T3740] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 40.224427][ T3756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 40.297234][ T3759] loop0: detected capacity change from 0 to 512 [ 40.337912][ T3759] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.102: Failed to acquire dquot type 1 [ 40.389039][ T3759] loop0: lost filesystem error report for type 5 error -117 [ 40.390539][ T3759] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.102: Failed to acquire dquot type 1 [ 40.397905][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.397932][ C1] EXT4-fs (loop0): last error at time 1784657790: ext4_acquire_dquot:7041 [ 40.440528][ T3759] loop0: lost filesystem error report for type 5 error -117 [ 40.442800][ T3759] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.102: bg 0: block 248: padding at end of block bitmap is not set [ 40.481879][ T3759] loop0: lost filesystem error report for type 5 error -117 [ 40.482113][ T3759] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 40.507288][ T3759] loop0: lost filesystem error report for type 5 error -117 [ 40.507927][ T3759] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.102: Failed to acquire dquot type 1 [ 40.527696][ T3759] loop0: lost filesystem error report for type 5 error -117 [ 40.540383][ T3759] EXT4-fs (loop0): 1 orphan inode deleted [ 40.559633][ T3759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.587973][ T3759] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.642148][ T3759] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.102: deleted inode referenced: 12 [ 40.646195][ T3784] loop3: detected capacity change from 0 to 512 [ 40.679497][ T3784] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.112: inode has both inline data and extents flags [ 40.695367][ T3784] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.696062][ T3784] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.112: couldn't read orphan inode 15 (err -117) [ 40.705261][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 40.705285][ C1] EXT4-fs (loop3): initial error at time 1784657790: ext4_orphan_get:1399: inode 15 [ 40.705333][ C1] EXT4-fs (loop3): last error at time 1784657790: ext4_orphan_get:1399: inode 15 [ 40.743420][ T3784] loop3: lost filesystem error report for type 5 error -117 [ 40.746111][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.779335][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.890105][ T3797] loop2: detected capacity change from 0 to 1024 [ 40.902003][ T3797] EXT4-fs: Ignoring removed bh option [ 40.915536][ T3797] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 40.933850][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.951971][ T3803] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 40.953616][ T3797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.054190][ T3797] loop2: detected capacity change from 1024 to 64 [ 41.091823][ T3812] loop1: detected capacity change from 0 to 8192 [ 41.121007][ T3296] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /32/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 41.142667][ T3296] EXT4-fs (loop2): Remounting filesystem read-only [ 41.160470][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.172758][ T3800] kmmpd-loop2: attempt to access beyond end of device [ 41.172758][ T3800] loop2: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 41.190224][ T3800] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 41.355299][ T2503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.400601][ T3821] netlink: 14 bytes leftover after parsing attributes in process `syz.4.128'. [ 41.431924][ T2503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.513724][ T2503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.625646][ T2503] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.789037][ T2503] bridge_slave_1: left allmulticast mode [ 41.805008][ T2503] bridge_slave_1: left promiscuous mode [ 41.810971][ T2503] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.826269][ T2503] bridge_slave_0: left allmulticast mode [ 41.832250][ T2503] bridge_slave_0: left promiscuous mode [ 41.839626][ T2503] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.974350][ T2503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.998058][ T2503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.075623][ T2503] bond0 (unregistering): Released all slaves [ 42.086837][ T3845] netlink: 48 bytes leftover after parsing attributes in process `syz.0.134'. [ 42.125774][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 42.194137][ T2503] hsr_slave_0: left promiscuous mode [ 42.226571][ T2503] hsr_slave_1: left promiscuous mode [ 42.232743][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.240663][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.250370][ T3873] loop0: detected capacity change from 0 to 512 [ 42.257416][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.273980][ T3873] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.292101][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.340796][ T2503] veth1_macvtap: left promiscuous mode [ 42.348159][ T3873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.358903][ T2503] veth0_macvtap: left promiscuous mode [ 42.365216][ T2503] veth1_vlan: left promiscuous mode [ 42.371496][ T3873] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.139: bad orphan inode 131083 [ 42.382698][ T2503] veth0_vlan: left promiscuous mode [ 42.388337][ T3873] loop0: lost filesystem error report for type 5 error -117 [ 42.390895][ T3873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.470711][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.603122][ T2503] team0 (unregistering): Port device team_slave_1 removed [ 42.636464][ T2503] team0 (unregistering): Port device team_slave_0 removed [ 42.681576][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 42.713922][ T3895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.754386][ T3895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.842599][ T3895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.893395][ T3895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.916540][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.927685][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.956581][ T3824] bridge_slave_0: entered allmulticast mode [ 42.975755][ T3824] bridge_slave_0: entered promiscuous mode [ 43.011690][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.042994][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.057141][ T3824] bridge_slave_1: entered allmulticast mode [ 43.064913][ T3824] bridge_slave_1: entered promiscuous mode [ 43.080946][ T3895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.092254][ T3895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.136514][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 43.177609][ T3824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.205267][ T3824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.264332][ T3895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.289476][ T3895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.338993][ T3824] team0: Port device team_slave_0 added [ 43.350617][ T3824] team0: Port device team_slave_1 added [ 43.370009][ T3824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.377357][ T3824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.403701][ T3824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.415931][ T3824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.423311][ T3824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.449804][ T3824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.463435][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 43.534926][ T1000] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.543480][ T1000] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.552260][ T1000] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.561262][ T1000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.576942][ T3824] hsr_slave_0: entered promiscuous mode [ 43.583227][ T3824] hsr_slave_1: entered promiscuous mode [ 43.590691][ T3824] debugfs: 'hsr0' already exists in 'hsr' [ 43.597046][ T3824] Cannot create hsr debugfs directory [ 43.608565][ T311] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.622176][ T311] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.630862][ T311] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.639780][ T311] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.955472][ T3824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.021854][ T3824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.056396][ T3824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.140143][ T3824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.200324][ T3824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.245624][ T3824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.261246][ T3824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.277829][ T3824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.347692][ T3824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.361873][ T3824] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.441435][ T3974] loop1: detected capacity change from 0 to 512 [ 44.454159][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.461324][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.481705][ T3974] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 44.493878][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.501080][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.520025][ T3974] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.158: bad orphan inode 15 [ 44.540923][ T3974] loop1: lost filesystem error report for type 5 error -117 [ 44.542741][ T3974] ext4_test_bit(bit=14, block=18) = 1 [ 44.545221][ T3824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.550242][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 44.572616][ C0] EXT4-fs (loop1): initial error at time 1784657794: ext4_orphan_get:1425 [ 44.581330][ C0] EXT4-fs (loop1): last error at time 1784657794: ext4_orphan_get:1425 [ 44.620320][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 44.620340][ T28] audit: type=1400 audit(1784657794.676:320): avc: denied { watch_reads } for pid=3982 comm="syz.0.161" path="/30" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.643178][ T3974] is_bad_inode(inode)=0 [ 44.653600][ T3974] NEXT_ORPHAN(inode)=1023 [ 44.658099][ T3974] max_ino=32 [ 44.661532][ T3974] i_nlink=0 [ 44.683125][ T3974] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.158: bg 0: block 161: padding at end of block bitmap is not set [ 44.717724][ T28] audit: type=1400 audit(1784657794.766:321): avc: denied { read write } for pid=3990 comm="syz.3.163" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.718683][ T3974] loop1: lost filesystem error report for type 5 error -117 [ 44.776961][ T3974] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 44.790277][ T28] audit: type=1400 audit(1784657794.766:322): avc: denied { open } for pid=3990 comm="syz.3.163" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.851563][ T28] audit: type=1400 audit(1784657794.776:323): avc: denied { create } for pid=3990 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 44.868739][ T3974] loop1: lost filesystem error report for type 5 error -117 [ 44.885864][ T3974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.921326][ T28] audit: type=1400 audit(1784657794.826:324): avc: denied { read write } for pid=3994 comm="syz.0.164" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.954941][ T3974] ext2 filesystem being mounted at /24/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 44.978142][ T28] audit: type=1400 audit(1784657794.826:325): avc: denied { open } for pid=3994 comm="syz.0.164" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.124941][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.404303][ T4008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 45.439359][ T28] audit: type=1400 audit(1784657795.496:326): avc: denied { getopt } for pid=4009 comm="syz.1.169" lport=46448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.686053][ T4022] loop0: detected capacity change from 0 to 512 [ 45.707895][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.721164][ T4022] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.743627][ T28] audit: type=1400 audit(1784657795.796:327): avc: denied { write } for pid=4021 comm="syz.0.172" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.778387][ T3824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.851979][ T3385] IPVS: starting estimator thread 0... [ 45.866298][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.926610][ T4046] loop0: detected capacity change from 0 to 2048 [ 45.943011][ T4038] IPVS: using max 2304 ests per chain, 115200 per kthread [ 45.963733][ T4046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.979371][ T4046] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.176: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 46.027909][ T28] audit: type=1400 audit(1784657796.086:328): avc: denied { create } for pid=4054 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 46.061588][ T28] audit: type=1400 audit(1784657796.086:329): avc: denied { bind } for pid=4054 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 46.085616][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.136237][ T3824] veth0_vlan: entered promiscuous mode [ 46.151234][ T3824] veth1_vlan: entered promiscuous mode [ 46.176544][ T3824] veth0_macvtap: entered promiscuous mode [ 46.193585][ T3824] veth1_macvtap: entered promiscuous mode [ 46.224296][ T3824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.248990][ T3824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.272076][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.283554][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.301971][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.318428][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.790397][ T4080] loop5: detected capacity change from 0 to 4096 [ 46.836671][ T4080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.853239][ T4078] loop1: detected capacity change from 0 to 8192 [ 46.966929][ T3306] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 47.000343][ T3306] FAT-fs (loop1): Filesystem has been set read-only [ 47.261539][ T4090] syz.4.189 (4090) used greatest stack depth: 10048 bytes left [ 47.313199][ T4094] loop4: detected capacity change from 0 to 8192 [ 47.377923][ T3824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.349525][ T4102] loop5: detected capacity change from 0 to 128 [ 48.623396][ T4120] loop1: detected capacity change from 0 to 1024 [ 48.630414][ T4120] EXT4-fs: Ignoring removed bh option [ 48.675058][ T4120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.738108][ T4120] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.118379][ T4140] SELinux: ebitmap start bit (536870912) is beyond the end of the bitmap (1088) [ 49.127548][ T4140] SELinux: invalid class [ 49.133567][ T4140] SELinux: failed to load policy [ 49.265191][ T4144] batman_adv: batadv0: Interface deactivated: dummy0 [ 49.277047][ T4144] batman_adv: batadv0: Removing interface: dummy0 [ 49.344916][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.378331][ T4144] bridge_slave_0: left allmulticast mode [ 49.415626][ T4144] bridge_slave_0: left promiscuous mode [ 49.422080][ T4144] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.436358][ T4144] bridge_slave_1: left allmulticast mode [ 49.442224][ T4144] bridge_slave_1: left promiscuous mode [ 49.474368][ T4144] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.512360][ T4144] bond0: (slave bond_slave_0): Releasing backup interface [ 49.531753][ T4144] bond0: (slave bond_slave_1): Releasing backup interface [ 49.557842][ T4144] team0: Port device team_slave_0 removed [ 49.574105][ T4144] team0: Port device team_slave_1 removed [ 49.583924][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.591671][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.608809][ T4144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.622145][ T4144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.647920][ T4144] net_ratelimit: 10 callbacks suppressed [ 49.647955][ T4144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.764643][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 49.764659][ T28] audit: type=1400 audit(1784657799.826:347): avc: denied { read } for pid=4168 comm="syz.5.218" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.831946][ T28] audit: type=1400 audit(1784657799.826:348): avc: denied { open } for pid=4168 comm="syz.5.218" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.883763][ T28] audit: type=1400 audit(1784657799.926:349): avc: denied { ioctl } for pid=4168 comm="syz.5.218" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.930836][ T4173] loop3: detected capacity change from 0 to 128 [ 49.961734][ T4173] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.033738][ T4173] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.108474][ T28] audit: type=1400 audit(1784657800.166:350): avc: denied { write } for pid=4172 comm="syz.3.219" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.160927][ T28] audit: type=1400 audit(1784657800.166:351): avc: denied { add_name } for pid=4172 comm="syz.3.219" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.210386][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.212950][ T28] audit: type=1400 audit(1784657800.166:352): avc: denied { setattr } for pid=4172 comm="syz.3.219" path="/52/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.277409][ T28] audit: type=1400 audit(1784657800.306:353): avc: denied { bind } for pid=4186 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.370052][ T28] audit: type=1400 audit(1784657800.426:354): avc: denied { mounton } for pid=4196 comm="syz.4.227" path="/48/file0" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 50.405569][ T28] audit: type=1326 audit(1784657800.436:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4190 comm="syz.1.226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76214dde99 code=0x0 [ 50.454940][ T4204] loop4: detected capacity change from 0 to 128 [ 50.479926][ T28] audit: type=1400 audit(1784657800.536:356): avc: denied { associate } for pid=4202 comm="syz.3.228" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.511155][ T4204] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.568189][ T4204] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.458268][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.737824][ T4240] loop0: detected capacity change from 0 to 512 [ 51.744864][ T4240] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.756674][ T4239] netlink: 'syz.3.246': attribute type 39 has an invalid length. [ 51.767013][ T4240] EXT4-fs (loop0): 1 truncate cleaned up [ 51.784407][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.841501][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.878756][ T4248] loop1: detected capacity change from 0 to 4096 [ 51.898779][ T4248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.980429][ T4254] loop0: detected capacity change from 0 to 8192 [ 52.023592][ T3297] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 52.041027][ T4263] netlink: 'syz.5.256': attribute type 1 has an invalid length. [ 52.059745][ T3297] FAT-fs (loop0): Filesystem has been set read-only [ 52.123047][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.183815][ T4273] loop0: detected capacity change from 0 to 256 [ 52.191185][ T4273] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.425211][ T4293] loop3: detected capacity change from 0 to 128 [ 52.461543][ T4293] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.496946][ T4293] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.539798][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.854879][ T4338] loop0: detected capacity change from 0 to 164 [ 52.867009][ T4338] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.904608][ T4338] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.945960][ T4342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.041744][ T4355] batadv_slave_0: entered promiscuous mode [ 53.049097][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 53.063137][ T4362] netlink: 'syz.5.297': attribute type 1 has an invalid length. [ 53.081252][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.133992][ T4355] batadv_slave_0 (unregistering): left promiscuous mode [ 53.141292][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.242705][ T4369] bond1 (unregistering): Released all slaves [ 53.801787][ T4382] loop4: detected capacity change from 0 to 32768 [ 53.858064][ T4382] loop4: p1 p3 < > [ 54.020955][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 54.022142][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.135473][ T4422] loop5: detected capacity change from 0 to 512 [ 54.146514][ T4424] loop1: detected capacity change from 0 to 512 [ 54.185146][ T4422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.220239][ T4424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.262056][ T4422] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.283240][ T4424] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 54.315277][ T4424] EXT4-fs (loop1): 1 truncate cleaned up [ 54.329818][ T3824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.329992][ T4424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.770735][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.832333][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 54.832413][ T28] audit: type=1400 audit(1784657804.886:399): avc: denied { write } for pid=4459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.873232][ T4473] loop1: detected capacity change from 0 to 164 [ 54.919719][ T28] audit: type=1400 audit(1784657804.976:400): avc: denied { write } for pid=4478 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.984063][ T4481] all: renamed from bridge_slave_1 (while UP) [ 55.057929][ T28] audit: type=1400 audit(1784657805.116:401): avc: denied { create } for pid=4487 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.059191][ T4489] syzkaller1: entered promiscuous mode [ 55.117388][ T28] audit: type=1400 audit(1784657805.116:402): avc: denied { ioctl } for pid=4487 comm="syz.4.336" path="socket:[7872]" dev="sockfs" ino=7872 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.165506][ T4489] syzkaller1: entered allmulticast mode [ 55.214944][ T28] audit: type=1400 audit(1784657805.276:403): avc: denied { write } for pid=4485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.302355][ T28] audit: type=1400 audit(1784657805.356:404): avc: denied { write } for pid=4511 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.390262][ T28] audit: type=1400 audit(1784657805.446:405): avc: denied { setopt } for pid=4516 comm="syz.0.344" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.445684][ T28] audit: type=1400 audit(1784657805.446:406): avc: denied { connect } for pid=4516 comm="syz.0.344" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.469286][ T28] audit: type=1400 audit(1784657805.446:407): avc: denied { write } for pid=4516 comm="syz.0.344" path="socket:[8569]" dev="sockfs" ino=8569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.548226][ T28] audit: type=1400 audit(1784657805.556:408): avc: denied { getattr } for pid=4518 comm="syz.1.343" path="socket:[7894]" dev="sockfs" ino=7894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 55.869292][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.876716][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.112443][ T4579] syz.0.361: attempt to access beyond end of device [ 56.112443][ T4579] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 56.162181][ T4579] syz.0.361: attempt to access beyond end of device [ 56.162181][ T4579] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 56.189534][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.196648][ T4579] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 56.196718][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.212388][ T4547] bridge_slave_0: entered allmulticast mode [ 56.214903][ T4579] syz.0.361: attempt to access beyond end of device [ 56.214903][ T4579] loop0: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 56.219139][ T4547] bridge_slave_0: entered promiscuous mode [ 56.238670][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.245835][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.253227][ T4547] bridge_slave_1: entered allmulticast mode [ 56.260017][ T4547] bridge_slave_1: entered promiscuous mode [ 56.262636][ T4579] syz.0.361: attempt to access beyond end of device [ 56.262636][ T4579] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 56.278389][ T4547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.290541][ T4579] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 56.299475][ T4547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.309579][ T4579] syz.0.361: attempt to access beyond end of device [ 56.309579][ T4579] loop0: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 56.323720][ T4579] syz.0.361: attempt to access beyond end of device [ 56.323720][ T4579] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 56.337829][ T4579] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 56.340909][ T4547] team0: Port device team_slave_0 added [ 56.346825][ T4579] syz.0.361: attempt to access beyond end of device [ 56.346825][ T4579] loop0: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 56.366392][ T4579] syz.0.361: attempt to access beyond end of device [ 56.366392][ T4579] loop0: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 56.388288][ T4588] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.393786][ T4547] team0: Port device team_slave_1 added [ 56.399048][ T4579] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 56.414302][ T4588] EXT4-fs (loop5): 1 truncate cleaned up [ 56.420488][ T4588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.426969][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.433223][ T4579] syz.0.361: attempt to access beyond end of device [ 56.433223][ T4579] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 56.439731][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.464455][ T4588] EXT4-fs (loop5): shut down requested (1) [ 56.479250][ T4547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.488064][ T4579] syz.0.361: attempt to access beyond end of device [ 56.488064][ T4579] loop0: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 56.496478][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.511332][ T4579] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 56.516356][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.529970][ T4579] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 56.550999][ T4547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.568561][ T4547] hsr_slave_0: entered promiscuous mode [ 56.572667][ T4588] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 56.577235][ T4547] hsr_slave_1: entered promiscuous mode [ 56.591210][ T4547] debugfs: 'hsr0' already exists in 'hsr' [ 56.597716][ T4547] Cannot create hsr debugfs directory [ 56.606252][ T4579] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 56.610321][ T4588] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 56.626077][ T4579] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 56.657048][ T4579] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 56.666675][ T4579] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 56.681899][ T3824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.911083][ T3412] IPVS: starting estimator thread 0... [ 57.003193][ T4612] IPVS: using max 2688 ests per chain, 134400 per kthread [ 57.026685][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.374'. [ 57.121973][ T4547] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.131478][ T4547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.162125][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.169300][ T4632] bridge0: port 2(bridge_slave_1) entered listening state [ 57.176537][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.183710][ T4632] bridge0: port 1(bridge_slave_0) entered listening state [ 57.232725][ T4632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.274138][ T4639] sctp: [Deprecated]: syz.1.384 (pid 4639) Use of int in max_burst socket option deprecated. [ 57.274138][ T4639] Use struct sctp_assoc_value instead [ 57.368562][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.375893][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.461792][ T4646] set_capacity_and_notify: 2 callbacks suppressed [ 57.461814][ T4646] loop4: detected capacity change from 0 to 4096 [ 57.474860][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.497545][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.519944][ T4646] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.533064][ T4646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.557042][ T4646] EXT4-fs (loop4): shut down requested (2) [ 57.564945][ T4646] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 57.581915][ T4646] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 57.605284][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.624583][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.633942][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.660421][ T4547] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.676514][ T4547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.687950][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.699292][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.708309][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.717082][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.729281][ T4547] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 57.738808][ T4547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.747018][ T4547] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 57.760016][ T4547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.767708][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.776389][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.785632][ T4666] netlink: 'syz.5.395': attribute type 298 has an invalid length. [ 57.825643][ T4547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.838016][ T4547] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.848640][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.855851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.871426][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.878548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.895854][ T4547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.907089][ T4547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.055199][ T4547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.166320][ T4547] veth0_vlan: entered promiscuous mode [ 58.174890][ T4547] veth1_vlan: entered promiscuous mode [ 58.191808][ T4547] veth0_macvtap: entered promiscuous mode [ 58.200980][ T4547] veth1_macvtap: entered promiscuous mode [ 58.212657][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.225192][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.236373][ T311] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.245348][ T311] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.256956][ T311] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.265917][ T311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.355293][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.549362][ T4724] capability: warning: `syz.0.403' uses 32-bit capabilities (legacy support in use) [ 58.849253][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.412'. [ 58.911121][ T4750] loop4: detected capacity change from 0 to 256 [ 58.917965][ T4750] vfat: Unknown parameter '' [ 59.014654][ T4756] dummy0: entered allmulticast mode [ 59.020922][ T4756] dummy0: left allmulticast mode [ 59.076057][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.083309][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.114800][ T4760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.124377][ T4760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.156238][ T311] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.165315][ T311] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.175007][ T311] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.188516][ T311] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.441044][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.449675][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.636057][ T4781] loop1: detected capacity change from 0 to 128 [ 59.659101][ T4781] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.672104][ T4781] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.707311][ T4781] Invalid argument reading file caps for ./file0 [ 59.731999][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.858865][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 59.858884][ T28] audit: type=1400 audit(1784657809.916:445): avc: denied { mount } for pid=4802 comm="syz.0.437" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 59.918542][ T28] audit: type=1400 audit(1784657809.976:446): avc: denied { mount } for pid=4807 comm="syz.0.439" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.941870][ T28] audit: type=1400 audit(1784657809.976:447): avc: denied { search } for pid=4807 comm="syz.0.439" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.964387][ T28] audit: type=1400 audit(1784657809.976:448): avc: denied { search } for pid=4807 comm="syz.0.439" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.005183][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 60.014247][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 60.023768][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 60.033161][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 60.209555][ T28] audit: type=1400 audit(1784657810.266:449): avc: denied { sqpoll } for pid=4824 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.373021][ T3630] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.454565][ T28] audit: type=1400 audit(1784657811.516:450): avc: denied { watch_reads } for pid=4844 comm="syz.6.456" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.864792][ T4852] netlink: 'syz.0.459': attribute type 8 has an invalid length. [ 61.872511][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 61.904181][ T4852] bond0: entered promiscuous mode [ 61.909520][ T4852] bond_slave_0: entered promiscuous mode [ 61.917348][ T4852] bond_slave_1: entered promiscuous mode [ 61.925039][ T4852] gretap0: entered promiscuous mode [ 61.932749][ T4852] bond0: left promiscuous mode [ 61.938400][ T4852] bond_slave_0: left promiscuous mode [ 61.944147][ T4852] bond_slave_1: left promiscuous mode [ 61.950285][ T4852] gretap0: left promiscuous mode [ 61.983622][ T4858] loop4: detected capacity change from 0 to 1024 [ 61.999166][ T4858] EXT4-fs: Ignoring removed orlov option [ 62.010271][ T28] audit: type=1400 audit(1784657812.066:451): avc: denied { write } for pid=4859 comm="syz.1.464" path="socket:[9645]" dev="sockfs" ino=9645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.049281][ T28] audit: type=1400 audit(1784657812.096:452): avc: denied { mount } for pid=4861 comm="syz.5.465" name="/" dev="hugetlbfs" ino=9652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 62.091197][ T4858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.124719][ T28] audit: type=1400 audit(1784657812.186:453): avc: denied { setattr } for pid=4857 comm="syz.4.463" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.194702][ T28] audit: type=1400 audit(1784657812.256:454): avc: denied { connect } for pid=4877 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.397096][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.936427][ T4948] netlink: 147888 bytes leftover after parsing attributes in process `syz.0.501'. [ 63.177188][ T4972] loop1: detected capacity change from 0 to 1024 [ 63.195570][ T4972] EXT4-fs: Ignoring removed bh option [ 63.204980][ T4975] loop5: detected capacity change from 0 to 512 [ 63.226199][ T4975] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.514: corrupted inode contents [ 63.242145][ T4972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.255460][ T4975] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.255629][ T4975] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.514: mark_inode_dirty error [ 63.264882][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 63.264937][ C0] EXT4-fs (loop5): initial error at time 1784657813: ext4_do_update_inode:5742: inode 16 [ 63.264964][ C0] EXT4-fs (loop5): last error at time 1784657813: ext4_do_update_inode:5742: inode 16 [ 63.311854][ T4975] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.312122][ T4975] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.514: corrupted inode contents [ 63.338955][ T4975] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.339154][ T4975] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.514: mark_inode_dirty error [ 63.368298][ T4975] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.368495][ T4975] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.514: corrupted inode contents [ 63.391247][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.397124][ T4975] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.400578][ T4975] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 63.419869][ T4975] loop5: lost filesystem error report for type 5 error -117 [ 63.420107][ T4975] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.514: corrupted inode contents [ 63.439677][ T4975] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.440127][ T4975] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.514: mark_inode_dirty error [ 63.460896][ T4975] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.461144][ T4975] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 63.479400][ T4975] loop5: lost filesystem error report for type 5 error -117 [ 63.479817][ T4975] EXT4-fs (loop5): 1 truncate cleaned up [ 63.493935][ T311] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 63.509931][ T311] loop5: lost filesystem error report for type 5 error -117 [ 63.511075][ T4975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.532500][ T4975] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.641134][ T3824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.112390][ T5025] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 64.125960][ T5025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.143514][ T5025] bond1: (slave geneve2): making interface the new active one [ 64.152536][ T5025] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 64.161594][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.170121][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.179733][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.188078][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.226597][ T5031] loop0: detected capacity change from 0 to 736 [ 64.440528][ T5049] syz.1.543 uses obsolete (PF_INET,SOCK_PACKET) [ 64.483011][ T5054] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 64.542999][ T5057] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 64.682461][ T5061] netlink: 36 bytes leftover after parsing attributes in process `syz.6.548'. [ 65.134902][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.565'. [ 65.144061][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 65.205241][ T5102] bond2: entered promiscuous mode [ 65.225102][ T5102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.281491][ T5107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.311121][ T5107] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 65.356296][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 65.356337][ T28] audit: type=1400 audit(1784657815.416:494): avc: denied { name_bind } for pid=5114 comm="syz.6.570" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 65.369930][ T5107] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 65.458941][ T5122] loop6: detected capacity change from 0 to 1024 [ 65.466485][ T5122] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.496259][ T5122] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.507423][ T5122] JBD2: no valid journal superblock found [ 65.513526][ T5122] EXT4-fs (loop6): Could not load journal inode [ 66.535040][ T5144] bond0: entered promiscuous mode [ 66.556384][ T5144] bond_slave_0: entered promiscuous mode [ 66.573574][ T5144] bond_slave_1: entered promiscuous mode [ 66.594858][ T3412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.614770][ T3412] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.626862][ T5145] bond0: left promiscuous mode [ 66.661253][ T5145] bond_slave_0: left promiscuous mode [ 66.682078][ T5145] bond_slave_1: left promiscuous mode [ 66.878003][ T28] audit: type=1400 audit(1784657816.936:495): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.555930][ T5215] loop1: detected capacity change from 0 to 512 [ 67.672128][ T5215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.705368][ T5215] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.735078][ T5228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 67.834045][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.105582][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 68.479028][ T5226] loop6: detected capacity change from 0 to 512 [ 68.776941][ T5226] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.612: bg 0: block 393: padding at end of block bitmap is not set [ 68.837682][ T5226] loop6: lost filesystem error report for type 5 error -117 [ 68.843001][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 68.859587][ C0] EXT4-fs (loop6): initial error at time 1784657818: ext4_validate_block_bitmap:441 [ 68.872051][ C0] EXT4-fs (loop6): last error at time 1784657818: ext4_validate_block_bitmap:441 [ 68.889385][ T5226] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 68.900386][ T5226] loop6: lost filesystem error report for type 5 error -117 [ 68.911403][ T5226] EXT4-fs (loop6): 2 truncates cleaned up [ 69.051557][ T5226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.171942][ T4547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.534815][ T5275] loop6: detected capacity change from 0 to 32768 [ 69.576419][ T5275] loop6: p1 p3 < > [ 69.641166][ T5286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 69.675970][ T5286] bond1: entered promiscuous mode [ 69.687654][ T5286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.736867][ T5289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.745956][ T5289] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 69.750117][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 69.758472][ T5289] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 69.781050][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 70.148609][ T5318] gtp0: entered allmulticast mode [ 70.256434][ T28] audit: type=1400 audit(1784657820.316:496): avc: denied { remount } for pid=5327 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.327660][ T5334] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5334 comm=syz.4.657 [ 70.341373][ T5334] netlink: 'syz.4.657': attribute type 12 has an invalid length. [ 70.349387][ T5334] netlink: 'syz.4.657': attribute type 29 has an invalid length. [ 70.357669][ T5334] netlink: 148 bytes leftover after parsing attributes in process `syz.4.657'. [ 70.366957][ T5334] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 70.374836][ T5334] netlink: 47 bytes leftover after parsing attributes in process `syz.4.657'. [ 70.434495][ T28] audit: type=1400 audit(1784657820.486:497): avc: denied { ioctl } for pid=5336 comm="syz.4.658" path="socket:[11079]" dev="sockfs" ino=11079 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 70.646865][ T5348] netlink: 'syz.4.672': attribute type 9 has an invalid length. [ 70.646927][ T5348] netlink: 371 bytes leftover after parsing attributes in process `syz.4.672'. [ 70.709848][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 70.908043][ T5368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5368 comm=syz.6.669 [ 71.419383][ T5368] netlink: 'syz.6.669': attribute type 12 has an invalid length. [ 71.429432][ T5368] netlink: 'syz.6.669': attribute type 29 has an invalid length. [ 71.437646][ T5368] netlink: 148 bytes leftover after parsing attributes in process `syz.6.669'. [ 71.447194][ T5368] netlink: 'syz.6.669': attribute type 1 has an invalid length. [ 71.455352][ T5368] netlink: 47 bytes leftover after parsing attributes in process `syz.6.669'. [ 71.464580][ T5376] erspan0: entered promiscuous mode [ 71.486049][ T5376] erspan0: left promiscuous mode [ 71.557265][ T5385] loop4: detected capacity change from 0 to 512 [ 71.586036][ T5385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.602412][ T28] audit: type=1400 audit(1784657821.666:498): avc: denied { ioctl } for pid=5382 comm="syz.5.676" path="socket:[11474]" dev="sockfs" ino=11474 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.634390][ T5385] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.675970][ T28] audit: type=1400 audit(1784657821.736:499): avc: denied { write } for pid=5384 comm="syz.4.679" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.683086][ T5385] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 18: comm syz.4.679: lblock 23 mapped to illegal pblock 18 (length 1) [ 71.784832][ T5385] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.679: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 71.825673][ T28] audit: type=1400 audit(1784657821.886:500): avc: denied { read } for pid=5398 comm="syz.0.684" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.833419][ T5385] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 12: comm syz.4.679: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 71.870658][ T28] audit: type=1400 audit(1784657821.886:501): avc: denied { open } for pid=5398 comm="syz.0.684" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.902764][ T5385] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.679: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 71.924964][ T28] audit: type=1400 audit(1784657821.886:502): avc: denied { ioctl } for pid=5398 comm="syz.0.684" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 72.030508][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.109163][ T3297] block device autoloading is deprecated and will be removed. [ 72.109911][ T5408] xt_hashlimit: size too large, truncated to 1048576 [ 72.483111][ T28] audit: type=1400 audit(1784657822.536:503): avc: denied { create } for pid=5425 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.540161][ T5431] loop4: detected capacity change from 0 to 128 [ 72.546733][ T28] audit: type=1400 audit(1784657822.596:504): avc: denied { ioctl } for pid=5425 comm="syz.5.703" path="socket:[11254]" dev="sockfs" ino=11254 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.572612][ T5431] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.589822][ T28] audit: type=1400 audit(1784657822.636:505): avc: denied { write } for pid=5425 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.613531][ T5431] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.333045][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'. [ 73.354063][ T5439] ipip0: entered promiscuous mode [ 73.364382][ T5439] ipip0: entered allmulticast mode [ 73.587594][ T28] audit: type=1400 audit(1784657823.646:506): avc: denied { recv } for pid=5444 comm="syz.6.700" saddr=10.128.0.163 src=30036 daddr=10.128.0.61 dest=49944 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 74.213359][ T3630] Bluetooth: hci0: command 0x1003 tx timeout [ 74.213761][ T4718] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.231327][ T5484] netlink: 44 bytes leftover after parsing attributes in process `syz.5.717'. [ 74.584053][ T5501] gtp0: entered allmulticast mode [ 74.663796][ T5507] loop0: detected capacity change from 0 to 512 [ 74.670732][ T5507] EXT4-fs: inline encryption not supported [ 74.677403][ T5507] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.698371][ T5507] EXT4-fs (loop0): 1 truncate cleaned up [ 74.705234][ T5507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.733643][ T5507] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.727: bad extra_isize 62 (inode size 256) [ 74.749100][ T5507] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.727: bad extra_isize 62 (inode size 256) [ 74.764130][ T5507] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.727: bad extra_isize 62 (inode size 256) [ 74.780853][ T5507] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.727: bad extra_isize 62 (inode size 256) [ 74.800706][ T5507] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.727: bad extra_isize 62 (inode size 256) [ 74.819403][ T5511] EXT4-fs (loop0): shut down requested (1) [ 74.893063][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.966861][ T5519] loop0: detected capacity change from 0 to 128 [ 75.496549][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 75.534394][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 75.631550][ T5547] sctp: [Deprecated]: syz.1.742 (pid 5547) Use of int in max_burst socket option. [ 75.631550][ T5547] Use struct sctp_assoc_value instead [ 75.728147][ T5555] netlink: 'syz.5.746': attribute type 7 has an invalid length. [ 75.740742][ T5555] netlink: 'syz.5.746': attribute type 7 has an invalid length. [ 75.845504][ T5523] loop6: detected capacity change from 0 to 512 [ 75.954549][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 75.954568][ T28] audit: type=1400 audit(1784657826.006:514): avc: denied { create } for pid=5565 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.001819][ T28] audit: type=1400 audit(1784657826.016:515): avc: denied { setopt } for pid=5565 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.117857][ T5523] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.179449][ T5523] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 76.197468][ T5523] EXT4-fs (loop6): group descriptors corrupted! [ 76.247388][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 76.488596][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 76.680304][ T28] audit: type=1400 audit(1784657826.676:516): avc: denied { egress } for pid=3300 comm="syz-executor" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 76.706176][ T28] audit: type=1400 audit(1784657826.676:517): avc: denied { sendto } for pid=3300 comm="syz-executor" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 76.751501][ T5600] xt_hashlimit: size too large, truncated to 1048576 [ 76.779120][ T5587] loop1: detected capacity change from 0 to 512 [ 76.845097][ T5587] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.996606][ T5605] loop4: detected capacity change from 0 to 512 [ 77.106828][ T5605] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.767: bg 0: block 104: invalid block bitmap [ 77.178081][ T5605] loop4: lost filesystem error report for type 5 error -117 [ 77.178292][ T5605] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 77.186183][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 77.186208][ C1] EXT4-fs (loop4): initial error at time 1784657827: ext4_validate_block_bitmap:432 [ 77.186238][ C1] EXT4-fs (loop4): last error at time 1784657827: ext4_validate_block_bitmap:432 [ 77.275040][ T5605] loop4: lost filesystem error report for type 5 error -117 [ 77.278585][ T5605] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.767: invalid indirect mapped block 1 (level 1) [ 77.303048][ T5605] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.350877][ T5605] EXT4-fs (loop4): 1 truncate cleaned up [ 77.372618][ T28] audit: type=1400 audit(1784657827.426:518): avc: denied { connect } for pid=5616 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.418149][ T5605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.472858][ T5623] loop6: detected capacity change from 0 to 512 [ 77.529834][ T5623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.561019][ T5623] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.580430][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.662321][ T28] audit: type=1400 audit(1784657827.716:519): avc: denied { setattr } for pid=5622 comm="syz.6.772" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.731171][ T5637] loop4: detected capacity change from 0 to 1024 [ 77.731564][ T4547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.755290][ T5637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.795524][ T5637] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.817963][ T5637] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.778: lblock 0 mapped to illegal pblock 0 (length 6) [ 77.818964][ T28] audit: type=1400 audit(1784657827.876:520): avc: denied { write } for pid=5636 comm="syz.4.778" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.857492][ T5637] EXT4-fs (loop4): Remounting filesystem read-only [ 77.893338][ T28] audit: type=1400 audit(1784657827.946:521): avc: denied { ioctl } for pid=5636 comm="syz.4.778" path="/174/file1/file1" dev="loop4" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.976073][ T28] audit: type=1400 audit(1784657828.036:522): avc: denied { read } for pid=5645 comm="syz.6.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.638181][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.842939][ T28] audit: type=1400 audit(1784657828.896:523): avc: denied { bind } for pid=5668 comm="syz.6.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.654864][ T5698] loop1: detected capacity change from 0 to 512 [ 79.663197][ T5698] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.693185][ T5698] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 79.715580][ T5698] EXT4-fs (loop1): group descriptors corrupted! [ 79.801936][ T5700] xt_hashlimit: size too large, truncated to 1048576 [ 80.225574][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 81.031639][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 81.031716][ T28] audit: type=1400 audit(1784657831.086:535): avc: denied { read } for pid=5749 comm="syz.4.826" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.067878][ T28] audit: type=1400 audit(1784657831.086:536): avc: denied { open } for pid=5749 comm="syz.4.826" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.110801][ T28] audit: type=1400 audit(1784657831.156:537): avc: denied { ioctl } for pid=5749 comm="syz.4.826" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.157189][ T28] audit: type=1400 audit(1784657831.216:538): avc: denied { ioctl } for pid=5751 comm="syz.6.827" path="socket:[12830]" dev="sockfs" ino=12830 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.836296][ T5753] : renamed from bond0 (while UP) [ 82.002630][ T28] audit: type=1400 audit(1784657832.056:539): avc: denied { write } for pid=5758 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.085736][ T28] audit: type=1400 audit(1784657832.146:540): avc: denied { write } for pid=5767 comm="syz.0.834" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.113201][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.835'. [ 82.131994][ T28] audit: type=1400 audit(1784657832.146:541): avc: denied { open } for pid=5767 comm="syz.0.834" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 82.637024][ T28] audit: type=1400 audit(1784657832.696:542): avc: denied { tracepoint } for pid=5792 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.867871][ T5798] loop1: detected capacity change from 0 to 512 [ 82.925814][ T5798] EXT4-fs (loop1): 1 truncate cleaned up [ 82.934288][ T5798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.971028][ T28] audit: type=1400 audit(1784657833.026:543): avc: denied { write } for pid=5797 comm="syz.1.846" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.027787][ T28] audit: type=1400 audit(1784657833.056:544): avc: denied { write } for pid=5797 comm="syz.1.846" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.202342][ T5803] loop0: detected capacity change from 0 to 512 [ 83.210104][ T5803] EXT4-fs: Ignoring removed bh option [ 83.250411][ T5803] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 83.276696][ T5803] EXT4-fs (loop0): 1 truncate cleaned up [ 83.287181][ T5803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.382974][ T5800] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 83.441946][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.850'. [ 83.487486][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.523564][ T5813] netlink: 'syz.0.851': attribute type 6 has an invalid length. [ 84.052661][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.547901][ T5842] loop1: detected capacity change from 0 to 512 [ 84.568481][ T5850] netlink: 112 bytes leftover after parsing attributes in process `syz.4.864'. [ 85.125821][ T5842] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.861: bg 0: block 104: invalid block bitmap [ 85.167621][ T5842] loop1: lost filesystem error report for type 5 error -117 [ 85.175545][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 85.190153][ C1] EXT4-fs (loop1): initial error at time 1784657835: ext4_validate_block_bitmap:432 [ 85.200058][ C1] EXT4-fs (loop1): last error at time 1784657835: ext4_validate_block_bitmap:432 [ 85.232861][ T5842] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 85.254027][ T5842] loop1: lost filesystem error report for type 5 error -117 [ 85.258733][ T5842] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.861: invalid indirect mapped block 1 (level 1) [ 85.320980][ T5842] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.324607][ T5842] EXT4-fs (loop1): 1 truncate cleaned up [ 85.360983][ T5842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.504466][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 85.515339][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.540126][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 85.575950][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 85.586192][ T1909] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.597162][ T1909] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.609957][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 85.622908][ T1909] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.649747][ T1909] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.711552][ T5881] loop0: detected capacity change from 0 to 512 [ 85.726825][ T5887] loop1: detected capacity change from 0 to 512 [ 85.735447][ T5881] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.751042][ T5887] EXT4-fs: Ignoring removed bh option [ 85.798565][ T5887] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 85.827764][ T5887] EXT4-fs (loop1): 1 truncate cleaned up [ 85.846373][ T5887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.244897][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.402204][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 86.402234][ T28] audit: type=1326 audit(1784657836.456:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.456096][ T5917] netlink: 'syz.0.890': attribute type 8 has an invalid length. [ 86.456553][ T28] audit: type=1326 audit(1784657836.496:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.471903][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 86.512524][ T28] audit: type=1326 audit(1784657836.496:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.554601][ T5917] bond0: entered promiscuous mode [ 86.560032][ T5917] bond_slave_0: entered promiscuous mode [ 86.566766][ T5917] bond_slave_1: entered promiscuous mode [ 86.572923][ T28] audit: type=1326 audit(1784657836.496:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.600447][ T28] audit: type=1326 audit(1784657836.556:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bd729e6ce code=0x7ffc0000 [ 86.633284][ T5917] gretap0: entered promiscuous mode [ 86.645645][ T5917] team0: entered promiscuous mode [ 86.653435][ T5917] team_slave_0: entered promiscuous mode [ 86.659629][ T5917] team_slave_1: entered promiscuous mode [ 86.667395][ T5917] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 86.678437][ T28] audit: type=1326 audit(1784657836.556:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bd729e6ce code=0x7ffc0000 [ 86.706446][ T5917] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 86.717889][ T5917] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 86.729073][ T5917] hsr1: entered promiscuous mode [ 86.734698][ T28] audit: type=1326 audit(1784657836.566:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.762027][ T28] audit: type=1326 audit(1784657836.566:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.831304][ T28] audit: type=1326 audit(1784657836.566:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.882726][ T28] audit: type=1326 audit(1784657836.566:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz.6.889" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4bd72dde99 code=0x7ffc0000 [ 86.957690][ T5934] loop6: detected capacity change from 0 to 512 [ 86.975747][ T5934] EXT4-fs: Ignoring removed bh option [ 87.006477][ T5934] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 87.045864][ T5934] EXT4-fs (loop6): 1 truncate cleaned up [ 87.056003][ T5937] loop4: detected capacity change from 0 to 512 [ 87.061562][ T5934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.068872][ T5937] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.338734][ T4547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.472259][ T5962] loop4: detected capacity change from 0 to 1024 [ 87.493190][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 87.500366][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 87.526247][ T5962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.557096][ T5962] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.609077][ T5962] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.906: lblock 0 mapped to illegal pblock 0 (length 1) [ 87.646543][ T5962] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 87.674231][ T5962] EXT4-fs (loop4): This should not happen!! Data will be lost [ 87.674231][ T5962] [ 87.691717][ T5962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.906: bg 0: block 3: invalid block bitmap [ 87.706572][ T5962] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 87.721009][ T5962] EXT4-fs (loop4): This should not happen!! Data will be lost [ 87.721009][ T5962] [ 87.731591][ T5962] EXT4-fs (loop4): Total free blocks count 0 [ 87.739728][ T5962] EXT4-fs (loop4): Free/Dirty block details [ 87.746412][ T5962] EXT4-fs (loop4): free_blocks=0 [ 87.762136][ T5962] EXT4-fs (loop4): dirty_blocks=64 [ 87.769910][ T5962] EXT4-fs (loop4): Block reservation details [ 87.821952][ T5962] syz.4.906 (5962) used greatest stack depth: 9896 bytes left [ 87.842330][ T3300] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 87.879934][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.880440][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 87.900756][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 87.943738][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.955205][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 87.966283][ T1909] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.979831][ T1909] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.000362][ T1909] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.013019][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 88.025599][ T1909] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.994915][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.932'. [ 89.019613][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 89.049387][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.932'. [ 89.049876][ T37] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.068620][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.932'. [ 89.086229][ T37] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.112117][ T37] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.135029][ T37] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.207051][ T6041] syz.1.945 (6041) used greatest stack depth: 9816 bytes left [ 89.827575][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.942'. [ 89.899848][ T6063] netlink: 'syz.6.944': attribute type 21 has an invalid length. [ 89.916927][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.6.944'. [ 90.533078][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.693114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.723735][ T6093] loop6: detected capacity change from 0 to 512 [ 90.738536][ T6093] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.174672][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.574451][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.614707][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.677641][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 92.677657][ T28] audit: type=1400 audit(1784657842.736:576): avc: denied { create } for pid=6135 comm="syz.6.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 92.766688][ T28] audit: type=1400 audit(1784657842.826:577): avc: denied { ioctl } for pid=6135 comm="syz.6.975" path="socket:[13789]" dev="sockfs" ino=13789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 92.795306][ T6143] netlink: 'syz.1.976': attribute type 1 has an invalid length. [ 92.815024][ T28] audit: type=1400 audit(1784657842.826:578): avc: denied { write } for pid=6135 comm="syz.6.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 92.928181][ T28] audit: type=1400 audit(1784657842.986:579): avc: denied { mount } for pid=6154 comm="syz.6.981" name="/" dev="rpc_pipefs" ino=14429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 92.975254][ T28] audit: type=1400 audit(1784657843.036:580): avc: denied { unmount } for pid=4547 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 93.076273][ T6161] loop0: detected capacity change from 0 to 1024 [ 93.101417][ T6161] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 93.113225][ T6161] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 93.158545][ T6161] loop0: detected capacity change from 0 to 1024 [ 93.166282][ T6167] loop6: detected capacity change from 0 to 128 [ 93.176708][ T6161] ext4: Bad value for 'journal_dev' [ 93.191760][ T6167] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.241067][ T6167] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.311631][ T28] audit: type=1400 audit(1784657843.366:581): avc: denied { write } for pid=6166 comm="syz.6.990" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.385626][ T4547] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.474779][ T28] audit: type=1400 audit(1784657843.536:582): avc: denied { write } for pid=6183 comm="syz.6.996" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.526667][ T6191] __nla_validate_parse: 2 callbacks suppressed [ 93.526686][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 93.558745][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 93.653683][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.894131][ T6207] loop0: detected capacity change from 0 to 512 [ 93.959568][ T6207] EXT4-fs (loop0): 1 truncate cleaned up [ 93.970098][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.018751][ T28] audit: type=1400 audit(1784657844.076:583): avc: denied { write } for pid=6206 comm="syz.0.1005" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.045186][ T28] audit: type=1400 audit(1784657844.076:584): avc: denied { write } for pid=6206 comm="syz.0.1005" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.224519][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.704800][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.952775][ T6224] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.030730][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.281764][ T6244] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 95.323646][ T6244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.733257][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.104510][ T6244] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 96.162801][ T28] audit: type=1400 audit(1784657846.216:585): avc: denied { cpu } for pid=6262 comm="syz.4.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 96.203213][ T37] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 96.275489][ T6261] loop6: detected capacity change from 0 to 512 [ 96.313070][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.323332][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 96.345062][ T6261] EXT4-fs (loop6): 1 truncate cleaned up [ 96.370797][ T6261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.386977][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.394098][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 96.406394][ T6277] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1036'. [ 96.505954][ T6280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.642698][ T6288] netlink: 'syz.5.1040': attribute type 1 has an invalid length. [ 96.682016][ T6288] bond3: entered promiscuous mode [ 96.695350][ T6288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.748474][ T6290] bond3: (slave veth3): making interface the new active one [ 96.759578][ T6290] veth3: entered promiscuous mode [ 96.773776][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.787448][ T6290] bond3: (slave veth3): Enslaving as an active interface with an up link [ 97.254953][ T3385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.822239][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.240717][ T4547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.335751][ T6334] xt_hashlimit: size too large, truncated to 1048576 [ 98.347891][ T6327] syzkaller0: entered promiscuous mode [ 98.354571][ T6327] syzkaller0: entered allmulticast mode [ 98.384074][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.392593][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.546446][ T6346] loop4: detected capacity change from 0 to 512 [ 98.580502][ T6346] EXT4-fs (loop4): 1 truncate cleaned up [ 98.587189][ T6346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.599511][ T6349] veth0: entered promiscuous mode [ 98.600015][ T6349] veth0: left promiscuous mode [ 98.638787][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 98.638827][ T28] audit: type=1400 audit(1784657848.696:589): avc: denied { write } for pid=6345 comm="syz.4.1060" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.744962][ T28] audit: type=1400 audit(1784657848.696:590): avc: denied { write } for pid=6345 comm="syz.4.1060" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.785865][ T28] audit: type=1326 audit(1784657848.806:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 98.813587][ T28] audit: type=1326 audit(1784657848.806:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 98.841438][ T28] audit: type=1326 audit(1784657848.806:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 98.867031][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.877650][ T28] audit: type=1326 audit(1784657848.836:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 98.905329][ T28] audit: type=1326 audit(1784657848.836:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 98.934036][ T28] audit: type=1326 audit(1784657848.836:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 98.961598][ T28] audit: type=1326 audit(1784657848.836:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 98.989412][ T28] audit: type=1326 audit(1784657848.846:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.1.1069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76214dde99 code=0x7ffc0000 [ 99.064840][ T6372] sg_write: data in/out 491520/136 bytes for SCSI command 0x0-- guessing data in; [ 99.064840][ T6372] program syz.6.1073 not setting count and/or reply_len properly [ 99.088618][ T3385] IPVS: starting estimator thread 0... [ 99.193237][ T6375] IPVS: using max 2256 ests per chain, 112800 per kthread [ 99.618209][ T6393] loop6: detected capacity change from 0 to 32768 [ 99.650835][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.675335][ T6393] loop6: p1 p3 < > [ 99.728237][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 99.738601][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 99.806743][ T6410] loop6: detected capacity change from 0 to 512 [ 99.829463][ T6410] EXT4-fs: Ignoring removed bh option [ 99.863428][ T6410] EXT4-fs (loop6): 1 truncate cleaned up [ 99.884516][ T6410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.044686][ T6421] netlink: 'syz.4.1092': attribute type 12 has an invalid length. [ 100.057204][ T6421] netlink: 'syz.4.1092': attribute type 29 has an invalid length. [ 100.099328][ T6421] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1092'. [ 100.113294][ T4547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.169098][ T6421] netlink: 'syz.4.1092': attribute type 1 has an invalid length. [ 100.237636][ T6424] netlink: 'syz.4.1092': attribute type 12 has an invalid length. [ 100.246275][ T6424] netlink: 'syz.4.1092': attribute type 29 has an invalid length. [ 100.264474][ T6424] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1092'. [ 100.274557][ T6424] netlink: 'syz.4.1092': attribute type 1 has an invalid length. [ 100.450446][ T6444] syzkaller0: entered promiscuous mode [ 100.456384][ T6444] syzkaller0: entered allmulticast mode [ 100.757336][ T6469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1113'. [ 100.933003][ T5827] net_ratelimit: 2 callbacks suppressed [ 100.933023][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.295723][ T6505] netlink: 'syz.0.1130': attribute type 29 has an invalid length. [ 101.343025][ T6505] netlink: 'syz.0.1130': attribute type 29 has an invalid length. [ 101.413211][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.460240][ T6512] loop0: detected capacity change from 0 to 512 [ 101.590749][ T6510] loop1: detected capacity change from 0 to 512 [ 101.624867][ T6510] EXT4-fs (loop1): 1 truncate cleaned up [ 101.642295][ T6510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.819312][ T6518] loop0: detected capacity change from 0 to 4096 [ 101.891140][ T6518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.973295][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.125010][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.486241][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.542508][ T6544] loop1: detected capacity change from 0 to 1024 [ 102.573541][ T6544] EXT4-fs: Ignoring removed bh option [ 102.616665][ T6544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.744025][ T6554] netlink: 'syz.6.1148': attribute type 1 has an invalid length. [ 102.778035][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.841769][ T6554] bond0: entered promiscuous mode [ 102.865923][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.886639][ T4643] Process accounting resumed [ 102.946008][ T6556] bond0: (slave veth3): making interface the new active one [ 102.970465][ T6556] veth3: entered promiscuous mode [ 102.985558][ T6556] bond0: (slave veth3): Enslaving as an active interface with an up link [ 103.014396][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.162660][ T35] IPVS: starting estimator thread 0... [ 103.252920][ T6572] IPVS: using max 2544 ests per chain, 127200 per kthread [ 103.351948][ T6582] ip_vti0: entered promiscuous mode [ 103.395492][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1160'. [ 103.458603][ T6580] loop0: detected capacity change from 0 to 512 [ 103.596874][ T6585] netlink: 'syz.6.1161': attribute type 1 has an invalid length. [ 103.640037][ T6580] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1157: inode has both inline data and extents flags [ 103.733583][ T6580] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.742923][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 103.758626][ C0] EXT4-fs (loop0): initial error at time 1784657853: ext4_orphan_get:1399: inode 15 [ 103.768058][ C0] EXT4-fs (loop0): last error at time 1784657853: ext4_orphan_get:1399: inode 15 [ 103.778866][ T6580] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1157: couldn't read orphan inode 15 (err -117) [ 103.819922][ T6587] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1162'. [ 103.825665][ T6580] loop0: lost filesystem error report for type 5 error -117 [ 104.031807][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'. [ 104.053047][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.077777][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 104.117840][ T6580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.122361][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'. [ 104.147023][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.156949][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.157492][ T6595] loop1: detected capacity change from 0 to 8192 [ 104.166519][ T6594] loop6: detected capacity change from 0 to 4096 [ 104.192176][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.203857][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.220012][ T6594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.243801][ T3306] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 104.262073][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 104.287386][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 104.287418][ T28] audit: type=1400 audit(1784657854.346:651): avc: denied { write } for pid=6593 comm="syz.6.1166" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.314760][ T3306] FAT-fs (loop1): Filesystem has been set read-only [ 104.456960][ T2981] ================================================================== [ 104.465143][ T2981] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 104.473170][ T2981] [ 104.475507][ T2981] write to 0xffff88811ad18b40 of 4 bytes by task 3285 on cpu 0: [ 104.483230][ T2981] d_make_discardable+0x4f/0x90 [ 104.488100][ T2981] simple_unlink+0x68/0x80 [ 104.492524][ T2981] shmem_unlink+0x12d/0x140 [ 104.497090][ T2981] vfs_unlink+0x1c3/0x490 [ 104.501426][ T2981] filename_unlinkat+0x1dc/0x410 [ 104.506636][ T2981] __se_sys_unlink+0x2b/0xe0 [ 104.511330][ T2981] __x64_sys_unlink+0x1f/0x30 [ 104.516376][ T2981] x64_sys_call+0x2eb6/0x3020 [ 104.521066][ T2981] do_syscall_64+0x136/0x3c0 [ 104.525670][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.531588][ T2981] [ 104.533916][ T2981] read to 0xffff88811ad18b40 of 4 bytes by task 2981 on cpu 1: [ 104.541462][ T2981] step_into_slowpath+0x139/0x4c0 [ 104.546503][ T2981] path_lookupat+0x2eb/0x4c0 [ 104.551106][ T2981] filename_lookup+0x18f/0x390 [ 104.555883][ T2981] do_readlinkat+0x74/0x2f0 [ 104.560414][ T2981] __x64_sys_readlink+0x47/0x60 [ 104.565295][ T2981] x64_sys_call+0x2b51/0x3020 [ 104.570009][ T2981] do_syscall_64+0x136/0x3c0 [ 104.575307][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.581212][ T2981] [ 104.583538][ T2981] value changed: 0x08300080 -> 0x00004080 [ 104.589254][ T2981] [ 104.591579][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 104.597844][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 104.606708][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.616768][ T2981] ================================================================== [ 104.634027][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.686333][ T28] audit: type=1400 audit(1784657854.446:652): avc: denied { write } for pid=6579 comm="syz.0.1157" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.725212][ T28] audit: type=1400 audit(1784657854.736:653): avc: denied { create } for pid=6579 comm="syz.0.1157" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.753999][ T4547] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.945457][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.093099][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.133142][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.172975][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.653440][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.212974][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.613410][ T3413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.253209][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.293016][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.703319][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.333253][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.824613][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.373206][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.412978][ T4643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.733191][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog