last executing test programs: 1m10.883347324s ago: executing program 4 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1m10.85966954s ago: executing program 4 (id=180): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) 1m10.677432537s ago: executing program 4 (id=187): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000006c0)={[{@sysvgroups}, {@noblock_validity}, {@nolazytime}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, ','}}, {@obj_role={'obj_role', 0x3d, '.)^'}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) 1m10.460240678s ago: executing program 4 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m10.403607207s ago: executing program 4 (id=197): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x3}}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @private=0xa010102}], 0x10) 1m10.120122086s ago: executing program 4 (id=207): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1d22, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 1m10.120024206s ago: executing program 32 (id=207): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1d22, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 23.795268442s ago: executing program 3 (id=1433): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 21.655901414s ago: executing program 3 (id=1437): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xf9, 0x1223, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) 20.723456796s ago: executing program 3 (id=1458): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x40, 0x44) acct(&(0x7f00000000c0)='./file0\x00') acct(0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 20.595135362s ago: executing program 3 (id=1466): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10400, &(0x7f0000000300), 0x0, 0x486, &(0x7f00000009c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) 20.317255342s ago: executing program 3 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) 20.071109077s ago: executing program 3 (id=1474): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x188}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0xf2ba, 0x2, 0x0, 0x0) 20.070868077s ago: executing program 33 (id=1474): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x188}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0xf2ba, 0x2, 0x0, 0x0) 6.031865563s ago: executing program 1 (id=1834): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x20}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x8000) 6.028072333s ago: executing program 1 (id=1837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x43}, 0x8) 5.942306707s ago: executing program 1 (id=1840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x40000) 5.919984113s ago: executing program 1 (id=1843): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x22, 0x0, 0x1) 5.73553154s ago: executing program 1 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0}) 5.46393802s ago: executing program 1 (id=1859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r1, 0x405, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x30}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x26042440}, 0x900) 5.455257359s ago: executing program 34 (id=1859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r1, 0x405, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x30}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x26042440}, 0x900) 2.64763855s ago: executing program 5 (id=1937): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2.573914777s ago: executing program 7 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 2.520120837s ago: executing program 5 (id=1939): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a0000000500"], 0x5c}}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.519888767s ago: executing program 7 (id=1940): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000400)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 2.415394378s ago: executing program 5 (id=1941): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000007c0)) 1.731864644s ago: executing program 0 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.731328444s ago: executing program 6 (id=1963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000600)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x14, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "de781887"}}}}}}}, 0x3e) 1.722969303s ago: executing program 0 (id=1965): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x80, 0x10000, 0x0, 0x1, 0xc, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x49a, &(0x7f00000002c0)={0x0, 0x4d8a, 0x1000, 0x8000, 0x15e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.677249524s ago: executing program 6 (id=1966): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2000400) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 1.620018684s ago: executing program 0 (id=1967): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x54}, @ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 1.619210684s ago: executing program 6 (id=1969): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xfffffffe) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) 909.908675ms ago: executing program 7 (id=1976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 892.287192ms ago: executing program 35 (id=1976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 786.007233ms ago: executing program 0 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x10042}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 760.999048ms ago: executing program 6 (id=1979): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0x4, 0xffff) 725.443162ms ago: executing program 6 (id=1980): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 644.907707ms ago: executing program 0 (id=1981): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 636.420796ms ago: executing program 6 (id=1982): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) read(r2, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) 338.514442ms ago: executing program 5 (id=1983): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x6, 0x0, 0xa1, 0x6, 0xfc, 0xfd, 0x0, 0x0, 0xff, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000)={r1}, 0x8) 337.929752ms ago: executing program 0 (id=1984): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 306.673146ms ago: executing program 2 (id=1985): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) 305.971416ms ago: executing program 5 (id=1986): sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20048040) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 220.07354ms ago: executing program 2 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) 187.446694ms ago: executing program 2 (id=1988): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 111.27922ms ago: executing program 2 (id=1989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0xa7, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 58.955331ms ago: executing program 2 (id=1990): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 58.222851ms ago: executing program 2 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0xf5}, @val={0x0, 0x0, 0x6, 0xffff, 0x18}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) 0s ago: executing program 5 (id=1992): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): sr_addr_subst_dest: Unknown node [ 58.789239][ T5649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 58.795610][ T5649] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 58.802144][ T5649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 58.808611][ T5649] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 58.815143][ T5649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 58.821587][ T5649] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 58.828076][ T5649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 59.281972][ T5692] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.305062][ T5692] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.319805][ T5692] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.875: bg 0: block 248: padding at end of block bitmap is not set [ 59.334116][ T5692] loop3: lost filesystem error report for type 5 error -117 [ 59.334281][ T5692] __quota_error: 53 callbacks suppressed [ 59.334290][ T5692] Quota error (device loop3): write_blk: dquota write failed [ 59.341589][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 59.341608][ C0] EXT4-fs (loop3): last error at time 1773250114: ext4_validate_block_bitmap:441 [ 59.376793][ T5692] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 59.386998][ T5692] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.875: Failed to acquire dquot type 1 [ 59.398346][ T5692] loop3: lost filesystem error report for type 5 error -117 [ 59.399142][ T28] audit: type=1400 audit(1773250114.091:615): avc: denied { setopt } for pid=5697 comm="syz.5.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.431517][ T5692] EXT4-fs (loop3): 1 truncate cleaned up [ 59.437898][ T5692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 59.512864][ T5710] Invalid argument reading file caps for ./file0 [ 59.513482][ T28] audit: type=1400 audit(1773250114.211:616): avc: denied { execute_no_trans } for pid=5709 comm="syz.0.882" path="/175/file0" dev="tmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.520360][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 59.593398][ T5708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 59.623314][ T5708] System zones: 0-1, 3-36 [ 59.633010][ T5708] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.881: bad orphan inode 134217728 [ 59.647326][ T28] audit: type=1400 audit(1773250114.341:617): avc: denied { write } for pid=5718 comm="syz.0.887" name="mcfilter6" dev="proc" ino=4026532948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.678174][ T5708] loop5: lost filesystem error report for type 5 error -117 [ 59.678675][ T5708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.144470][ T5751] netlink: 63 bytes leftover after parsing attributes in process `syz.1.900'. [ 60.194746][ T28] audit: type=1400 audit(1773250114.871:618): avc: denied { mount } for pid=5754 comm="syz.2.902" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.242078][ T3971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.434815][ T5780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.450014][ T5780] EXT4-fs (loop3): 1 truncate cleaned up [ 60.476246][ T28] audit: type=1400 audit(1773250115.171:619): avc: denied { append } for pid=5778 comm="syz.3.912" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.629424][ T28] audit: type=1400 audit(1773250115.321:620): avc: denied { name_bind } for pid=5786 comm="syz.5.914" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.761761][ T28] audit: type=1400 audit(1773250115.461:621): avc: denied { name_bind } for pid=5788 comm="syz.3.915" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 60.844969][ T3301] loop0: p1 p2 p3 < p5 p6 > [ 60.850841][ T3301] loop0: p2 size 16775168 extends beyond EOD, truncated [ 60.859239][ T3301] loop0: p5 start 4294970168 is beyond EOD, truncated [ 60.868951][ T5765] loop0: p1 p2 p3 < p5 p6 > [ 60.874587][ T5765] loop0: p2 size 16775168 extends beyond EOD, truncated [ 60.883117][ T5765] loop0: p5 start 4294970168 is beyond EOD, truncated [ 60.973374][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 60.973391][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 60.994120][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 61.005048][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.020651][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 61.023374][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.032460][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 61.041683][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 61.440395][ T5796] GUP no longer grows the stack in syz.2.917 (5796): 200000004000-20000000a000 (200000002000) [ 61.468092][ T5801] set_capacity_and_notify: 12 callbacks suppressed [ 61.468108][ T5801] loop1: detected capacity change from 0 to 1024 [ 61.478532][ T5796] CPU: 0 UID: 0 PID: 5796 Comm: syz.2.917 Not tainted syzkaller #0 PREEMPT(full) [ 61.478632][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.478651][ T5796] Call Trace: [ 61.478657][ T5796] [ 61.478664][ T5796] __dump_stack+0x1d/0x30 [ 61.478691][ T5796] dump_stack_lvl+0x95/0xd0 [ 61.478715][ T5796] dump_stack+0x15/0x1b [ 61.478736][ T5796] __get_user_pages+0x195b/0x1ea0 [ 61.478802][ T5796] ? __rcu_read_unlock+0x4e/0x70 [ 61.478824][ T5796] get_user_pages_remote+0x1d5/0x6b0 [ 61.478893][ T5796] __access_remote_vm+0x15c/0x580 [ 61.478968][ T5796] access_remote_vm+0x32/0x40 [ 61.478999][ T5796] proc_pid_cmdline_read+0x32b/0x6b0 [ 61.479032][ T5796] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 61.479112][ T5796] vfs_readv+0x432/0x6e0 [ 61.479141][ T5796] __x64_sys_preadv+0xfd/0x1c0 [ 61.479163][ T5796] x64_sys_call+0x2915/0x3020 [ 61.479188][ T5796] do_syscall_64+0x12c/0x370 [ 61.479209][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.479258][ T5796] RIP: 0033:0x7f191812c799 [ 61.479295][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.479345][ T5796] RSP: 002b:00007f1916b87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 61.479365][ T5796] RAX: ffffffffffffffda RBX: 00007f19183a5fa0 RCX: 00007f191812c799 [ 61.479379][ T5796] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 61.479447][ T5796] RBP: 00007f19181c2c99 R08: 00000000fffffff9 R09: 0000000000000000 [ 61.479461][ T5796] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 61.479474][ T5796] R13: 00007f19183a6038 R14: 00007f19183a5fa0 R15: 00007ffe44a77aa8 [ 61.479493][ T5796] [ 61.688836][ T5801] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 61.721597][ T5801] System zones: 0-1, 3-36 [ 61.733520][ T28] audit: type=1400 audit(1773250116.421:622): avc: denied { read } for pid=5818 comm="syz.2.927" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.763670][ T5801] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.916: bad orphan inode 134217728 [ 61.783785][ T5801] loop1: lost filesystem error report for type 5 error -117 [ 62.069280][ T5842] loop5: detected capacity change from 0 to 512 [ 62.126054][ T5842] FAT-fs (loop5): error, corrupted file size (i_pos 51, 9216) [ 62.151971][ T5842] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 62.166568][ T5842] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 62.456642][ T5856] loop5: detected capacity change from 0 to 512 [ 62.501317][ T5856] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.943: Directory hole found for htree index block 0 [ 62.531597][ T5856] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 62.531759][ T5856] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 62.548961][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 62.548980][ C0] EXT4-fs (loop5): initial error at time 1773250117: dx_probe:791: inode 2 [ 62.549022][ C0] EXT4-fs (loop5): last error at time 1773250117: dx_probe:791: inode 2 [ 62.734795][ T5856] EXT4-fs (loop5): shut down requested (0) [ 62.829879][ T5869] loop3: detected capacity change from 0 to 512 [ 62.865622][ T5869] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (47215!=33349) [ 62.888740][ T5871] loop0: detected capacity change from 0 to 4096 [ 62.919030][ T5871] EXT4-fs (loop0): shut down requested (1) [ 62.947861][ T5871] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 62.971299][ T5869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 62.981205][ T5871] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 62.991278][ T5869] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.008792][ T5871] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 63.033158][ T5869] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.948: bad orphan inode 3 [ 63.069504][ T5869] loop3: lost filesystem error report for type 5 error -117 [ 63.069641][ T5869] EXT4-fs (loop3): Remounting filesystem read-only [ 63.077054][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.077094][ C1] EXT4-fs (loop3): initial error at time 1773250117: ext4_orphan_get:1417 [ 63.077123][ C1] EXT4-fs (loop3): last error at time 1773250117: ext4_orphan_get:1417 [ 63.153647][ T5869] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.948: dx entry: limit 0 != root limit 125 [ 63.210137][ T5869] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.948: Corrupt directory, running e2fsck is recommended [ 63.275879][ T5901] loop5: detected capacity change from 0 to 512 [ 63.301174][ T5901] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.325159][ T5901] EXT4-fs (loop5): 1 truncate cleaned up [ 63.700426][ T5922] macvlan0: entered allmulticast mode [ 63.707430][ T5922] veth1_vlan: entered allmulticast mode [ 63.717976][ T5923] loop2: detected capacity change from 0 to 128 [ 63.732492][ T5922] veth1_vlan: left allmulticast mode [ 63.747425][ T5922] macvlan0 (unregistering): left allmulticast mode [ 64.040611][ T5938] loop2: detected capacity change from 0 to 1024 [ 64.085549][ T5938] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.976: inode #1869229157: comm syz.2.976: iget: illegal inode # [ 64.105494][ T5938] EXT4-fs (loop2): Remounting filesystem read-only [ 64.118653][ T5938] EXT4-fs warning (device loop2): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.2.976: cleanup dec ref error -30 [ 64.155233][ T5938] EXT4-fs warning (device loop2): ext4_xattr_block_set:2200: inode #19: comm syz.2.976: dec ref error=-30 [ 64.188119][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 64.197093][ T3399] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.320635][ T5966] loop3: detected capacity change from 0 to 1024 [ 64.409594][ T5971] loop2: detected capacity change from 0 to 512 [ 64.417067][ T5966] EXT4-fs error (device loop3): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.3.988: path /196/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 64.462773][ T5971] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.989: inode has both inline data and extents flags [ 64.495374][ T5971] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.495920][ T5971] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.989: couldn't read orphan inode 15 (err -117) [ 64.505160][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 64.505179][ C0] EXT4-fs (loop2): initial error at time 1773250119: ext4_orphan_get:1391: inode 15 [ 64.505203][ C0] EXT4-fs (loop2): last error at time 1773250119: ext4_orphan_get:1391: inode 15 [ 64.572654][ T5971] loop2: lost filesystem error report for type 5 error -117 [ 64.587474][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 64.587571][ T28] audit: type=1400 audit(1773250119.281:637): avc: denied { getopt } for pid=5970 comm="syz.2.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.781922][ T5983] netlink: 'syz.2.993': attribute type 3 has an invalid length. [ 64.789707][ T28] audit: type=1400 audit(1773250119.481:638): avc: denied { getopt } for pid=5982 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.862204][ T5990] netlink: 'syz.0.997': attribute type 21 has an invalid length. [ 64.881154][ T5990] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.889070][ T5990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.896295][ T5990] IPv6: NLM_F_CREATE should be set when creating new route [ 64.903499][ T5990] IPv6: NLM_F_CREATE should be set when creating new route [ 64.910689][ T5990] IPv6: NLM_F_CREATE should be set when creating new route [ 65.178667][ T6012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 65.186955][ T6012] System zones: 0-1, 3-36 [ 65.196391][ T6012] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1007: bad orphan inode 134217728 [ 65.207299][ T6012] loop1: lost filesystem error report for type 5 error -117 [ 65.222282][ T6009] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.1006: inode #8192: comm syz.5.1006: iget: illegal inode # [ 65.249245][ T6009] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1006: error while reading EA inode 8192 err=-117 [ 65.485049][ T28] audit: type=1326 audit(1773250120.181:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 65.575326][ T28] audit: type=1326 audit(1773250120.231:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 65.635617][ T28] audit: type=1326 audit(1773250120.241:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 65.694296][ T28] audit: type=1326 audit(1773250120.241:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 65.737610][ T6047] iso9660: Unknown parameter 'cmdline' [ 65.745271][ T28] audit: type=1326 audit(1773250120.241:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 65.793128][ T28] audit: type=1326 audit(1773250120.241:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 65.844141][ T28] audit: type=1326 audit(1773250120.241:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 65.894151][ T28] audit: type=1326 audit(1773250120.241:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a4b0c799 code=0x7ffc0000 [ 66.025982][ T6063] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.038590][ T6063] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.056347][ T6063] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 66.067917][ T6063] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1027: attempt to clear invalid blocks 2 len 1 [ 66.080861][ T6063] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.081137][ T6063] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 66.091102][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 66.110940][ C0] EXT4-fs (loop0): initial error at time 1773250120: ext4_clear_blocks:876: inode 13 [ 66.120420][ C0] EXT4-fs (loop0): last error at time 1773250120: ext4_mb_generate_buddy:1315 [ 66.143909][ T6063] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1027: invalid indirect mapped block 1819239214 (level 0) [ 66.172942][ T6063] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.173115][ T6063] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1027: invalid indirect mapped block 1819239214 (level 1) [ 66.208576][ T6063] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.211766][ T6069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 66.229222][ T6063] EXT4-fs (loop0): 1 truncate cleaned up [ 66.239338][ T6063] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 66.249056][ T6069] System zones: 0-1, 3-36 [ 66.265861][ T6069] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1030: bad orphan inode 134217728 [ 66.265889][ T6074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.267341][ T6074] EXT4-fs (loop2): 1 truncate cleaned up [ 66.301568][ T6069] loop3: lost filesystem error report for type 5 error -117 [ 66.392820][ T6082] EXT4-fs: quotafile must be on filesystem root [ 66.446806][ T6087] pim6reg1: entered promiscuous mode [ 66.462059][ T6087] pim6reg1: entered allmulticast mode [ 66.676887][ T6103] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.735261][ T6107] set_capacity_and_notify: 7 callbacks suppressed [ 66.735276][ T6107] loop1: detected capacity change from 0 to 128 [ 66.795821][ T6107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1046'. [ 66.840785][ T6114] loop2: detected capacity change from 0 to 256 [ 67.131702][ T6132] loop3: detected capacity change from 0 to 256 [ 67.152465][ T6134] loop2: detected capacity change from 0 to 1024 [ 67.189621][ T6134] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 67.203392][ T6134] System zones: 0-1, 3-36 [ 67.236270][ T6134] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1066: bad orphan inode 134217728 [ 67.265046][ T6134] loop2: lost filesystem error report for type 5 error -117 [ 67.271122][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 67.285123][ C1] EXT4-fs (loop2): initial error at time 1773250121: ext4_orphan_get:1417 [ 67.293678][ C1] EXT4-fs (loop2): last error at time 1773250121: ext4_orphan_get:1417 [ 67.687661][ T6172] loop0: detected capacity change from 0 to 512 [ 67.705046][ T6172] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.717391][ T6172] EXT4-fs (loop0): 1 truncate cleaned up [ 67.836822][ T6180] bond0: entered promiscuous mode [ 67.862183][ T6180] bond_slave_0: entered promiscuous mode [ 67.891295][ T6180] bond_slave_1: entered promiscuous mode [ 67.898859][ T6180] batadv0: entered promiscuous mode [ 67.926019][ T6180] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 67.959987][ T6180] bond0: left promiscuous mode [ 67.965129][ T6180] bond_slave_0: left promiscuous mode [ 67.981355][ T6180] bond_slave_1: left promiscuous mode [ 67.987349][ T6180] batadv0: left promiscuous mode [ 68.103126][ T6202] loop2: detected capacity change from 0 to 1024 [ 68.144090][ T6202] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 68.169741][ T6202] System zones: 0-1, 3-36 [ 68.181940][ T6202] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1086: bad orphan inode 134217728 [ 68.205947][ T6202] loop2: lost filesystem error report for type 5 error -117 [ 68.206645][ T6202] EXT4-fs mount: 32 callbacks suppressed [ 68.206659][ T6202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.635547][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.699987][ T6236] loop2: detected capacity change from 0 to 8192 [ 68.872516][ T6249] loop3: detected capacity change from 0 to 512 [ 68.880886][ T6249] EXT4-fs: Ignoring removed nobh option [ 68.902547][ T6249] ------------[ cut here ]------------ [ 68.908088][ T6249] EA inode 11 i_nlink=1026 [ 68.908111][ T6249] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.1105/6249 [ 68.923380][ T6249] Modules linked in: [ 68.927325][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.3.1105 Not tainted syzkaller #0 PREEMPT(full) [ 68.936673][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.946755][ T6249] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 68.953385][ T6249] Code: a4 47 99 ff 4c 8d 2d 5d c0 5d 05 49 8d 7e 40 e8 44 e1 b5 ff 49 8b 6e 40 4c 89 e7 e8 78 dc b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 59 dd 03 66 66 66 66 66 66 2e [ 68.973072][ T6249] RSP: 0018:ffffc900080535a8 EFLAGS: 00010246 [ 68.979144][ T6249] RAX: ffff8881048f6f38 RBX: ffff88811ac51788 RCX: ffffffff81c00598 [ 68.987153][ T6249] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc5e0 [ 68.995238][ T6249] RBP: 000000000000000b R08: 000188811ac5173b R09: 0000000000000000 [ 69.003288][ T6249] R10: ffffc900080534d8 R11: 0001c900080534d8 R12: ffff88811ac51738 [ 69.011391][ T6249] R13: ffffffff871dc5e0 R14: ffff88811ac516f0 R15: 0000000000000001 [ 69.019418][ T6249] FS: 00007fe1a355f6c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 69.028522][ T6249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.035189][ T6249] CR2: 00007f9add8ac000 CR3: 0000000122086000 CR4: 00000000003506f0 [ 69.043252][ T6249] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.051301][ T6249] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 69.055512][ T6255] netlink: 'syz.0.1109': attribute type 10 has an invalid length. [ 69.059433][ T6249] Call Trace: [ 69.059442][ T6249] [ 69.059452][ T6249] ext4_xattr_set_entry+0x77c/0x1010 [ 69.059490][ T6249] ext4_xattr_ibody_set+0x184/0x3c0 [ 69.080507][ T6255] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1109'. [ 69.084479][ T6249] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 69.099519][ T6249] __ext4_expand_extra_isize+0x246/0x280 [ 69.105222][ T6249] __ext4_mark_inode_dirty+0x29b/0x400 [ 69.110691][ T6249] ext4_evict_inode+0x7c3/0xd60 [ 69.115618][ T6249] ? __pfx_ext4_evict_inode+0x10/0x10 [ 69.121002][ T6249] evict+0x2af/0x510 [ 69.125010][ T6249] ? __dquot_initialize+0x146/0x7c0 [ 69.130240][ T6249] iput+0x41a/0x580 [ 69.134158][ T6249] ext4_process_orphan+0x1a9/0x1c0 [ 69.139269][ T6249] ext4_orphan_cleanup+0x6a8/0xa00 [ 69.144467][ T6249] ext4_fill_super+0x3408/0x37c0 [ 69.149442][ T6249] ? set_blocksize+0x14c/0x270 [ 69.154255][ T6249] ? setup_bdev_super+0x30e/0x370 [ 69.159369][ T6249] ? __pfx_ext4_fill_super+0x10/0x10 [ 69.164735][ T6249] get_tree_bdev_flags+0x291/0x300 [ 69.169910][ T6249] ? __pfx_ext4_fill_super+0x10/0x10 [ 69.175252][ T6249] get_tree_bdev+0x1f/0x30 [ 69.179738][ T6249] ext4_get_tree+0x1c/0x30 [ 69.184172][ T6249] vfs_get_tree+0x57/0x1d0 [ 69.188647][ T6249] do_new_mount+0x288/0x8d0 [ 69.193707][ T6249] path_mount+0x4d0/0xbc0 [ 69.198068][ T6249] __se_sys_mount+0x28c/0x2e0 [ 69.202768][ T6249] __x64_sys_mount+0x67/0x80 [ 69.207451][ T6249] x64_sys_call+0x2d61/0x3020 [ 69.212179][ T6249] do_syscall_64+0x12c/0x370 [ 69.216776][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.222872][ T6249] RIP: 0033:0x7fe1a4b0da0a [ 69.227357][ T6249] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.247004][ T6249] RSP: 002b:00007fe1a355ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.255524][ T6249] RAX: ffffffffffffffda RBX: 00007fe1a355eee0 RCX: 00007fe1a4b0da0a [ 69.263557][ T6249] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fe1a355eea0 [ 69.271562][ T6249] RBP: 0000200000000180 R08: 00007fe1a355eee0 R09: 0000000000800718 [ 69.279574][ T6249] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 69.287642][ T6249] R13: 00007fe1a355eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 69.295723][ T6249] [ 69.298737][ T6249] ---[ end trace 0000000000000000 ]--- [ 69.309375][ T6249] EXT4-fs (loop3): 1 orphan inode deleted [ 69.315950][ T6249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.433057][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.456464][ T6290] loop0: detected capacity change from 0 to 128 [ 69.471709][ T6290] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.700942][ T6315] loop5: detected capacity change from 0 to 1024 [ 69.754921][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 69.754935][ T28] audit: type=1400 audit(1773250124.451:702): avc: denied { mount } for pid=6323 comm="syz.2.1138" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.811358][ T6315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.833325][ T6315] EXT4-fs (loop5): shut down requested (1) [ 69.930679][ T3971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.956344][ T28] audit: type=1400 audit(1773250124.641:703): avc: denied { bind } for pid=6338 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.981144][ T28] audit: type=1400 audit(1773250124.641:704): avc: denied { setopt } for pid=6338 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.004455][ T6344] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 70.032723][ T6344] System zones: 0-1, 3-36 [ 70.064671][ T28] audit: type=1400 audit(1773250124.751:705): avc: denied { getopt } for pid=6349 comm="syz.0.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.091189][ T6344] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1148: bad orphan inode 134217728 [ 70.151134][ T6344] loop2: lost filesystem error report for type 5 error -117 [ 70.155382][ T6344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.198479][ T6359] veth0: entered promiscuous mode [ 70.206317][ T6358] veth0: left promiscuous mode [ 70.805157][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.967273][ T6378] tmpfs: Cannot disable swap on remount [ 70.968458][ T28] audit: type=1400 audit(1773250125.661:706): avc: denied { remount } for pid=6377 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.098490][ T6389] netlink: 16394 bytes leftover after parsing attributes in process `syz.1.1164'. [ 71.288842][ T28] audit: type=1326 audit(1773250125.981:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.5.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66e7c4c799 code=0x7ffc0000 [ 71.383152][ T28] audit: type=1326 audit(1773250126.011:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191812c799 code=0x7ffc0000 [ 71.411261][ T28] audit: type=1326 audit(1773250126.021:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191812c799 code=0x7ffc0000 [ 71.458496][ T28] audit: type=1326 audit(1773250126.021:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191812c799 code=0x7ffc0000 [ 71.482962][ T28] audit: type=1326 audit(1773250126.021:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f191812c799 code=0x7ffc0000 [ 71.759029][ T6449] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1193'. [ 71.967959][ T6478] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1204'. [ 72.403247][ T6511] set_capacity_and_notify: 1 callbacks suppressed [ 72.403292][ T6511] loop5: detected capacity change from 0 to 512 [ 72.501990][ T6511] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 72.526729][ T6511] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.556850][ T6511] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 72.602686][ T6511] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 72.611651][ T6511] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1220: bg 0: block 64: padding at end of block bitmap is not set [ 72.611682][ T6511] loop5: lost filesystem error report for type 5 error -117 [ 72.614094][ T6511] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 72.614113][ T6511] loop5: lost filesystem error report for type 5 error -117 [ 72.616756][ T6511] EXT4-fs (loop5): 1 truncate cleaned up [ 72.617175][ T6511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.657007][ T3971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.061359][ T6553] loop0: detected capacity change from 0 to 1024 [ 73.062874][ T6553] EXT4-fs: Ignoring removed bh option [ 73.117527][ T6551] loop5: detected capacity change from 0 to 8192 [ 73.119491][ T6551] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.172897][ T6553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.199916][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.199941][ T6551] FAT-fs (loop5): Filesystem has been set read-only [ 73.200026][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.200046][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.200067][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.200089][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.200138][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.200160][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.200187][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.200231][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.286963][ T6551] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.360115][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.614403][ T6591] vhci_hcd vhci_hcd.3: default hub control req: 6016 v000e i0006 l0 [ 73.887807][ T6627] syzkaller1: entered promiscuous mode [ 73.905603][ T6627] syzkaller1: entered allmulticast mode [ 74.183357][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 74.201348][ T6654] chnl_net:caif_netlink_parms(): no params data found [ 74.217297][ T6655] loop3: detected capacity change from 0 to 128 [ 74.480656][ T6673] syzkaller1: entered promiscuous mode [ 74.495870][ T6673] syzkaller1: entered allmulticast mode [ 74.521659][ T6677] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 74.560490][ T6679] loop3: detected capacity change from 0 to 512 [ 74.622589][ T6679] EXT4-fs (loop3): 1 truncate cleaned up [ 74.628685][ T6679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.699532][ T6679] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1280: invalid indirect mapped block 4294901760 (level 0) [ 74.739038][ T6679] EXT4-fs (loop3): Remounting filesystem read-only [ 74.801161][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.896874][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 74.896888][ T28] audit: type=1400 audit(1773250129.591:872): avc: denied { wake_alarm } for pid=6703 comm="syz.0.1291" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.964008][ T28] audit: type=1400 audit(1773250129.661:873): avc: denied { read } for pid=6709 comm="syz.3.1293" path="socket:[15529]" dev="sockfs" ino=15529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.032217][ T6719] syzkaller1: entered promiscuous mode [ 75.038047][ T28] audit: type=1400 audit(1773250129.731:874): avc: denied { ioctl } for pid=6716 comm="syz.1.1295" path="socket:[15537]" dev="sockfs" ino=15537 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.051124][ T6719] syzkaller1: entered allmulticast mode [ 75.063405][ T28] audit: type=1326 audit(1773250129.731:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 75.092428][ T28] audit: type=1326 audit(1773250129.731:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 75.115950][ T28] audit: type=1326 audit(1773250129.731:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 75.170453][ T6730] loop3: detected capacity change from 0 to 2 [ 75.180480][ T28] audit: type=1326 audit(1773250129.731:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 75.181419][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.273873][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.282709][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.302279][ T28] audit: type=1326 audit(1773250129.731:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 75.322154][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.345690][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'. [ 75.356697][ T6744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1309'. [ 75.364095][ T28] audit: type=1326 audit(1773250129.731:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 75.380458][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'. [ 75.405387][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.413630][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.421906][ T6744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1309'. [ 75.431389][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.438670][ T28] audit: type=1326 audit(1773250129.731:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 75.449523][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.473030][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.483783][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1315'. [ 75.501239][ T3301] Buffer I/O error on dev loop3, logical block 0, async page read [ 75.562460][ T6764] netlink: 'syz.0.1318': attribute type 12 has an invalid length. [ 75.578669][ T6764] netlink: 'syz.0.1318': attribute type 29 has an invalid length. [ 75.589200][ T6764] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1318'. [ 75.598578][ T6764] netlink: 'syz.0.1318': attribute type 2 has an invalid length. [ 75.637660][ T6769] IPv6: NLM_F_REPLACE set, but no existing node found! [ 75.649222][ T6764] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1318'. [ 75.795209][ T6791] loop0: detected capacity change from 0 to 512 [ 75.833411][ T6794] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 75.839940][ T6794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.851983][ T6791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.878402][ T6794] vhci_hcd vhci_hcd.0: Device attached [ 75.935919][ T6794] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 75.942500][ T6794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.960287][ T6794] vhci_hcd vhci_hcd.0: Device attached [ 75.965993][ T6800] loop1: detected capacity change from 0 to 8192 [ 75.975641][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.990513][ T6794] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 75.997077][ T6794] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.010816][ T6794] vhci_hcd vhci_hcd.0: Device attached [ 76.024645][ T6794] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 76.048151][ T6800] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.049706][ T6794] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 76.065158][ T6794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.094058][ T6812] loop0: detected capacity change from 0 to 764 [ 76.105178][ T6794] vhci_hcd vhci_hcd.0: Device attached [ 76.105700][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.117326][ T6809] vhci_hcd: connection closed [ 76.119618][ T6795] vhci_hcd: connection closed [ 76.119630][ T6805] vhci_hcd: connection closed [ 76.125435][ T40] vhci_hcd vhci_hcd.3: stop threads [ 76.129173][ T6803] vhci_hcd: connection closed [ 76.146196][ T6812] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 76.149337][ T40] vhci_hcd vhci_hcd.3: release socket [ 76.165970][ T6800] FAT-fs (loop1): Filesystem has been set read-only [ 76.173312][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.178975][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 76.182149][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.196582][ T3392] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 76.204024][ T6796] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 76.204046][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.204066][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.204149][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.218012][ T40] vhci_hcd vhci_hcd.3: stop threads [ 76.239651][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.254499][ T40] vhci_hcd vhci_hcd.3: release socket [ 76.260568][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 76.268461][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.277455][ T40] vhci_hcd vhci_hcd.3: stop threads [ 76.277866][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.284015][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1336'. [ 76.299237][ T40] vhci_hcd vhci_hcd.3: release socket [ 76.306493][ T6800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 76.317003][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 76.385762][ T6823] tipc: Started in network mode [ 76.390710][ T6823] tipc: Node identity ff25, cluster identity 4711 [ 76.399536][ T6823] tipc: Enabling of bearer rejected, failed to enable media [ 76.489089][ T40] vhci_hcd vhci_hcd.3: stop threads [ 76.495191][ T40] vhci_hcd vhci_hcd.3: release socket [ 76.500648][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 76.757198][ T6842] loop3: detected capacity change from 0 to 2048 [ 76.805743][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.841990][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.930232][ T6858] bond1: entered promiscuous mode [ 77.007239][ T6870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.023041][ T6870] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1359: iget: bad i_size value: 38620345925642 [ 77.036474][ T6870] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.036673][ T6870] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1359: couldn't read orphan inode 15 (err -117) [ 77.045923][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 77.045942][ C1] EXT4-fs (loop3): initial error at time 1773250131: ext4_orphan_get:1391: inode 15 [ 77.045969][ C1] EXT4-fs (loop3): last error at time 1773250131: ext4_orphan_get:1391: inode 15 [ 77.099371][ T6870] loop3: lost filesystem error report for type 5 error -117 [ 77.100128][ T6870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.134852][ T6873] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.156674][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.165887][ T6873] FAT-fs (loop2): Filesystem has been set read-only [ 77.173061][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.184246][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.193979][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.203581][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.212501][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.221549][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.230412][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.239382][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.248538][ T6873] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.278387][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:1: bg 0: block 5: invalid block bitmap [ 77.294025][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 77.306360][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.306360][ T30] [ 77.334957][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 77.341258][ T30] EXT4-fs (loop3): Free/Dirty block details [ 77.348040][ T30] EXT4-fs (loop3): free_blocks=0 [ 77.353301][ T30] EXT4-fs (loop3): dirty_blocks=1 [ 77.359195][ T30] EXT4-fs (loop3): Block reservation details [ 77.365603][ T30] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 77.372643][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.450960][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.491227][ T6892] __nla_validate_parse: 2 callbacks suppressed [ 77.491243][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1366'. [ 77.718009][ T6908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1383'. [ 77.750044][ T6912] pim6reg1: entered promiscuous mode [ 77.779983][ T6912] pim6reg1: entered allmulticast mode [ 77.836828][ T6920] set_capacity_and_notify: 2 callbacks suppressed [ 77.836843][ T6920] loop3: detected capacity change from 0 to 512 [ 77.869076][ T6920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.917326][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.911338][ T6969] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.920915][ T6969] SELinux: failed to load policy [ 79.112596][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.174240][ T6987] loop5: detected capacity change from 0 to 128 [ 79.254914][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'. [ 79.272489][ T6994] bond1: Invalid ad_actor_system MAC address. [ 79.272506][ T6994] bond1: option ad_actor_system: invalid value (4294967295) [ 79.280231][ T6994] bond1 (unregistering): Released all slaves [ 79.598287][ T6987] syz.5.1409: attempt to access beyond end of device [ 79.598287][ T6987] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 79.712126][ T7003] sg_write: data in/out 25820/69 bytes for SCSI command 0x0-- guessing data in; [ 79.712126][ T7003] program syz.0.1415 not setting count and/or reply_len properly [ 79.943702][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 79.943803][ T28] audit: type=1326 audit(1773250134.641:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 79.944002][ T28] audit: type=1326 audit(1773250134.641:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 79.944144][ T28] audit: type=1326 audit(1773250134.641:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 79.944309][ T28] audit: type=1326 audit(1773250134.641:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7008 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 80.115342][ T28] audit: type=1400 audit(1773250134.811:958): avc: denied { read write } for pid=7016 comm="syz.2.1422" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.139521][ T28] audit: type=1400 audit(1773250134.811:959): avc: denied { open } for pid=7016 comm="syz.2.1422" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.208951][ T28] audit: type=1326 audit(1773250134.901:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 80.235899][ T28] audit: type=1326 audit(1773250134.901:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 80.275393][ T28] audit: type=1326 audit(1773250134.901:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 80.309185][ T28] audit: type=1326 audit(1773250134.901:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e8e1c799 code=0x7ffc0000 [ 80.436606][ T7038] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7038 comm=syz.3.1430 [ 80.532741][ T7043] loop3: detected capacity change from 0 to 1024 [ 80.558315][ T7043] EXT4-fs: Ignoring removed orlov option [ 80.593383][ T7043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.630774][ T7043] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 80.755981][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.251165][ T3392] usb 7-1: enqueue for inactive port 0 [ 81.256664][ T3392] usb 7-1: enqueue for inactive port 0 [ 81.331176][ T3392] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 82.753113][ T7055] loop3: detected capacity change from 0 to 8192 [ 82.772731][ T7055] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.786357][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.811821][ T7055] FAT-fs (loop3): Filesystem has been set read-only [ 82.822119][ T7065] tmpfs: Bad value for 'mpol' [ 82.838783][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.861801][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.881470][ T7068] loop5: detected capacity change from 0 to 7 [ 82.891158][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.900330][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 82.909917][ C0] buffer_io_error: 9 callbacks suppressed [ 82.909928][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 82.910131][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.953613][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 82.976538][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.000875][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.008720][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.019274][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.027595][ T3302] loop5: unable to read partition table [ 83.035799][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.045430][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.055025][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.063245][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.070372][ T7055] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 83.072848][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.089961][ T7068] loop5: unable to read partition table [ 83.112953][ T7068] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 83.113463][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.133959][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.151112][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.160714][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.169344][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.178942][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.192364][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.201960][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.210039][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 83.219628][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 83.246325][ T7079] net_ratelimit: 67 callbacks suppressed [ 83.246337][ T7079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.460490][ T7094] loop0: detected capacity change from 0 to 164 [ 83.581221][ T7101] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 83.587795][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.611402][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 83.640039][ T7101] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 83.646572][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.662477][ T9] Process accounting resumed [ 83.664485][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 83.688338][ T7119] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 83.696528][ T7101] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 83.703058][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 83.733216][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 83.744611][ T7127] loop3: detected capacity change from 0 to 512 [ 83.752117][ T7130] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.777210][ T7101] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 83.783830][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.793993][ T7127] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1466: inode has both inline data and extents flags [ 83.807333][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 83.814317][ T7127] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.814444][ T7127] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1466: couldn't read orphan inode 15 (err -117) [ 83.823647][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 83.823684][ C0] EXT4-fs (loop3): initial error at time 1773250138: ext4_orphan_get:1391: inode 15 [ 83.823723][ C0] EXT4-fs (loop3): last error at time 1773250138: ext4_orphan_get:1391: inode 15 [ 83.860794][ T4381] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 83.868927][ T7120] vhci_hcd: connection closed [ 83.869019][ T7110] vhci_hcd: connection closed [ 83.869066][ T7132] vhci_hcd: connection closed [ 83.878732][ T7102] vhci_hcd: connection closed [ 83.885589][ T236] vhci_hcd vhci_hcd.1: stop threads [ 83.889548][ T7127] loop3: lost filesystem error report for type 5 error -117 [ 83.890371][ T7103] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 83.909662][ T236] vhci_hcd vhci_hcd.1: release socket [ 83.915415][ T236] vhci_hcd vhci_hcd.1: disconnect device [ 83.922178][ T7127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.933037][ T236] vhci_hcd vhci_hcd.1: stop threads [ 83.939516][ T236] vhci_hcd vhci_hcd.1: release socket [ 83.948443][ T236] vhci_hcd vhci_hcd.1: disconnect device [ 83.954366][ T236] vhci_hcd vhci_hcd.1: stop threads [ 83.959639][ T236] vhci_hcd vhci_hcd.1: release socket [ 83.965133][ T236] vhci_hcd vhci_hcd.1: disconnect device [ 83.970910][ T236] vhci_hcd vhci_hcd.1: stop threads [ 83.976297][ T236] vhci_hcd vhci_hcd.1: release socket [ 83.981851][ T236] vhci_hcd vhci_hcd.1: disconnect device [ 84.003802][ T7137] loop0: detected capacity change from 0 to 4096 [ 84.027746][ T7137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.043731][ T6890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.090899][ T7143] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.149440][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.239624][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.296974][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.334327][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.394124][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.447705][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 84.554433][ T12] bridge_slave_1: left allmulticast mode [ 84.573607][ T12] bridge_slave_1: left promiscuous mode [ 84.593888][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.616480][ T12] bridge_slave_0: left allmulticast mode [ 84.628371][ T12] bridge_slave_0: left promiscuous mode [ 84.640812][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.835899][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.846035][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.857629][ T12] bond0 (unregistering): Released all slaves [ 84.865457][ T12] bond1 (unregistering): Released all slaves [ 84.877105][ T7182] loop1: detected capacity change from 0 to 128 [ 84.885619][ T12] bond2 (unregistering): Released all slaves [ 84.899969][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.915275][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.923346][ T7157] bridge_slave_0: entered allmulticast mode [ 84.930050][ T7157] bridge_slave_0: entered promiscuous mode [ 84.942225][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.950111][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.958113][ T7157] bridge_slave_1: entered allmulticast mode [ 84.965119][ T7157] bridge_slave_1: entered promiscuous mode [ 84.975140][ T12] hsr_slave_0: left promiscuous mode [ 84.980976][ T12] hsr_slave_1: left promiscuous mode [ 84.987789][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.012299][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.026580][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.034918][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.087039][ T12] veth1_macvtap: left promiscuous mode [ 85.102176][ T12] veth0_macvtap: left promiscuous mode [ 85.115541][ T12] veth1_vlan: left promiscuous mode [ 85.127063][ T12] veth0_vlan: left promiscuous mode [ 85.142510][ T7182] syz.1.1481: attempt to access beyond end of device [ 85.142510][ T7182] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 85.171210][ T7182] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 85.285742][ T12] team0 (unregistering): Port device team_slave_1 removed [ 85.304925][ T12] team0 (unregistering): Port device team_slave_0 removed [ 85.361004][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.371659][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 85.415295][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.486332][ T7202] openvswitch: netlink: Missing key (keys=40, expected=100) [ 85.513629][ T7206] loop2: detected capacity change from 0 to 128 [ 85.529797][ T7206] FAT-fs (loop2): error, clusters badly computed (94 != 1) [ 85.551037][ T7209] FAT-fs (loop2): error, clusters badly computed (97 != 96) [ 85.551705][ T7157] team0: Port device team_slave_0 added [ 85.563877][ T7206] FAT-fs (loop2): Filesystem has been set read-only [ 85.589330][ T7209] FAT-fs (loop2): error, clusters badly computed (98 != 97) [ 85.593908][ T7157] team0: Port device team_slave_1 added [ 85.605993][ T7215] loop1: detected capacity change from 0 to 1024 [ 85.619563][ T7206] FAT-fs (loop2): error, clusters badly computed (97 != 2) [ 85.636443][ T7209] FAT-fs (loop2): error, clusters badly computed (100 != 98) [ 85.650650][ T7215] EXT4-fs: Ignoring removed orlov option [ 85.660252][ T7209] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 58) [ 85.677782][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.710865][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 85.710879][ T28] audit: type=1400 audit(1773250140.401:981): avc: denied { append } for pid=7227 comm="syz.2.1496" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.712160][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.717429][ T28] audit: type=1400 audit(1773250140.401:982): avc: denied { open } for pid=7227 comm="syz.2.1496" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.742622][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.812064][ T23] kernel read not supported for file /#>b@ (pid: 23 comm: kworker/1:0) [ 85.823718][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.854852][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.877095][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.910070][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.961716][ T7184] syz.5.1482 (7184) used greatest stack depth: 8736 bytes left [ 85.985103][ T7247] xt_hashlimit: size too large, truncated to 1048576 [ 86.006672][ T7157] hsr_slave_0: entered promiscuous mode [ 86.017030][ T7157] hsr_slave_1: entered promiscuous mode [ 86.023690][ T7157] debugfs: 'hsr0' already exists in 'hsr' [ 86.023858][ T7249] loop5: detected capacity change from 0 to 7 [ 86.029488][ T7157] Cannot create hsr debugfs directory [ 86.056942][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.061538][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 86.081192][ T7249] loop5: unable to read partition table [ 86.086848][ T7249] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 86.141407][ T28] audit: type=1400 audit(1773250140.831:983): avc: denied { write } for pid=7259 comm="syz.1.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.363013][ T7157] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.373578][ T7282] syzkaller1: entered promiscuous mode [ 86.379166][ T7282] syzkaller1: entered allmulticast mode [ 86.394705][ T7157] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.404520][ T7157] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.413619][ T7157] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.473461][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1509'. [ 86.487245][ T7297] bond0: ARP target 8.4.0.0 is already present [ 86.513909][ T7297] bond0: option arp_ip_target: invalid value (1032) [ 86.528619][ T28] audit: type=1400 audit(1773250141.221:984): avc: denied { write } for pid=7304 comm="syz.1.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.577370][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.600146][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.623164][ T236] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.630362][ T236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.677399][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.684628][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.702808][ T28] audit: type=1400 audit(1773250141.401:985): avc: denied { egress } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 86.712827][ T7157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.737508][ T7157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.781440][ T28] audit: type=1400 audit(1773250141.401:986): avc: denied { sendto } for pid=10 comm="kworker/0:1" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 86.828353][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.920974][ T28] audit: type=1400 audit(1773250141.611:987): avc: denied { create } for pid=7335 comm="syz.5.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.026355][ T28] audit: type=1400 audit(1773250141.711:988): avc: denied { write } for pid=7335 comm="syz.5.1517" path="socket:[17779]" dev="sockfs" ino=17779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.081689][ T7157] veth0_vlan: entered promiscuous mode [ 87.097805][ T7157] veth1_vlan: entered promiscuous mode [ 87.120308][ T7358] loop2: detected capacity change from 0 to 8192 [ 87.121735][ T7157] veth0_macvtap: entered promiscuous mode [ 87.145864][ T7157] veth1_macvtap: entered promiscuous mode [ 87.151729][ T7358] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.156768][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.181948][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.205607][ T236] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.214774][ T236] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.225784][ T236] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.235200][ T236] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.252289][ T28] audit: type=1400 audit(1773250141.951:989): avc: denied { mounton } for pid=7157 comm="syz-executor" path="/root/syzkaller.OCCL7Q/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 87.276950][ T28] audit: type=1400 audit(1773250141.951:990): avc: denied { mount } for pid=7157 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.320227][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 87.323411][ T7371] loop6: detected capacity change from 0 to 512 [ 87.332084][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1531'. [ 87.356751][ T7371] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.364986][ T7374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1531'. [ 87.373572][ T7371] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1475: invalid indirect mapped block 9 (level 0) [ 87.398958][ T7371] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.400879][ T7371] EXT4-fs (loop6): 1 truncate cleaned up [ 87.410048][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 87.410079][ C0] EXT4-fs (loop6): initial error at time 1773250142: ext4_free_branches:1023: inode 11 [ 87.410108][ C0] EXT4-fs (loop6): last error at time 1773250142: ext4_free_branches:1023: inode 11 [ 87.443369][ T7371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.481741][ T7157] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.576443][ T7390] gre0: entered promiscuous mode [ 87.588953][ T7390] gre0: entered allmulticast mode [ 87.955634][ T7410] syz.2.1536: attempt to access beyond end of device [ 87.955634][ T7410] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 87.984281][ T7410] buffer_io_error: 12 callbacks suppressed [ 87.984296][ T7410] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 88.001256][ T7420] set_capacity_and_notify: 2 callbacks suppressed [ 88.001271][ T7420] loop6: detected capacity change from 0 to 8192 [ 88.020571][ T7420] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.073152][ T7431] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1548'. [ 88.238603][ T7442] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.431455][ T7454] loop6: detected capacity change from 0 to 128 [ 88.517483][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1558'. [ 88.570138][ T7457] netlink: 'syz.6.1558': attribute type 29 has an invalid length. [ 88.594250][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1558'. [ 88.706780][ T7476] loop1: detected capacity change from 0 to 512 [ 88.719461][ T7476] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1567: invalid block [ 88.732732][ T7476] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.732861][ T7476] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1567: invalid indirect mapped block 4294967295 (level 1) [ 88.742137][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 88.742169][ C0] EXT4-fs (loop1): initial error at time 1773250143: ext4_get_branch:178: inode 11: block 4294967295 [ 88.742203][ C0] EXT4-fs (loop1): last error at time 1773250143: ext4_get_branch:178: inode 11: block 4294967295 [ 88.787375][ T7476] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.788689][ T7476] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1567: invalid indirect mapped block 4294967295 (level 1) [ 88.809995][ T7481] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.812684][ T7476] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.821395][ T7476] EXT4-fs (loop1): 2 truncates cleaned up [ 88.836782][ T7476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.865442][ T7476] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.883790][ T7485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7485 comm=syz.6.1570 [ 88.931147][ T4381] usb 3-1: enqueue for inactive port 0 [ 88.936686][ T4381] usb 3-1: enqueue for inactive port 0 [ 88.945674][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.011493][ T4381] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 89.045357][ T5182] syz_tun (unregistering): left allmulticast mode [ 89.276883][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.287451][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.343090][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.353377][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.403590][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.413967][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.463266][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.473668][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.529087][ T12] bridge_slave_1: left allmulticast mode [ 89.534940][ T12] bridge_slave_1: left promiscuous mode [ 89.540528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.548392][ T12] bridge_slave_0: left allmulticast mode [ 89.554186][ T12] bridge_slave_0: left promiscuous mode [ 89.559815][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.614681][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.624478][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.633764][ T12] bond0 (unregistering): Released all slaves [ 89.640918][ T12] bond1 (unregistering): Released all slaves [ 89.675088][ T12] hsr_slave_0: left promiscuous mode [ 89.680860][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.688465][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.699805][ T12] veth1_vlan: left promiscuous mode [ 89.705265][ T12] veth0_vlan: left promiscuous mode [ 89.936631][ T12] IPVS: stop unused estimator thread 0... [ 90.074492][ T7567] loop2: detected capacity change from 0 to 4096 [ 90.112274][ T7567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.210167][ T7567] EXT4-fs (loop2): shut down requested (1) [ 90.269566][ T7567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.304359][ T7567] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 90.323825][ T7557] chnl_net:caif_netlink_parms(): no params data found [ 90.340285][ T7566] loop0: detected capacity change from 0 to 4096 [ 90.362278][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.375256][ T7566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.383130][ T7594] loop6: detected capacity change from 0 to 128 [ 90.477488][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.477550][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.493678][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.500825][ T7557] bridge_slave_0: entered allmulticast mode [ 90.507530][ T7557] bridge_slave_0: entered promiscuous mode [ 90.514207][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.521366][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.530595][ T7557] bridge_slave_1: entered allmulticast mode [ 90.537528][ T7557] bridge_slave_1: entered promiscuous mode [ 90.565538][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.575026][ T7603] loop2: detected capacity change from 0 to 128 [ 90.581456][ T7602] loop0: detected capacity change from 0 to 8192 [ 90.592542][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.603797][ T7602] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.637675][ T7557] team0: Port device team_slave_0 added [ 90.654202][ T7557] team0: Port device team_slave_1 added [ 90.693737][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.694518][ T7594] syz.6.1584: attempt to access beyond end of device [ 90.694518][ T7594] loop6: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 90.714623][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.742527][ T7594] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 90.792333][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.820173][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.837342][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.881866][ T7618] loop0: detected capacity change from 0 to 512 [ 90.904416][ T7618] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 90.933717][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.950927][ T7618] EXT4-fs (loop0): 1 truncate cleaned up [ 90.967326][ T7618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.973846][ T7557] hsr_slave_0: entered promiscuous mode [ 90.988073][ T7557] hsr_slave_1: entered promiscuous mode [ 91.013859][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 91.013872][ T28] audit: type=1400 audit(1773250145.711:1026): avc: denied { create } for pid=7615 comm="syz.0.1597" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 91.052567][ T23] kernel write not supported for file /vcsu (pid: 23 comm: kworker/1:0) [ 91.095255][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.117041][ T28] audit: type=1400 audit(1773250145.811:1027): avc: denied { listen } for pid=7636 comm="syz.2.1606" lport=47167 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.156226][ T28] audit: type=1400 audit(1773250145.811:1028): avc: denied { accept } for pid=7636 comm="syz.2.1606" lport=47167 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.232747][ T28] audit: type=1400 audit(1773250145.811:1029): avc: denied { setopt } for pid=7636 comm="syz.2.1606" lport=47167 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.249031][ T7650] loop0: detected capacity change from 0 to 128 [ 91.472329][ T7650] syz.0.1611: attempt to access beyond end of device [ 91.472329][ T7650] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 91.495209][ T7650] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 91.518694][ T28] audit: type=1400 audit(1773250146.211:1030): avc: denied { mounton } for pid=7664 comm="syz.2.1615" path="/331/bus/file0" dev="loop2" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 91.656189][ T7557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.676793][ T7557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.698727][ T7557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.713079][ T7557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.744405][ T28] audit: type=1400 audit(1773250146.441:1031): avc: denied { write } for pid=7693 comm="syz.6.1621" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.800392][ T28] audit: type=1400 audit(1773250146.491:1032): avc: denied { watch watch_reads } for pid=7700 comm="syz.5.1622" path="/266/file1/file0" dev="loop5" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 91.819728][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.837685][ T7557] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.849533][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.856612][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.877705][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.884779][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.980837][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1625'. [ 91.993637][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1625'. [ 91.995653][ T7557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.083270][ T7557] veth0_vlan: entered promiscuous mode [ 92.093043][ T7557] veth1_vlan: entered promiscuous mode [ 92.118945][ T7557] veth0_macvtap: entered promiscuous mode [ 92.133307][ T7557] veth1_macvtap: entered promiscuous mode [ 92.146263][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.156931][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.177139][ T382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.196084][ T382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.215943][ T382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.227845][ T382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.270631][ T7776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.297303][ T28] audit: type=1400 audit(1773250146.991:1033): avc: denied { ioctl } for pid=7774 comm="syz.1.1581" path="/0/file1/file1" dev="loop1" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.331565][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.369650][ T28] audit: type=1400 audit(1773250147.061:1034): avc: denied { sqpoll } for pid=7787 comm="syz.2.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.420146][ T7797] syzkaller1: entered promiscuous mode [ 92.430071][ T7797] syzkaller1: entered allmulticast mode [ 92.545495][ T28] audit: type=1400 audit(1773250147.241:1035): avc: denied { watch } for pid=7821 comm="syz.0.1638" path="/330/file0" dev="tmpfs" ino=1733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 92.615537][ T7829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.662987][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.879389][ T7855] syz.2.1644: attempt to access beyond end of device [ 92.879389][ T7855] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 92.893290][ T7855] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 93.055778][ T7883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.172148][ T7897] set_capacity_and_notify: 6 callbacks suppressed [ 93.172161][ T7897] loop2: detected capacity change from 0 to 128 [ 93.204488][ T7899] loop6: detected capacity change from 0 to 128 [ 93.246157][ T7899] FAT-fs (loop6): error, corrupted directory (invalid i_start) [ 93.263511][ T7899] FAT-fs (loop6): Filesystem has been set read-only [ 93.298257][ T7905] loop6: detected capacity change from 0 to 128 [ 93.430608][ T7897] syz.2.1661: attempt to access beyond end of device [ 93.430608][ T7897] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 93.445455][ T7897] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 93.553765][ T7934] loop2: detected capacity change from 0 to 512 [ 93.563882][ T7934] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.1682: corrupted inode contents [ 93.578927][ T7934] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.580610][ T7934] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.1682: mark_inode_dirty error [ 93.591097][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 93.607474][ C1] EXT4-fs (loop2): initial error at time 1773250148: ext4_do_update_inode:5569: inode 3 [ 93.607591][ T7938] loop5: detected capacity change from 0 to 128 [ 93.617323][ C1] EXT4-fs (loop2): last error at time 1773250148: ext4_do_update_inode:5569: inode 3 [ 93.619928][ T7934] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.640453][ T7934] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.1682: corrupted inode contents [ 93.664475][ T7934] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.664665][ T7934] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.1682: mark_inode_dirty error [ 93.690379][ T7942] loop0: detected capacity change from 0 to 128 [ 93.691238][ T7934] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.703416][ T7934] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1682: Failed to acquire dquot type 0 [ 93.725009][ T7934] loop2: lost filesystem error report for type 5 error -117 [ 93.725543][ T7934] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1682: corrupted inode contents [ 93.746351][ T7934] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.746463][ T7934] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.1682: mark_inode_dirty error [ 93.767539][ T7934] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.767978][ T7934] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1682: corrupted inode contents [ 93.798090][ T7934] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.799488][ T7934] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1682: mark_inode_dirty error [ 93.820603][ T7934] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.820787][ T7934] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1682: corrupted inode contents [ 93.830908][ T7938] syz.5.1691: attempt to access beyond end of device [ 93.830908][ T7938] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 93.843293][ T7934] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.857467][ T7934] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 93.875987][ T7938] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 93.884663][ T7934] loop2: lost filesystem error report for type 5 error -117 [ 93.886112][ T7934] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1682: corrupted inode contents [ 93.910644][ T7948] netlink: 'syz.6.1687': attribute type 15 has an invalid length. [ 93.964326][ T7934] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.964536][ T7934] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.1682: mark_inode_dirty error [ 94.007128][ T7934] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 94.026919][ T7934] loop2: lost filesystem error report for type 5 error -117 [ 94.034293][ T7934] EXT4-fs (loop2): 1 truncate cleaned up [ 94.050777][ T7934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.067361][ T7934] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.119070][ T7934] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.1682: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 94.119070][ T7934] [ 94.202628][ T7980] loop1: detected capacity change from 0 to 512 [ 94.212059][ T7934] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 94.241728][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.253025][ T7980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.308906][ T7993] loop2: detected capacity change from 0 to 128 [ 94.334111][ T7980] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.373834][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.576957][ T7993] syz.2.1704: attempt to access beyond end of device [ 94.576957][ T7993] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 94.629860][ T7993] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 94.805937][ T3384] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.823913][ T3384] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.873899][ T8036] loop2: detected capacity change from 0 to 4096 [ 94.880907][ T8036] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 94.959028][ T8049] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 95.036335][ T8055] loop0: detected capacity change from 0 to 1024 [ 95.047596][ T8060] EXT4-fs: inline encryption not supported [ 95.082126][ T8060] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1737: bad orphan inode 15 [ 95.093516][ T8060] loop5: lost filesystem error report for type 5 error -117 [ 95.093415][ T8055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.106826][ T8060] ext4_test_bit(bit=14, block=5) = 0 [ 95.112940][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 95.112957][ C1] EXT4-fs (loop5): initial error at time 1773250149: ext4_orphan_get:1417 [ 95.112989][ C1] EXT4-fs (loop5): last error at time 1773250149: ext4_orphan_get:1417 [ 95.142034][ T8060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.155183][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.165213][ T8060] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 95.179983][ T8060] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.1737: bit already cleared for inode 13 [ 95.219061][ T3971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.313010][ T8063] syz.2.1738: attempt to access beyond end of device [ 95.313010][ T8063] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 95.327580][ T8063] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 95.751657][ T8110] syz.0.1756: attempt to access beyond end of device [ 95.751657][ T8110] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 95.765465][ T8110] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 95.962801][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 95.980182][ T8126] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 95.988351][ T8126] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 96.172962][ T8148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.185640][ T8148] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.198667][ T8148] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1775: corrupted inode contents [ 96.210946][ T8148] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.1775: mark_inode_dirty error [ 96.231453][ T8148] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1775: corrupted inode contents [ 96.279905][ T8145] syz.5.1774: attempt to access beyond end of device [ 96.279905][ T8145] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 96.281026][ T8156] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1775: corrupted inode contents [ 96.294742][ T8145] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 96.310533][ T8156] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.1775: mark_inode_dirty error [ 96.331413][ T8156] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1775: corrupted inode contents [ 96.346995][ T8156] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1775: mark_inode_dirty error [ 96.364676][ T8156] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1775: corrupted inode contents [ 96.433751][ T8156] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.1775: mark_inode_dirty error [ 96.464247][ T8162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1780: bg 0: block 5: invalid block bitmap [ 96.469639][ T8148] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.1775: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 96.469639][ T8148] [ 96.489700][ T8162] loop2: lost filesystem error report for type 5 error -117 [ 96.511100][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 96.511544][ T8162] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 96.518398][ C1] EXT4-fs (loop2): initial error at time 1773250151: ext4_validate_block_bitmap:432 [ 96.518433][ C1] EXT4-fs (loop2): last error at time 1773250151: ext4_validate_block_bitmap:432 [ 96.526270][ T8162] loop2: lost filesystem error report for type 5 error -117 [ 96.533539][ C1] [ 96.551544][ T8148] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1775: corrupted inode contents [ 96.607830][ T8162] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1780: invalid indirect mapped block 3 (level 2) [ 96.625857][ T8162] EXT4-fs (loop2): 1 orphan inode deleted [ 96.635659][ T8162] EXT4-fs (loop2): 1 truncate cleaned up [ 96.642007][ T8162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.675481][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.685496][ T7557] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.740310][ T8174] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.766821][ T8174] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.796917][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.844042][ T8181] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1789'. [ 96.870840][ T8185] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.920439][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 96.920455][ T28] audit: type=1400 audit(1773250151.611:1065): avc: denied { bind } for pid=8188 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.043450][ T8198] EXT4-fs: Ignoring removed oldalloc option [ 97.058050][ T28] audit: type=1400 audit(1773250151.651:1066): avc: denied { name_bind } for pid=8188 comm="syz.5.1792" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 97.081394][ T28] audit: type=1400 audit(1773250151.651:1067): avc: denied { node_bind } for pid=8188 comm="syz.5.1792" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 97.108212][ T8198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.117818][ T8200] EXT4-fs: Ignoring removed orlov option [ 97.135188][ T8198] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1796: iget: bad i_size value: 38620345925642 [ 97.172328][ T8200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.200559][ T8200] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 97.206145][ T8198] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1796: couldn't read orphan inode 15 (err -117) [ 97.215236][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 97.215254][ C1] EXT4-fs (loop5): initial error at time 1773250151: ext4_orphan_get:1391: inode 15 [ 97.215282][ C1] EXT4-fs (loop5): last error at time 1773250151: ext4_orphan_get:1391: inode 15 [ 97.255611][ T8200] EXT4-fs (loop2): Remounting filesystem read-only [ 97.270343][ T8198] loop5: lost filesystem error report for type 5 error -117 [ 97.309620][ T8198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.364362][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.448466][ T8225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.472402][ T28] audit: type=1400 audit(1773250152.171:1068): avc: denied { unmount } for pid=7557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.623765][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.793381][ T28] audit: type=1400 audit(1773250152.491:1069): avc: denied { listen } for pid=8269 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.830863][ T28] audit: type=1400 audit(1773250152.491:1070): avc: denied { accept } for pid=8269 comm="syz.0.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.877677][ T28] audit: type=1400 audit(1773250152.521:1071): avc: denied { name_bind } for pid=8274 comm="syz.2.1817" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 97.934240][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 97.940016][ T28] audit: type=1400 audit(1773250152.601:1072): avc: denied { mount } for pid=8285 comm="syz.1.1819" name="/" dev="hugetlbfs" ino=21401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.973666][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 97.988510][ T3444] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap [ 98.011605][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 98.020995][ T28] audit: type=1400 audit(1773250152.701:1073): avc: denied { remount } for pid=8294 comm="syz.0.1823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.059272][ T3444] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 98.076920][ T3444] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.076920][ T3444] [ 98.086694][ T3444] EXT4-fs (loop5): Total free blocks count 0 [ 98.100780][ T3444] EXT4-fs (loop5): Free/Dirty block details [ 98.107123][ T3444] EXT4-fs (loop5): free_blocks=0 [ 98.121906][ T3444] EXT4-fs (loop5): dirty_blocks=6784 [ 98.127213][ T3444] EXT4-fs (loop5): Block reservation details [ 98.133873][ T3444] EXT4-fs (loop5): i_reserved_data_blocks=6784 [ 98.134270][ T28] audit: type=1400 audit(1773250152.831:1074): avc: denied { mounton } for pid=8310 comm="syz.6.1828" path="/proc/146/cgroup" dev="proc" ino=21443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 98.177782][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 98.264207][ T8325] team0: Device gtp0 is of different type [ 98.382443][ T8340] netlink: 'syz.5.1839': attribute type 4 has an invalid length. [ 98.463129][ T8351] set_capacity_and_notify: 15 callbacks suppressed [ 98.463154][ T8351] loop5: detected capacity change from 0 to 1024 [ 98.488906][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 98.498435][ T8347] loop1: detected capacity change from 0 to 8192 [ 98.507884][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.515721][ T8351] EXT4-fs: Ignoring removed orlov option [ 98.526816][ T8351] EXT4-fs (loop5): stripe (133) is not aligned with cluster size (16), stripe is disabled [ 98.547176][ T8347] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.573350][ T8351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.618151][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.641708][ T3971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.713331][ T8369] loop5: detected capacity change from 0 to 2048 [ 98.714936][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1855'. [ 98.734667][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1855'. [ 98.739707][ T3301] loop5: p2 < > p4 [ 98.748934][ T3301] loop5: p4 size 262144 extends beyond EOD, truncated [ 98.767817][ T8369] loop5: p2 < > p4 [ 98.776836][ T8369] loop5: p4 size 262144 extends beyond EOD, truncated [ 98.827683][ T382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.829287][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 98.842068][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 98.888095][ T8380] loop2: detected capacity change from 0 to 1024 [ 98.925019][ T8380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.953280][ T382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.997920][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.099688][ T8405] loop2: detected capacity change from 0 to 512 [ 99.114719][ T8405] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 99.143729][ T8405] EXT4-fs (loop2): 1 truncate cleaned up [ 99.158011][ T382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.180119][ T8405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.209895][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.290395][ T382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.310959][ T8427] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1870'. [ 99.340249][ T8431] loop2: detected capacity change from 0 to 1024 [ 99.379194][ T8431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.397630][ T8431] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.399238][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 99.409678][ T8431] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.1872: lblock 0 mapped to illegal pblock 0 (length 6) [ 99.438846][ T8431] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.1872: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 99.460382][ T382] bridge_slave_1: left allmulticast mode [ 99.466230][ T382] bridge_slave_1: left promiscuous mode [ 99.467494][ T8431] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.1872: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.474316][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.495583][ T8431] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 99.508495][ T8442] loop5: detected capacity change from 0 to 128 [ 99.508965][ T8431] EXT4-fs (loop2): This should not happen!! Data will be lost [ 99.508965][ T8431] [ 99.524700][ T382] bridge_slave_0: left allmulticast mode [ 99.530336][ T382] bridge_slave_0: left promiscuous mode [ 99.536322][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.546128][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.546128][ T8442] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 99.564101][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.564101][ T8442] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 99.580576][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.591048][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.591048][ T8442] loop5: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 99.605701][ T8442] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 99.615936][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.615936][ T8442] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 99.644501][ T8442] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 99.654636][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.654636][ T8442] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 99.668908][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.668908][ T8442] loop5: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 99.681238][ T8452] loop2: detected capacity change from 0 to 256 [ 99.683593][ T8442] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 99.697870][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.697870][ T8442] loop5: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 99.712372][ T8442] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 99.728706][ T8442] syz.5.1874: attempt to access beyond end of device [ 99.728706][ T8442] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 99.753042][ T8442] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 99.766248][ T8442] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 99.776938][ T382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.791416][ T382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.802266][ T382] bond0 (unregistering): Released all slaves [ 99.844131][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.851521][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.858653][ T8387] bridge_slave_0: entered allmulticast mode [ 99.865610][ T8387] bridge_slave_0: entered promiscuous mode [ 99.872368][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.879498][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.891504][ T8387] bridge_slave_1: entered allmulticast mode [ 99.898841][ T8387] bridge_slave_1: entered promiscuous mode [ 99.908697][ T382] hsr_slave_0: left promiscuous mode [ 99.914615][ T382] hsr_slave_1: left promiscuous mode [ 99.920401][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.928130][ T382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.936245][ T382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.943912][ T382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.954976][ T382] veth1_macvtap: left promiscuous mode [ 99.960957][ T382] veth0_macvtap: left promiscuous mode [ 99.967054][ T382] veth1_vlan: left promiscuous mode [ 99.972493][ T382] veth0_vlan: left promiscuous mode [ 100.029965][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 100.084288][ T382] team0 (unregistering): Port device team_slave_1 removed [ 100.095144][ T382] team0 (unregistering): Port device team_slave_0 removed [ 100.138483][ T8484] netlink: 'syz.5.1887': attribute type 25 has an invalid length. [ 100.146716][ T8484] netlink: 'syz.5.1887': attribute type 7 has an invalid length. [ 100.157894][ T8484] netlink: 'syz.5.1887': attribute type 2 has an invalid length. [ 100.196599][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.209743][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.237016][ T8387] team0: Port device team_slave_0 added [ 100.243679][ T8387] team0: Port device team_slave_1 added [ 100.259718][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.267291][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.271130][ T9] IPVS: starting estimator thread 0... [ 100.293625][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.315414][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.355282][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.392101][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.412113][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1898'. [ 100.440441][ T8387] hsr_slave_0: entered promiscuous mode [ 100.451197][ T8501] IPVS: using max 2688 ests per chain, 134400 per kthread [ 100.457968][ T8387] hsr_slave_1: entered promiscuous mode [ 100.488657][ T8527] tipc: Started in network mode [ 100.498853][ T8523] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 100.499793][ T7379] IPVS: starting estimator thread 0... [ 100.506053][ T8527] tipc: Node identity ac1414aa, cluster identity 4711 [ 100.523604][ T8527] tipc: Enabled bearer , priority 10 [ 100.601126][ T8531] IPVS: using max 2544 ests per chain, 127200 per kthread [ 100.755054][ T8387] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 100.776572][ T8387] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 100.794897][ T8387] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 100.813946][ T8387] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 100.835544][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1913'. [ 100.865311][ T8582] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.903264][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.926065][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.938329][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.945551][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.010366][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.017486][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.202066][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.250248][ T8639] tipc: Started in network mode [ 101.261157][ T8639] tipc: Node identity ac14140f, cluster identity 4711 [ 101.268118][ T8639] tipc: Enabled bearer , priority 10 [ 101.329088][ T8649] loop6: detected capacity change from 0 to 1024 [ 101.368523][ T8649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.376049][ T8387] veth0_vlan: entered promiscuous mode [ 101.388679][ T8387] veth1_vlan: entered promiscuous mode [ 101.402266][ T8387] veth0_macvtap: entered promiscuous mode [ 101.409255][ T8649] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.426083][ T8387] veth1_macvtap: entered promiscuous mode [ 101.434006][ T8649] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1932: bg 0: block 112: padding at end of block bitmap is not set [ 101.448384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa43a00: rx timeout, send abort [ 101.453388][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.456756][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aa43a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 101.479768][ T8647] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.481599][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.500655][ T8647] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.529078][ T8647] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.529867][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.551333][ T3384] tipc: Node number set to 2886997162 [ 101.553717][ T8647] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.557438][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.599389][ T8647] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.601220][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.613359][ T8647] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.633399][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.658459][ T8649] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.669842][ T8667] loop2: detected capacity change from 0 to 2048 [ 101.678304][ T8649] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #15: comm syz.6.1932: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.711746][ T7157] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.722170][ T8667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.735141][ T8667] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.774788][ T8677] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.803585][ T8677] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 101.818684][ T8677] EXT4-fs (loop6): Remounting filesystem read-only [ 101.825728][ T8677] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.831099][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 101.839527][ T3302] Alternate GPT is invalid, using primary GPT. [ 101.845163][ C1] EXT4-fs (loop6): initial error at time 1773250156: ext4_mb_generate_buddy:1315 [ 101.845190][ C1] EXT4-fs (loop6): last error at time 1773250156: ext4_mb_generate_buddy:1315 [ 101.852303][ T8677] EXT4-fs (loop6): 1 truncate cleaned up [ 101.860440][ C1] [ 101.871760][ T3302] loop5: p1 p2 p3 [ 101.875367][ T8677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.893456][ T8679] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 101.933793][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.938347][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 101.938360][ T28] audit: type=1400 audit(1773250156.631:1094): avc: denied { ioctl } for pid=8681 comm="syz.5.1941" path="socket:[22477]" dev="sockfs" ino=22477 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.951350][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 101.982323][ T28] audit: type=1400 audit(1773250156.641:1095): avc: denied { write } for pid=8665 comm="syz.2.1935" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.986267][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 102.007407][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 102.033020][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 102.044094][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 102.044401][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 102.065181][ T7157] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.157418][ T8695] netlink: 'syz.0.1946': attribute type 3 has an invalid length. [ 102.281186][ T3384] tipc: Node number set to 2886997007 [ 102.308007][ T28] audit: type=1400 audit(1773250157.001:1096): avc: denied { bind } for pid=8702 comm="syz.6.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.476069][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.600068][ T8733] EXT4-fs: inline encryption not supported [ 102.624897][ T8733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.638568][ T8733] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 102.671975][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.715683][ T28] audit: type=1400 audit(1773250157.411:1097): avc: denied { listen } for pid=8744 comm="syz.6.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.727802][ T8747] EXT4-fs: Ignoring removed bh option [ 102.762731][ T8747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.774949][ T8747] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.789719][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.804739][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.818841][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.832484][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.846049][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.860329][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.874242][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.887672][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.901447][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.915139][ T8746] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.1970: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.943768][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.123597][ T8760] netlink: 'syz.2.1974': attribute type 8 has an invalid length. [ 103.132375][ T8760] __nla_validate_parse: 3 callbacks suppressed [ 103.132394][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'. [ 103.175607][ T28] audit: type=1400 audit(1773250157.871:1098): avc: denied { read } for pid=8761 comm="syz.2.1975" path="socket:[23345]" dev="sockfs" ino=23345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.427566][ T40] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.581840][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 103.657344][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.664773][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.674564][ T8765] bridge_slave_0: entered allmulticast mode [ 103.681363][ T8765] bridge_slave_0: entered promiscuous mode [ 103.688478][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.696624][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.704155][ T8765] bridge_slave_1: entered allmulticast mode [ 103.712047][ T8765] bridge_slave_1: entered promiscuous mode [ 103.729586][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.740049][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.759354][ T8765] team0: Port device team_slave_0 added [ 103.766292][ T8765] team0: Port device team_slave_1 added [ 103.781900][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.788901][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.816132][ T8765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.827266][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.834329][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.860349][ T8765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.884715][ T8765] hsr_slave_0: entered promiscuous mode [ 103.890663][ T8765] hsr_slave_1: entered promiscuous mode [ 103.896635][ T8765] debugfs: 'hsr0' already exists in 'hsr' [ 103.902406][ T8765] Cannot create hsr debugfs directory [ 103.965538][ T8765] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 103.972390][ T3807] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.972399][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 103.987567][ T8765] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 104.030931][ T8765] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 104.052638][ T8765] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 104.065644][ T8799] set_capacity_and_notify: 4 callbacks suppressed [ 104.065661][ T8799] loop5: detected capacity change from 0 to 512 [ 104.079325][ T8799] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.111421][ T8799] EXT4-fs (loop5): 1 truncate cleaned up [ 104.125527][ T8799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.288726][ T3971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.316810][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.326863][ T8818] ================================================================== [ 104.334567][ T8816] syzkaller1: entered promiscuous mode [ 104.334987][ T8818] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 104.335010][ T8818] [ 104.335015][ T8818] write to 0xffff8881291dbe60 of 8 bytes by task 8819 on cpu 0: [ 104.335030][ T8818] cpu_map_kthread_run+0x4fe/0x1680 [ 104.335047][ T8818] kthread+0x22a/0x280 [ 104.340617][ T8816] syzkaller1: entered allmulticast mode [ 104.348533][ T8818] ret_from_fork+0x150/0x360 [ 104.348567][ T8818] ret_from_fork_asm+0x1a/0x30 [ 104.348592][ T8818] [ 104.348598][ T8818] read to 0xffff8881291dbe60 of 8 bytes by task 8818 on cpu 1: [ 104.392402][ T8818] bq_flush_to_queue+0x124/0x360 [ 104.397346][ T8818] cpu_map_enqueue+0x1ad/0x1c0 [ 104.402182][ T8818] xdp_do_redirect_frame+0x27b/0x580 [ 104.407725][ T8818] bpf_test_run_xdp_live+0xac3/0x1360 [ 104.413098][ T8818] bpf_prog_test_run_xdp+0x57b/0xa10 [ 104.418392][ T8818] bpf_prog_test_run+0x204/0x340 [ 104.423326][ T8818] __sys_bpf+0x52e/0x7e0 [ 104.427557][ T8818] __x64_sys_bpf+0x41/0x50 [ 104.431970][ T8818] x64_sys_call+0x10cb/0x3020 [ 104.436636][ T8818] do_syscall_64+0x12c/0x370 [ 104.441214][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.447095][ T8818] [ 104.449402][ T8818] value changed: 0xffff8881293a7070 -> 0x0000000000000000 [ 104.456494][ T8818] [ 104.458809][ T8818] Reported by Kernel Concurrency Sanitizer on: [ 104.464943][ T8818] CPU: 1 UID: 0 PID: 8818 Comm: syz.5.1992 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.475778][ T8818] Tainted: [W]=WARN [ 104.479650][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.489698][ T8818] ================================================================== [ 104.497762][ T28] audit: type=1400 audit(1773250159.091:1099): avc: denied { write } for pid=3297 comm="syz-executor" path="pipe:[1436]" dev="pipefs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 104.535329][ T28] audit: type=1400 audit(1773250159.221:1100): avc: denied { recv } for pid=8764 comm="syz-executor" saddr=10.128.0.163 src=40994 daddr=10.128.0.10 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 105.303673][ T40] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.353512][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.423313][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.519390][ T40] bridge_slave_1: left allmulticast mode [ 105.525103][ T40] bridge_slave_1: left promiscuous mode [ 105.530769][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.538522][ T40] bridge_slave_0: left allmulticast mode [ 105.544190][ T40] bridge_slave_0: left promiscuous mode [ 105.549811][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.627099][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.637008][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.646537][ T40] bond0 (unregistering): Released all slaves [ 105.685071][ T40] hsr_slave_0: left promiscuous mode [ 105.691512][ T40] hsr_slave_1: left promiscuous mode [ 105.697329][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.704886][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.715156][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.722998][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.734166][ T40] veth1_macvtap: left promiscuous mode [ 105.739692][ T40] veth0_macvtap: left promiscuous mode [ 105.745539][ T40] veth1_vlan: left promiscuous mode [ 105.750799][ T40] veth0_vlan: left promiscuous mode [ 105.806542][ T40] team0 (unregistering): Port device team_slave_1 removed [ 105.815894][ T40] team0 (unregistering): Port device team_slave_0 removed [ 106.319674][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.360266][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.403968][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.444098][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.506063][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.555174][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.603962][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.653756][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.725145][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.774735][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.824359][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.888085][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.949845][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.998735][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.046991][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.093663][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.218440][ T40] bridge_slave_1: left allmulticast mode [ 107.224205][ T40] bridge_slave_1: left promiscuous mode [ 107.230274][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.238539][ T40] bridge_slave_0: left allmulticast mode [ 107.244365][ T40] bridge_slave_0: left promiscuous mode [ 107.250070][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.258967][ T40] bridge_slave_1: left allmulticast mode [ 107.264690][ T40] bridge_slave_1: left promiscuous mode [ 107.270429][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.278179][ T40] bridge_slave_0: left allmulticast mode [ 107.284198][ T40] bridge_slave_0: left promiscuous mode [ 107.289895][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.298353][ T40] bridge_slave_1: left allmulticast mode [ 107.304047][ T40] bridge_slave_1: left promiscuous mode [ 107.309771][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.317386][ T40] bridge_slave_0: left allmulticast mode [ 107.323071][ T40] bridge_slave_0: left promiscuous mode [ 107.328812][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.337186][ T40] bridge_slave_1: left allmulticast mode [ 107.342946][ T40] bridge_slave_1: left promiscuous mode [ 107.348596][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.356428][ T40] bridge_slave_0: left allmulticast mode [ 107.362222][ T40] bridge_slave_0: left promiscuous mode [ 107.367798][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.376299][ T40] bridge_slave_1: left allmulticast mode [ 107.381959][ T40] bridge_slave_1: left promiscuous mode [ 107.387550][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.395190][ T40] bridge_slave_0: left allmulticast mode [ 107.400803][ T40] bridge_slave_0: left promiscuous mode [ 107.406496][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.563881][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.573333][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.582481][ T40] bond0 (unregistering): Released all slaves [ 107.624069][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.633862][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.643365][ T40] bond0 (unregistering): Released all slaves [ 107.650542][ T40] bond1 (unregistering): Released all slaves [ 107.694001][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.704164][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.713420][ T40] bond0 (unregistering): Released all slaves [ 107.753206][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.762760][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.772166][ T40] bond0 (unregistering): Released all slaves [ 107.843377][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.853195][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.862936][ T40] bond0 (unregistering): Released all slaves [ 107.870190][ T40] bond1 (unregistering): Released all slaves [ 107.940978][ T40] tipc: Disabling bearer [ 107.946869][ T40] tipc: Left network mode [ 107.953191][ T40] tipc: Disabling bearer [ 107.959275][ T40] tipc: Left network mode [ 107.964047][ T40] tipc: Left network mode [ 107.975346][ T40] hsr_slave_0: left promiscuous mode [ 107.981023][ T40] hsr_slave_1: left promiscuous mode [ 107.986791][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.994462][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.003556][ T40] hsr_slave_0: left promiscuous mode [ 108.009182][ T40] hsr_slave_1: left promiscuous mode [ 108.014744][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.022187][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.029664][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.037219][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.045937][ T40] hsr_slave_0: left promiscuous mode [ 108.051873][ T40] hsr_slave_1: left promiscuous mode [ 108.058010][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.065413][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.072824][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.080266][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.088862][ T40] hsr_slave_0: left promiscuous mode [ 108.094493][ T40] hsr_slave_1: left promiscuous mode [ 108.101403][ T40] hsr_slave_0: left promiscuous mode [ 108.106906][ T40] hsr_slave_1: left promiscuous mode [ 108.112531][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.119886][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.127494][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.135061][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.153844][ T40] veth1_macvtap: left promiscuous mode [ 108.159311][ T40] veth0_macvtap: left promiscuous mode [ 108.164843][ T40] veth1_vlan: left promiscuous mode [ 108.170042][ T40] veth0_vlan: left promiscuous mode [ 108.175989][ T40] veth1_macvtap: left promiscuous mode [ 108.181774][ T40] veth0_macvtap: left promiscuous mode [ 108.187235][ T40] veth1_vlan: left promiscuous mode [ 108.192498][ T40] veth0_vlan: left promiscuous mode [ 108.198270][ T40] veth1_macvtap: left promiscuous mode [ 108.203820][ T40] veth0_macvtap: left promiscuous mode [ 108.209279][ T40] veth1_vlan: left promiscuous mode [ 108.214498][ T40] veth0_vlan: left promiscuous mode [ 108.220133][ T40] veth1_vlan: left promiscuous mode [ 108.225433][ T40] veth0_vlan: left promiscuous mode [ 108.350315][ T40] team0 (unregistering): Port device team_slave_1 removed [ 108.360692][ T40] team0 (unregistering): Port device team_slave_0 removed [ 108.408430][ T40] team0 (unregistering): Port device team_slave_1 removed [ 108.417919][ T40] team0 (unregistering): Port device team_slave_0 removed [ 108.467471][ T40] team0 (unregistering): Port device team_slave_1 removed [ 108.476760][ T40] team0 (unregistering): Port device team_slave_0 removed [ 108.524069][ T40] team0 (unregistering): Port device team_slave_1 removed [ 108.533273][ T40] team0 (unregistering): Port device team_slave_0 removed [ 108.576549][ T40] team0 (unregistering): Port device team_slave_1 removed [ 108.585687][ T40] team0 (unregistering): Port device team_slave_0 removed [ 109.679914][ T40] IPVS: stop unused estimator thread 0... [ 109.686173][ T40] IPVS: stop unused estimator thread 0... [ 109.692322][ T40] IPVS: stop unused estimator thread 0...