last executing test programs: 1m19.40768664s ago: executing program 1 (id=47): socket$nl_route(0x10, 0x3, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000580)=""/145, 0x91, 0x142, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r3, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000180)={0x1, 0x0, '\x00', 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@minixdf}]}, 0x1, 0x52d, &(0x7f0000000c40)="$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") r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9649d354746c3b15832c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf2509000000080001000100000005000800040000000500070002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0xc0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB, @ANYRES32], 0x290}, 0x1, 0x0, 0x0, 0x448c0}, 0x4008080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x200, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1m17.751330055s ago: executing program 1 (id=52): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x4c, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xa}, 0x100200, 0x0, 0x0, 0x2, 0x80000000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1m16.60821566s ago: executing program 1 (id=60): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x400) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x16c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xf4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m16.002827243s ago: executing program 1 (id=62): openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpgid(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x43, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x100000, 0x653f, 0xffffffff, 0x5, 0x0, 0x0, 0xa1c, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='!~u\t&0&&&') syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@acl}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)="d8", 0x1}], 0x1}, 0x44000) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[], 0x0}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0xff, 0x0, 0x4, 0x64004, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff, 0x8}, 0x0, 0x0, 0xfffc, 0x8, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffd, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x1, 0x6}, {0x0, 0x0, 0x400000003, 0x4}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@local, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000100)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.064127963s ago: executing program 1 (id=67): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25180000001c00038008000300ff010000080002000100008008000100020000004c000280080000010000003400038008000200ffff000008000200c2000040080002007f0000000800010005000000080002000000000008000100080000000c00038008000200080000001c00098008800100060000000800010000000000080002000900000000"], 0x98}, 0x1, 0x0, 0x0, 0x24008054}, 0x20000001) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000b40)=ANY=[], &(0x7f0000000800)=""/218, 0x14e, 0xda, 0x1, 0xff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e00000081000000090000000900000080800000", @ANYRES32=0x1, @ANYBLOB="0500000083200000000000000000000000000000b54b8fe4402c19f738fb2a2b687b5ee3", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0300000000000000050000000d00000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x36, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) r7 = io_uring_setup(0x3b5f, &(0x7f0000000700)={0x0, 0x30a5, 0x0, 0xffffffff, 0x102}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000990000/0x4000)=nil, 0x4000, &(0x7f0000000540)='+\x00') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000902, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB="9254933ce4a7ca3c322658f6085a9115ea4fd85d798879674daeecbfae5bd9ae2f27349d5c387c4884919c"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m14.717287991s ago: executing program 1 (id=69): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000340), 0x9}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$inet_udp(0x2, 0x2, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m14.629341133s ago: executing program 32 (id=69): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000340), 0x9}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$inet_udp(0x2, 0x2, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.884738097s ago: executing program 0 (id=339): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) creat(&(0x7f0000000040)='./file0\x00', 0x1e) 5.698682631s ago: executing program 0 (id=343): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r3, &(0x7f0000001480)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1, 0x6, 0x880) 5.525499296s ago: executing program 0 (id=347): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x4f8) 3.689357561s ago: executing program 2 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.412643127s ago: executing program 0 (id=359): syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202", @ANYRESHEX=0x0], 0x0) 3.255961591s ago: executing program 3 (id=361): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000008) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x0) 3.041475056s ago: executing program 3 (id=366): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f00000010c0)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x4, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffff5, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x2}, 0x86) 2.961260108s ago: executing program 3 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r5, 0x73}}, 0x48) 2.737769263s ago: executing program 0 (id=371): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001a0001002dbd7000fbdbdf251c2080f7fc04000000f6ffff070001"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80000) 2.629349556s ago: executing program 0 (id=374): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r5}, 0x20) 2.018505311s ago: executing program 5 (id=383): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10000, &(0x7f0000000140), 0x1, 0x50d, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) timer_create(0x2, 0x0, &(0x7f0000001200)) 1.909535494s ago: executing program 2 (id=384): socketpair$tipc(0x1e, 0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000140)={@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0xb2}}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) 1.096241364s ago: executing program 4 (id=385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffd, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1.020582695s ago: executing program 2 (id=386): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4000080) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x3}, 0x6, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000001400)=""/26, 0x1a}], 0x1}, 0x2fa}], 0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 677.208503ms ago: executing program 4 (id=387): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e574da93883e8c628a600b17cbe584d2e73c681419f9ebbe9b65f3fbcf0e33db6e879c420151", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x34044880) 578.921586ms ago: executing program 4 (id=388): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r0, 0x3041}], 0x1, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 506.787578ms ago: executing program 5 (id=389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) 442.66804ms ago: executing program 4 (id=390): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x5}]}}}}}}}, 0x0) 442.554589ms ago: executing program 3 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 441.99824ms ago: executing program 5 (id=392): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049370, 0x0) 361.506051ms ago: executing program 5 (id=393): syz_emit_ethernet(0x66, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='.(-])8\xdd\xb0\x8f']}, 0x0, 0x1000) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 341.967342ms ago: executing program 4 (id=394): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) 341.397602ms ago: executing program 3 (id=395): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x4003, 0xff, 0xc, 0x3, 0x11, 0x81, 0x1}, 0xc) 273.467223ms ago: executing program 5 (id=396): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 210.944825ms ago: executing program 4 (id=397): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e0000", 0x3}, {&(0x7f00000006c0)}], 0x2) 206.945705ms ago: executing program 3 (id=398): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x1, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 160.121567ms ago: executing program 2 (id=399): setuid(0xee01) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x0) 105.483457ms ago: executing program 5 (id=400): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x201, 0x2000601, 0xfffffffd, 0xc4d2, 0x7, "0441920887e87fcb367800000000080100", 0x7, 0x200}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 87.020038ms ago: executing program 2 (id=401): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000003c0)={0x1, 0x3, 0x1000, 0x4, &(0x7f0000000280)="8ccf91dc", 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 0s ago: executing program 2 (id=402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8cf3}, &(0x7f0000000100)=0x8) kernel console output (not intermixed with test programs): timestamps until 2038-01-19 (0x7fffffff) [ 56.859078][ T3714] loop1: detected capacity change from 0 to 512 [ 56.956928][ T3714] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.986327][ T3714] ------------[ cut here ]------------ [ 56.993159][ T3714] EA inode 11 i_nlink=2 [ 56.993217][ T3714] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.1.47/3714 [ 57.008726][ T3714] Modules linked in: [ 57.013717][ T3714] CPU: 0 UID: 0 PID: 3714 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.023646][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 57.034144][ T3714] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 57.041576][ T3714] Code: c6 c5 96 ff 49 8d 7e 40 4c 8d 2d 1b 93 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 31 8d d9 03 90 90 90 90 90 90 90 [ 57.061837][ T3714] RSP: 0000:ffffc900019437f8 EFLAGS: 00010246 [ 57.068756][ T3714] RAX: ffff8881042372b0 RBX: ffff8881062849d0 RCX: ffffffff81c2a216 [ 57.077567][ T3714] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3520 [ 57.086447][ T3714] RBP: 000000000000000b R08: 0001888106284983 R09: 0000000000000000 [ 57.095166][ T3714] R10: 0001c90002df7dba R11: 0001c90001943728 R12: ffff888106284980 [ 57.104205][ T3714] R13: ffffffff871d3520 R14: ffff888106284938 R15: 0000000000000001 [ 57.112975][ T3714] FS: 00007fbb2dc276c0(0000) GS:ffff8882ae8cf000(0000) knlGS:0000000000000000 [ 57.122397][ T3714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.129666][ T3714] CR2: 00007f155112e000 CR3: 000000011c038000 CR4: 00000000003506f0 [ 57.138603][ T3714] Call Trace: [ 57.142324][ T3714] [ 57.145737][ T3714] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 57.152097][ T3714] ext4_xattr_delete_inode+0x6b5/0x790 [ 57.158196][ T3714] ext4_evict_inode+0xb18/0xdf0 [ 57.163767][ T3714] ? __pfx_ext4_evict_inode+0x10/0x10 [ 57.169777][ T3714] evict+0x2a5/0x510 [ 57.174727][ T3714] iput+0x430/0x5a0 [ 57.179857][ T3714] ext4_process_orphan+0x1a4/0x1c0 [ 57.186107][ T3714] ext4_orphan_cleanup+0x6a6/0xa10 [ 57.192057][ T3714] ? ext4_register_li_request+0x14c/0x440 [ 57.198246][ T3714] ext4_fill_super+0x33ab/0x3760 [ 57.204207][ T3714] ? set_blocksize+0x14c/0x270 [ 57.209747][ T3714] ? __pfx_ext4_fill_super+0x10/0x10 [ 57.216145][ T3714] get_tree_bdev_flags+0x291/0x300 [ 57.221577][ T3714] ? __pfx_ext4_fill_super+0x10/0x10 [ 57.227296][ T3714] get_tree_bdev+0x1f/0x30 [ 57.231977][ T3714] ext4_get_tree+0x1c/0x30 [ 57.236957][ T3714] vfs_get_tree+0x57/0x1d0 [ 57.241936][ T3714] do_new_mount+0x288/0x8d0 [ 57.247047][ T3714] path_mount+0x4ad/0xb90 [ 57.251977][ T3714] __se_sys_mount+0x28c/0x2e0 [ 57.257146][ T3714] ? __hrtimer_rearm_deferred+0x571/0x650 [ 57.263207][ T3714] __x64_sys_mount+0x67/0x80 [ 57.268187][ T3714] x64_sys_call+0x2d61/0x3020 [ 57.273707][ T3714] do_syscall_64+0x136/0x3c0 [ 57.279016][ T3714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.285908][ T3714] RIP: 0033:0x7fbb2f1cf0ca [ 57.291077][ T3714] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.311669][ T3714] RSP: 002b:00007fbb2dc26e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.321075][ T3714] RAX: ffffffffffffffda RBX: 00007fbb2dc26ee0 RCX: 00007fbb2f1cf0ca [ 57.329947][ T3714] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fbb2dc26ea0 [ 57.338777][ T3714] RBP: 00002000000009c0 R08: 00007fbb2dc26ee0 R09: 0000000000800718 [ 57.347557][ T3714] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 57.356195][ T3714] R13: 00007fbb2dc26ea0 R14: 000000000000048d R15: 0000200000000200 [ 57.364854][ T3714] [ 57.368289][ T3714] ---[ end trace 0000000000000000 ]--- [ 57.381211][ T3714] EXT4-fs (loop1): 1 orphan inode deleted [ 57.395166][ T3714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.490474][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.596427][ T3727] netlink: 88 bytes leftover after parsing attributes in process `syz.3.48'. [ 57.608926][ T3729] loop0: detected capacity change from 0 to 256 [ 57.611344][ T3727] netlink: 88 bytes leftover after parsing attributes in process `syz.3.48'. [ 57.801867][ T3729] Cannot find set identified by id 0 to match [ 57.880483][ T3736] loop4: detected capacity change from 0 to 512 [ 57.898807][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.912110][ T3736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.950806][ T3736] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.992820][ T3744] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 58.033457][ T3740] loop3: detected capacity change from 0 to 128 [ 58.216879][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.305302][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 58.322706][ T3754] netlink: 'syz.3.57': attribute type 4 has an invalid length. [ 58.380017][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 58.380043][ T28] audit: type=1326 audit(1783857187.772:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.4.55" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6a251de59 code=0x0 [ 58.426189][ T3758] netlink: 'syz.0.56': attribute type 1 has an invalid length. [ 58.501066][ T3759] dummy0: left promiscuous mode [ 58.512110][ T3759] netlink: 'syz.0.56': attribute type 10 has an invalid length. [ 58.519825][ T3759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.56'. [ 58.528970][ T3759] dummy0: entered promiscuous mode [ 58.717969][ T3735] Zero length message leads to an empty skb [ 58.734354][ T28] audit: type=1400 audit(1783857188.022:252): avc: denied { write } for pid=3756 comm="syz.4.55" name="unix" dev="proc" ino=4026532418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.858108][ T28] audit: type=1400 audit(1783857187.912:251): avc: denied { create } for pid=3753 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.886879][ T28] audit: type=1400 audit(1783857188.112:253): avc: denied { create } for pid=3743 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.085472][ T28] audit: type=1400 audit(1783857188.492:254): avc: denied { create } for pid=3763 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.116531][ T3760] loop4: detected capacity change from 0 to 1024 [ 59.129345][ T28] audit: type=1400 audit(1783857188.542:255): avc: denied { mounton } for pid=3756 comm="syz.4.55" path="/11/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 59.195677][ T3760] EXT4-fs: inline encryption not supported [ 59.284229][ T3771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.293357][ T3771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.315525][ T28] audit: type=1400 audit(1783857188.692:256): avc: denied { read write } for pid=3765 comm="syz.2.59" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.443065][ T3760] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.538384][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 59.566945][ T3760] Quota error (device loop4): do_check_range: Getting block 4294967295 out of range 1-5 [ 59.606500][ T28] audit: type=1400 audit(1783857188.692:257): avc: denied { open } for pid=3765 comm="syz.2.59" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.649709][ T3764] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.58'. [ 59.662391][ T3764] netlink: zone id is out of range [ 59.668894][ T3764] netlink: zone id is out of range [ 59.691399][ T3760] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 59.702503][ T3764] netlink: del zone limit has 4 unknown bytes [ 59.713899][ T3760] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.55: Failed to acquire dquot type 0 [ 59.726228][ T3760] loop4: lost filesystem error report for type 5 error -117 [ 59.729987][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 59.743986][ C0] EXT4-fs (loop4): initial error at time 1783857189: ext4_acquire_dquot:7041 [ 59.752935][ C0] EXT4-fs (loop4): last error at time 1783857189: ext4_acquire_dquot:7041 [ 59.782381][ T3760] EXT4-fs (loop4): 1 truncate cleaned up [ 59.805939][ T3779] loop1: detected capacity change from 0 to 512 [ 59.830899][ T3779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.856495][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.62: iget: bad i_size value: 38620345925642 [ 59.872122][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.887105][ T3779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.888969][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.62: couldn't read orphan inode 15 (err -117) [ 59.889545][ T3783] loop3: detected capacity change from 0 to 512 [ 59.898490][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 59.898573][ C0] EXT4-fs (loop1): initial error at time 1783857189: ext4_orphan_get:1399: inode 15 [ 59.898719][ C0] EXT4-fs (loop1): last error at time 1783857189: ext4_orphan_get:1399 [ 59.914723][ T3760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.916777][ C0] : inode 15 [ 59.917272][ T3779] loop1: lost filesystem error report for type 5 error -117 [ 59.955442][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.991520][ T3783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.036714][ T3783] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.64: iget: bad i_size value: 38620345925642 [ 60.077732][ T3783] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.079935][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.095618][ C1] EXT4-fs (loop3): initial error at time 1783857189: ext4_orphan_get:1399: inode 15 [ 60.105050][ C1] EXT4-fs (loop3): last error at time 1783857189: ext4_orphan_get:1399: inode 15 [ 60.121768][ T3783] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.64: couldn't read orphan inode 15 (err -117) [ 60.140060][ T3783] loop3: lost filesystem error report for type 5 error -117 [ 60.148980][ T3783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.178031][ T3788] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.62: bg 0: block 5: invalid block bitmap [ 60.200265][ T3788] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 476 with error 28 [ 60.236002][ T3788] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.236002][ T3788] [ 60.262839][ T3788] EXT4-fs (loop1): Total free blocks count 0 [ 60.278744][ T3788] EXT4-fs (loop1): Free/Dirty block details [ 60.292235][ T3788] EXT4-fs (loop1): free_blocks=0 [ 60.303930][ T3788] EXT4-fs (loop1): dirty_blocks=476 [ 60.316811][ T3788] EXT4-fs (loop1): Block reservation details [ 60.330436][ T3788] EXT4-fs (loop1): i_reserved_data_blocks=476 [ 60.346853][ T3789] EXT4-fs (loop1): shut down requested (0) [ 60.376801][ T3797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 60.386578][ T3793] loop4: detected capacity change from 0 to 512 [ 60.417326][ T3793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.450365][ T3793] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.66: iget: bad i_size value: 38620345925642 [ 60.471922][ T3793] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.474646][ T3793] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.66: couldn't read orphan inode 15 (err -117) [ 60.484180][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 60.484250][ C1] EXT4-fs (loop4): initial error at time 1783857189: ext4_orphan_get:1399: inode 15 [ 60.484424][ C1] EXT4-fs (loop4): last error at time 1783857189: ext4_orphan_get:1399: inode 15 [ 60.586281][ T3793] loop4: lost filesystem error report for type 5 error -117 [ 60.601218][ T3793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.700825][ T3661] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 60.714774][ T68] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 60.730131][ T68] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 584 with error 28 [ 60.743988][ T68] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.743988][ T68] [ 60.753746][ T68] EXT4-fs (loop3): Total free blocks count 0 [ 60.759850][ T68] EXT4-fs (loop3): Free/Dirty block details [ 60.765822][ T68] EXT4-fs (loop3): free_blocks=0 [ 60.770835][ T68] EXT4-fs (loop3): dirty_blocks=584 [ 60.776140][ T68] EXT4-fs (loop3): Block reservation details [ 60.782165][ T68] EXT4-fs (loop3): i_reserved_data_blocks=584 [ 60.792984][ T3783] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz.3.64: data will be lost [ 60.806344][ T311] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 296 with error 28 [ 60.819134][ T311] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.819134][ T311] [ 60.829097][ T3783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.838235][ T311] EXT4-fs (loop4): Total free blocks count 0 [ 60.845881][ T311] EXT4-fs (loop4): Free/Dirty block details [ 60.862862][ T311] EXT4-fs (loop4): free_blocks=0 [ 60.868094][ T311] EXT4-fs (loop4): dirty_blocks=296 [ 60.873560][ T311] EXT4-fs (loop4): Block reservation details [ 60.879757][ T311] EXT4-fs (loop4): i_reserved_data_blocks=296 [ 60.888787][ T3793] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz.4.66: data will be lost [ 60.912593][ T3793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.925089][ T311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.036888][ T311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.109988][ T3810] loop0: detected capacity change from 0 to 1024 [ 61.131571][ T3810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.212832][ T3814] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 61.391138][ T3819] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 61.423396][ T3821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.73'. [ 61.449013][ T3822] netlink: 'syz.4.71': attribute type 10 has an invalid length. [ 61.456722][ T3822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.71'. [ 61.577433][ T3825] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 61.585235][ T3825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.70'. [ 61.712529][ T311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.753185][ T3820] dummy0: left promiscuous mode [ 61.765649][ T3822] dummy0: entered promiscuous mode [ 61.820912][ T3823] bond1: (slave veth3): Enslaving as an active interface with a down link [ 61.829704][ T3824] dummy0: left promiscuous mode [ 61.837262][ T3824] bond1: (slave dummy0): making interface the new active one [ 61.845180][ T3824] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 61.853867][ T3825] dummy0: entered promiscuous mode [ 61.862269][ T3825] bond1: (slave dummy0): Releasing active interface [ 61.878626][ T311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.023384][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.099966][ T311] bridge_slave_1: left allmulticast mode [ 62.114495][ T311] bridge_slave_1: left promiscuous mode [ 62.134203][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.192274][ T311] bridge_slave_0: left allmulticast mode [ 62.205076][ T311] bridge_slave_0: left promiscuous mode [ 62.217757][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.780590][ T3853] loop2: detected capacity change from 0 to 512 [ 63.419709][ T28] kauditd_printk_skb: 173 callbacks suppressed [ 63.419780][ T28] audit: type=1400 audit(1783857192.832:431): avc: denied { write } for pid=3841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.350078][ T3855] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 64.568266][ T3853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.76: corrupted inode contents [ 64.580838][ T3853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.583235][ T3853] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.76: mark_inode_dirty error [ 64.592928][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 64.592997][ C1] EXT4-fs (loop2): initial error at time 1783857194: ext4_do_update_inode:5742: inode 16 [ 64.593267][ C1] EXT4-fs (loop2): last error at time 1783857194: ext4_do_update_inode:5742: inode 16 [ 64.631964][ T3853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.636984][ T3868] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 64.653828][ T3868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.75'. [ 64.667479][ T3853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.76: corrupted inode contents [ 64.681156][ T3853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.682999][ T3853] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.76: mark_inode_dirty error [ 64.710789][ T3853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.714334][ T3853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.76: corrupted inode contents [ 64.736409][ T3853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.738828][ T3853] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 64.758032][ T3853] loop2: lost filesystem error report for type 5 error -117 [ 64.760421][ T3853] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.76: corrupted inode contents [ 64.780728][ T3853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.782277][ T3853] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.76: mark_inode_dirty error [ 64.804114][ T3853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 64.806548][ T3853] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 64.825658][ T3853] loop2: lost filesystem error report for type 5 error -117 [ 64.905352][ T3853] EXT4-fs (loop2): 1 truncate cleaned up [ 64.926178][ T3853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.941371][ T3853] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.117817][ T28] audit: type=1400 audit(1783857194.532:432): avc: denied { write } for pid=3864 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.318036][ T68] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.329449][ T3853] syz.2.76 (3853) used greatest stack depth: 8896 bytes left [ 65.346168][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.359318][ T68] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 65.376048][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.385946][ T311] bond0 (unregistering): Released all slaves [ 65.791301][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.801518][ T3855] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 65.808683][ T3862] dummy0: left promiscuous mode [ 65.823365][ T3868] dummy0: entered promiscuous mode [ 65.832016][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.935718][ T3880] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 65.979979][ T28] audit: type=1400 audit(1783857195.392:433): avc: denied { create } for pid=3881 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.090292][ T28] audit: type=1400 audit(1783857195.432:434): avc: denied { create } for pid=3881 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 66.115373][ T3885] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 66.123155][ T3885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.79'. [ 66.724198][ T3891] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 66.734330][ T311] hsr_slave_0: left promiscuous mode [ 66.740473][ T311] hsr_slave_1: left promiscuous mode [ 66.748595][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.756823][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.764994][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.790302][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.843362][ T311] veth1_macvtap: left promiscuous mode [ 66.856465][ T311] veth0_macvtap: left promiscuous mode [ 66.870848][ T311] veth1_vlan: left promiscuous mode [ 66.876290][ T311] veth0_vlan: left promiscuous mode [ 66.998422][ T3889] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 67.006143][ T3889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'. [ 67.048235][ T311] team0 (unregistering): Port device veth3 removed [ 67.100097][ T311] team0 (unregistering): Port device team_slave_1 removed [ 67.114016][ T311] team0 (unregistering): Port device team_slave_0 removed [ 67.142699][ T3897] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 67.289874][ T3899] dummy0: left promiscuous mode [ 67.300961][ T3899] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 67.308661][ T3899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.82'. [ 67.317742][ T3899] dummy0: entered promiscuous mode [ 67.348850][ T3884] dummy0: left promiscuous mode [ 67.354721][ T3885] dummy0: entered promiscuous mode [ 67.401337][ T3889] dummy0: entered promiscuous mode [ 67.460336][ T3898] bond1: (slave veth5): Enslaving as an active interface with a down link [ 68.669323][ T28] audit: type=1400 audit(1783857198.082:435): avc: denied { read } for pid=3916 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.869140][ T3912] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 68.893644][ T3919] loop4: detected capacity change from 0 to 1024 [ 68.906458][ T3913] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 68.917825][ T3919] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 68.917825][ T3919] [ 68.953560][ T28] audit: type=1400 audit(1783857198.372:436): avc: denied { write } for pid=3903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.985499][ T3917] geneve1: entered promiscuous mode [ 69.025076][ T28] audit: type=1400 audit(1783857198.442:437): avc: denied { write } for pid=3929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.050772][ T3930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.85'. [ 69.068017][ T3917] geneve1: left promiscuous mode [ 69.111763][ T3934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'. [ 69.157185][ T3914] bond2: (slave veth5): Enslaving as an active interface with a down link [ 69.175485][ T3928] dummy0: left promiscuous mode [ 69.183197][ T3928] bond2: (slave dummy0): making interface the new active one [ 69.191022][ T3928] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 69.229745][ T3930] dummy0: entered promiscuous mode [ 69.258902][ T3930] bond2: (slave dummy0): Releasing active interface [ 69.440236][ T3931] dummy0: left promiscuous mode [ 69.460779][ T3934] dummy0: entered promiscuous mode [ 69.469611][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.197343][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.853963][ T28] audit: type=1400 audit(1783857200.232:438): avc: denied { accept } for pid=3939 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 70.890533][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.163073][ T3817] bridge_slave_0: entered allmulticast mode [ 71.169824][ T3817] bridge_slave_0: entered promiscuous mode [ 71.176890][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.184012][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.191481][ T3817] bridge_slave_1: entered allmulticast mode [ 71.198525][ T3817] bridge_slave_1: entered promiscuous mode [ 71.366920][ T28] audit: type=1400 audit(1783857200.232:439): avc: denied { write } for pid=3939 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.477401][ T28] audit: type=1400 audit(1783857200.232:440): avc: denied { nlmsg_write } for pid=3939 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.634261][ T28] audit: type=1400 audit(1783857200.302:441): avc: denied { mounton } for pid=3954 comm="syz.4.88" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 71.709410][ T28] audit: type=1400 audit(1783857200.302:442): avc: denied { getopt } for pid=3939 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.788977][ T28] audit: type=1400 audit(1783857200.812:443): avc: denied { write } for pid=3942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.836001][ T28] audit: type=1400 audit(1783857200.982:444): avc: denied { write } for pid=3964 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.131238][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.138791][ T311] IPVS: stop unused estimator thread 0... [ 72.163768][ T3817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.354429][ T3969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.380596][ T3817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.434179][ T3817] team0: Port device team_slave_0 added [ 72.441593][ T3817] team0: Port device team_slave_1 added [ 72.480494][ T3969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.494869][ T3817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.505145][ T3817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.549048][ T3817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.563882][ T3991] validate_nla: 2 callbacks suppressed [ 72.563916][ T3991] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 72.580370][ T3817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.587662][ T3817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.624428][ T3817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.658343][ T3984] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.721351][ T3997] bond2: (slave veth7): Enslaving as an active interface with a down link [ 72.734871][ T3969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.747617][ T4003] dummy0: left promiscuous mode [ 72.760306][ T3991] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 72.770342][ T4003] bond2: (slave dummy0): making interface the new active one [ 72.777908][ T3991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.90'. [ 72.788358][ T4003] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 72.797929][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 72.808659][ T3998] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.835981][ T3991] dummy0: entered promiscuous mode [ 72.841980][ T3991] bond2: (slave dummy0): Releasing active interface [ 72.851682][ T3984] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.870728][ T3969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.885825][ T3817] hsr_slave_0: entered promiscuous mode [ 72.896444][ T3817] hsr_slave_1: entered promiscuous mode [ 72.903009][ T3817] debugfs: 'hsr0' already exists in 'hsr' [ 72.908851][ T3817] Cannot create hsr debugfs directory [ 72.916237][ T3998] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.930370][ T3984] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.965963][ T311] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.000029][ T3998] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.024430][ T311] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045397][ T3984] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.068483][ T311] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.100742][ T3998] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.124258][ T311] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.148558][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.195807][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.210034][ T68] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.375129][ T3869] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.383435][ T3869] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.417171][ T3869] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.606557][ T4015] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 74.200307][ T4022] netlink: 'syz.2.93': attribute type 10 has an invalid length. [ 74.208184][ T4022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 74.452324][ T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.460786][ T30] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.513136][ T4019] netlink: 'syz.4.94': attribute type 1 has an invalid length. [ 74.551672][ T4020] dummy0: left promiscuous mode [ 74.558123][ T4022] dummy0: entered promiscuous mode [ 74.616280][ T4023] dummy0: left promiscuous mode [ 74.624519][ T4023] netlink: 'syz.4.94': attribute type 10 has an invalid length. [ 74.632232][ T4023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.94'. [ 74.641136][ T4023] dummy0: entered promiscuous mode [ 74.653907][ T3817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.715474][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.852958][ T4035] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 75.004790][ T3817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.036651][ T4035] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 75.044442][ T4035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 75.119078][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.136233][ T4041] loop4: detected capacity change from 0 to 1024 [ 75.200149][ T4036] bond3: (slave veth7): Enslaving as an active interface with a down link [ 75.225950][ T4039] dummy0: left promiscuous mode [ 75.234262][ T4039] bond3: (slave dummy0): making interface the new active one [ 75.242851][ T4039] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 75.259044][ T4035] dummy0: entered promiscuous mode [ 75.280845][ T4035] bond3: (slave dummy0): Releasing active interface [ 75.300565][ T3817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.319610][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.332917][ T4041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.355596][ T4042] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.357048][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 75.357156][ T28] audit: type=1400 audit(1783857204.772:451): avc: denied { write } for pid=4040 comm="syz.4.98" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.423519][ T3817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.433773][ T3817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.470900][ T3817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.481857][ T3817] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.501849][ T3817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.512429][ T3817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.550729][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.557913][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.592001][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.599204][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.641179][ T4049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.98'. [ 75.659097][ T4042] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.755377][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.767058][ T4065] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 75.892277][ T4067] dummy0: left promiscuous mode [ 75.906281][ T4067] netlink: 'syz.2.97': attribute type 10 has an invalid length. [ 75.914213][ T4067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.97'. [ 75.923351][ T4067] dummy0: entered promiscuous mode [ 75.941679][ T4042] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.761647][ T4042] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.802385][ T4075] loop4: detected capacity change from 0 to 2048 [ 76.823563][ T4075] EXT4-fs: test_dummy_encryption option not supported [ 76.871025][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.893984][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.922893][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.959068][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.999866][ T4078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 77.049132][ T4080] loop0: detected capacity change from 0 to 2048 [ 77.080658][ T4080] EXT4-fs: test_dummy_encryption option not supported [ 77.207804][ T4084] loop4: detected capacity change from 0 to 1024 [ 77.239296][ T4084] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 77.239296][ T4084] [ 77.549477][ T4086] loop2: detected capacity change from 0 to 1024 [ 77.719481][ T4086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.731854][ T28] audit: type=1400 audit(1783857207.112:452): avc: denied { read write } for pid=4089 comm="syz.3.106" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.760165][ T28] audit: type=1400 audit(1783857207.112:453): avc: denied { open } for pid=4089 comm="syz.3.106" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.783760][ T28] audit: type=1400 audit(1783857207.172:454): avc: denied { write } for pid=4085 comm="syz.2.105" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.850552][ T4097] FAULT_INJECTION: forcing a failure. [ 77.850552][ T4097] name failslab, interval 1, probability 0, space 0, times 1 [ 77.993277][ T4097] CPU: 0 UID: 0 PID: 4097 Comm: syz.3.107 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 77.993320][ T4097] Tainted: [W]=WARN [ 77.993330][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.993384][ T4097] Call Trace: [ 77.993394][ T4097] [ 77.993408][ T4097] __dump_stack+0x1d/0x30 [ 77.993438][ T4097] dump_stack_lvl+0x95/0xd0 [ 77.993479][ T4097] dump_stack+0x15/0x1b [ 77.993505][ T4097] should_fail_ex+0x25e/0x270 [ 77.993545][ T4097] should_failslab+0x8c/0xb0 [ 77.993618][ T4097] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 77.993650][ T4097] ? __alloc_skb+0x2db/0x6f0 [ 77.993680][ T4097] ? __alloc_skb+0x2db/0x6f0 [ 77.993740][ T4097] ? avc_has_perm+0x101/0x190 [ 77.993771][ T4097] __alloc_skb+0x2db/0x6f0 [ 77.993804][ T4097] ? __alloc_skb+0x205/0x6f0 [ 77.993829][ T4097] netlink_alloc_large_skb+0xbf/0xf0 [ 77.994016][ T4097] netlink_sendmsg+0x40c/0x6f0 [ 77.994044][ T4097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.994069][ T4097] ____sys_sendmsg+0x532/0x580 [ 77.994155][ T4097] ___sys_sendmsg+0x195/0x1e0 [ 77.994234][ T4097] __x64_sys_sendmsg+0xd4/0x160 [ 77.994278][ T4097] x64_sys_call+0x194c/0x3020 [ 77.994303][ T4097] do_syscall_64+0x136/0x3c0 [ 77.994378][ T4097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.994408][ T4097] RIP: 0033:0x7efe265bde59 [ 77.994429][ T4097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.994465][ T4097] RSP: 002b:00007efe25017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.994554][ T4097] RAX: ffffffffffffffda RBX: 00007efe26845fa0 RCX: 00007efe265bde59 [ 77.994568][ T4097] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 77.994585][ T4097] RBP: 00007efe25017090 R08: 0000000000000000 R09: 0000000000000000 [ 77.994604][ T4097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.994621][ T4097] R13: 00007efe26846038 R14: 00007efe26845fa0 R15: 00007ffe66feacb8 [ 77.994646][ T4097] [ 78.332109][ T4086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.105'. [ 78.498679][ T4101] loop3: detected capacity change from 0 to 512 [ 78.600619][ T4101] EXT4-fs (loop3): 1 orphan inode deleted [ 78.633785][ T4101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.773645][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.798039][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.810401][ T3817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.799896][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 80.320771][ T4121] validate_nla: 3 callbacks suppressed [ 80.320877][ T4121] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 80.343829][ T4124] loop2: detected capacity change from 0 to 512 [ 80.397457][ T4124] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.111: corrupted inode contents [ 80.409308][ T4124] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.409955][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.425584][ C0] EXT4-fs (loop2): initial error at time 1783857209: ext4_do_update_inode:5742: inode 16 [ 80.435458][ C0] EXT4-fs (loop2): last error at time 1783857209: ext4_do_update_inode:5742: inode 16 [ 80.445415][ T4131] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 80.453248][ T4131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 80.464975][ T4124] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.111: mark_inode_dirty error [ 80.476267][ T4124] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.494783][ T4124] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.111: corrupted inode contents [ 80.516199][ T4124] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.518733][ T4124] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.111: mark_inode_dirty error [ 80.539212][ T4124] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.548399][ T4124] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.111: corrupted inode contents [ 80.569459][ T4124] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.570870][ T4124] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 80.588666][ T4124] loop2: lost filesystem error report for type 5 error -117 [ 80.590114][ T4124] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.111: corrupted inode contents [ 80.609353][ T4124] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.611858][ T4124] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.111: mark_inode_dirty error [ 80.713064][ T4124] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 80.714590][ T4124] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 80.732664][ T4124] loop2: lost filesystem error report for type 5 error -117 [ 80.736430][ T4124] EXT4-fs (loop2): 1 truncate cleaned up [ 80.751102][ T4124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.763831][ T4124] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.798467][ T30] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.846800][ T4123] dummy0: left promiscuous mode [ 80.853268][ T4131] dummy0: entered promiscuous mode [ 80.869074][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 1 [ 81.287371][ T28] audit: type=1400 audit(1783857210.692:455): avc: denied { create } for pid=4146 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.947159][ T28] audit: type=1400 audit(1783857210.692:456): avc: denied { bind } for pid=4146 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.966637][ T28] audit: type=1400 audit(1783857211.232:457): avc: denied { connect } for pid=4146 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.345613][ T28] audit: type=1400 audit(1783857211.762:458): avc: denied { block_suspend } for pid=4146 comm="syz.3.115" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.373077][ T4151] pim6reg: entered allmulticast mode [ 82.378743][ T4152] pim6reg: left allmulticast mode [ 82.588882][ T4150] loop4: detected capacity change from 0 to 512 [ 82.618379][ T3817] veth0_vlan: entered promiscuous mode [ 82.644863][ T3817] veth1_vlan: entered promiscuous mode [ 82.668401][ T3817] veth0_macvtap: entered promiscuous mode [ 82.677515][ T3817] veth1_macvtap: entered promiscuous mode [ 82.694591][ T3817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.705626][ T3817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.795342][ T4150] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.114: corrupted inode contents [ 82.808516][ T4150] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.809670][ T4150] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.114: mark_inode_dirty error [ 82.820079][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 82.820106][ C1] EXT4-fs (loop4): initial error at time 1783857212: ext4_do_update_inode:5742: inode 16 [ 82.820227][ C1] EXT4-fs (loop4): last error at time 1783857212: ext4_do_update_inode:5742: inode 16 [ 82.858965][ T4150] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.862489][ T4150] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.114: corrupted inode contents [ 82.884285][ T4150] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.886633][ T4150] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.114: mark_inode_dirty error [ 82.909419][ T4150] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.114: corrupted inode contents [ 82.922819][ T4150] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 82.932545][ T4150] loop4: lost filesystem error report for type 5 error -117 [ 82.934885][ T4150] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.114: corrupted inode contents [ 82.956141][ T4150] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.114: mark_inode_dirty error [ 82.969270][ T4150] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 82.979156][ T4150] loop4: lost filesystem error report for type 5 error -117 [ 82.984259][ T4150] EXT4-fs (loop4): 1 truncate cleaned up [ 83.005566][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.019629][ T4150] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.099658][ T311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.108704][ T311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.168737][ T311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.220015][ T4150] syz.4.114 (4150) used greatest stack depth: 8704 bytes left [ 83.229139][ T28] audit: type=1400 audit(1783857212.562:459): avc: denied { mounton } for pid=3817 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 83.257256][ T311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.387898][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 83.405353][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 83.516174][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.530945][ T28] audit: type=1400 audit(1783857212.942:460): avc: denied { write } for pid=4162 comm="syz.0.116" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.560500][ T4163] usb usb7: usbfs: process 4163 (syz.0.116) did not claim interface 0 before use [ 83.611845][ T4165] loop3: detected capacity change from 0 to 1024 [ 83.818273][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.851518][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.875012][ T4174] loop2: detected capacity change from 0 to 512 [ 83.912932][ T4174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.925740][ T4174] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.985868][ T28] audit: type=1400 audit(1783857213.362:461): avc: denied { write } for pid=4166 comm="syz.2.117" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.087282][ T4169] loop0: detected capacity change from 0 to 512 [ 84.099039][ T28] audit: type=1400 audit(1783857213.362:462): avc: denied { write } for pid=4166 comm="syz.2.117" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.383378][ T4175] netlink: 'syz.5.72': attribute type 1 has an invalid length. [ 84.398616][ T4182] netlink: 32 bytes leftover after parsing attributes in process `syz.3.118'. [ 84.515807][ T4180] netlink: 'syz.5.72': attribute type 10 has an invalid length. [ 84.558492][ T4180] netlink: 40 bytes leftover after parsing attributes in process `syz.5.72'. [ 84.565140][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.614459][ T4180] dummy0: entered promiscuous mode [ 84.622106][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.730132][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 84.763290][ T4169] EXT4-fs (loop0): 1 orphan inode deleted [ 84.832570][ T4212] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 84.833474][ T4169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.037585][ T4228] loop4: detected capacity change from 0 to 512 [ 85.110861][ T4228] EXT4-fs: Ignoring removed nobh option [ 85.121689][ T4232] loop2: detected capacity change from 0 to 128 [ 85.141061][ T4233] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 85.189691][ T4232] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.251677][ T4232] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.316537][ T4228] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 85.337737][ T4238] netlink: 'syz.3.126': attribute type 10 has an invalid length. [ 85.345583][ T4238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.126'. [ 85.399793][ T4228] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.125: attempt to clear invalid blocks 1 len 1 [ 85.429987][ T4232] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 63: comm syz.2.128: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 85.454074][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.480060][ T4228] fserror_report: 4 callbacks suppressed [ 85.480117][ T4228] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 85.486344][ T4228] EXT4-fs (loop4): Remounting filesystem read-only [ 85.495532][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 85.495573][ C0] EXT4-fs (loop4): initial error at time 1783857214: ext4_clear_blocks:876: inode 13 [ 85.495611][ C0] EXT4-fs (loop4): last error at time 1783857214: ext4_clear_blocks:876: inode 13 [ 85.528805][ T4232] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 85.531965][ T4228] EXT4-fs (loop4): 1 truncate cleaned up [ 85.543043][ T4228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.573279][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.768114][ T4233] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 85.790173][ T4237] dummy0: left promiscuous mode [ 85.805465][ T4238] dummy0: entered promiscuous mode [ 85.816631][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.862611][ T4252] loop4: detected capacity change from 0 to 1024 [ 85.922334][ T4252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.944386][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 85.944403][ T28] audit: type=1400 audit(1783857215.362:480): avc: denied { write } for pid=4251 comm="syz.4.133" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.045686][ T28] audit: type=1400 audit(1783857215.432:481): avc: denied { setopt } for pid=4263 comm="syz.5.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.066741][ T4268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 86.076590][ T4265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.135'. [ 86.085805][ T28] audit: type=1400 audit(1783857215.442:482): avc: denied { getopt } for pid=4263 comm="syz.5.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.092465][ T4262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.133'. [ 86.116740][ T28] audit: type=1400 audit(1783857215.532:483): avc: denied { bind } for pid=4263 comm="syz.5.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.188180][ T28] audit: type=1400 audit(1783857215.602:484): avc: denied { write } for pid=4253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.246873][ T28] audit: type=1400 audit(1783857215.662:485): avc: denied { write } for pid=4279 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.370659][ T4292] loop5: detected capacity change from 0 to 1024 [ 86.383219][ T4292] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 86.383219][ T4292] [ 86.388241][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.467938][ T4300] loop0: detected capacity change from 0 to 256 [ 86.536888][ T4310] capability: warning: `syz.2.147' uses 32-bit capabilities (legacy support in use) [ 86.548689][ T28] audit: type=1400 audit(1783857215.912:486): avc: denied { write } for pid=4288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.625469][ T28] audit: type=1400 audit(1783857216.042:487): avc: denied { write } for pid=4311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.615604][ T4317] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 87.649822][ T28] audit: type=1400 audit(1783857217.062:488): avc: denied { ioctl } for pid=4298 comm="syz.0.145" path="socket:[8416]" dev="sockfs" ino=8416 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.729038][ T4326] dummy0: left promiscuous mode [ 87.735980][ T4326] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 87.743788][ T4326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.144'. [ 87.752757][ T4326] dummy0: entered promiscuous mode [ 87.881191][ T4318] bond2: (slave veth3): Enslaving as an active interface with a down link [ 87.924762][ T4336] loop0: detected capacity change from 0 to 1024 [ 87.968715][ T4336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.022495][ T28] audit: type=1400 audit(1783857217.442:489): avc: denied { write } for pid=4335 comm="syz.0.154" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.065323][ T4351] netlink: 'syz.2.157': attribute type 7 has an invalid length. [ 88.078428][ T4351] netlink: 140 bytes leftover after parsing attributes in process `syz.2.157'. [ 88.182078][ T4355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.154'. [ 88.264270][ T4358] loop3: detected capacity change from 0 to 2048 [ 88.292627][ T4358] EXT4-fs: test_dummy_encryption option not supported [ 88.381607][ T4358] netlink: 'syz.3.158': attribute type 4 has an invalid length. [ 88.670614][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.140119][ T4398] loop5: detected capacity change from 0 to 1024 [ 89.147232][ T4400] loop2: detected capacity change from 0 to 1024 [ 89.157272][ T4398] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 89.157272][ T4398] [ 89.339184][ T4410] loop4: detected capacity change from 0 to 512 [ 89.370709][ T4400] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 89.370709][ T4400] [ 89.385975][ T4412] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 89.549069][ T4417] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 89.556924][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 90.295271][ T4410] EXT4-fs (loop4): 1 orphan inode deleted [ 90.436811][ T4410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.545246][ T4412] bond3: (slave veth9): Enslaving as an active interface with a down link [ 90.650044][ T4416] dummy0: left promiscuous mode [ 90.656595][ T4416] bond3: (slave dummy0): making interface the new active one [ 90.664612][ T4416] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 90.719967][ T4417] dummy0: entered promiscuous mode [ 91.329195][ T4417] bond3: (slave dummy0): Releasing active interface [ 91.663411][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.007340][ T4422] netlink: 160 bytes leftover after parsing attributes in process `syz.3.181'. [ 92.020700][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 92.020716][ T28] audit: type=1400 audit(1783857221.422:503): avc: denied { nlmsg_read } for pid=4421 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.051691][ T4424] FAULT_INJECTION: forcing a failure. [ 92.051691][ T4424] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.070607][ T4424] CPU: 0 UID: 0 PID: 4424 Comm: syz.2.182 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 92.070648][ T4424] Tainted: [W]=WARN [ 92.070655][ T4424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.070702][ T4424] Call Trace: [ 92.070708][ T4424] [ 92.070716][ T4424] __dump_stack+0x1d/0x30 [ 92.070762][ T4424] dump_stack_lvl+0x95/0xd0 [ 92.070844][ T4424] dump_stack+0x15/0x1b [ 92.070865][ T4424] should_fail_ex+0x25e/0x270 [ 92.070903][ T4424] should_fail+0xb/0x20 [ 92.070936][ T4424] should_fail_usercopy+0x1a/0x20 [ 92.071049][ T4424] _copy_from_user+0x1c/0xb0 [ 92.071128][ T4424] ppp_write+0x11b/0x310 [ 92.071160][ T4424] ? vfs_write+0x23b/0x990 [ 92.071184][ T4424] ? __pfx_ppp_write+0x10/0x10 [ 92.071271][ T4424] vfs_write+0x252/0x990 [ 92.071291][ T4424] ? __fget_files+0x184/0x1c0 [ 92.071320][ T4424] ksys_write+0xdc/0x1a0 [ 92.071363][ T4424] __x64_sys_write+0x40/0x50 [ 92.071388][ T4424] x64_sys_call+0x27e1/0x3020 [ 92.071418][ T4424] do_syscall_64+0x136/0x3c0 [ 92.071522][ T4424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.071607][ T4424] RIP: 0033:0x7fc5a830de59 [ 92.071628][ T4424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.071652][ T4424] RSP: 002b:00007fc5a6d67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.071678][ T4424] RAX: ffffffffffffffda RBX: 00007fc5a8595fa0 RCX: 00007fc5a830de59 [ 92.071694][ T4424] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000004 [ 92.071752][ T4424] RBP: 00007fc5a6d67090 R08: 0000000000000000 R09: 0000000000000000 [ 92.071770][ T4424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.071787][ T4424] R13: 00007fc5a8596038 R14: 00007fc5a8595fa0 R15: 00007ffca7fbd248 [ 92.071812][ T4424] [ 92.300136][ T28] audit: type=1400 audit(1783857221.682:504): avc: denied { read } for pid=4421 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.319562][ T4425] netlink: 68 bytes leftover after parsing attributes in process `syz.3.181'. [ 92.328564][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 92.651910][ T4443] netlink: 'syz.5.186': attribute type 1 has an invalid length. [ 92.772176][ T4450] netlink: 'syz.5.186': attribute type 10 has an invalid length. [ 92.780087][ T4450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.186'. [ 92.793536][ T4448] dummy0: left promiscuous mode [ 92.801507][ T4450] dummy0: entered promiscuous mode [ 93.025496][ T4454] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 93.114854][ T4454] loop3: detected capacity change from 0 to 256 [ 93.147384][ T4454] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 324) [ 93.159958][ T4454] FAT-fs (loop3): Filesystem has been set read-only [ 93.169152][ T4454] syz.3.190: attempt to access beyond end of device [ 93.169152][ T4454] loop3: rw=524288, sector=1768, nr_sectors = 32 limit=256 [ 93.201390][ T28] audit: type=1326 audit(1783857222.612:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.2.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a830de59 code=0x0 [ 93.226471][ T4454] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 324) [ 93.227145][ T4456] syz.3.190: attempt to access beyond end of device [ 93.227145][ T4456] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 93.235805][ T4454] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 324) [ 93.258328][ T4454] syz.3.190: attempt to access beyond end of device [ 93.258328][ T4454] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 93.273789][ T4454] Buffer I/O error on dev loop3, logical block 442, async page read [ 93.282219][ T4454] syz.3.190: attempt to access beyond end of device [ 93.282219][ T4454] loop3: rw=0, sector=1772, nr_sectors = 4 limit=256 [ 93.301093][ T4454] Buffer I/O error on dev loop3, logical block 443, async page read [ 93.309162][ T4454] syz.3.190: attempt to access beyond end of device [ 93.309162][ T4454] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 93.322410][ T4454] Buffer I/O error on dev loop3, logical block 442, async page read [ 93.330446][ T4454] syz.3.190: attempt to access beyond end of device [ 93.330446][ T4454] loop3: rw=0, sector=1772, nr_sectors = 4 limit=256 [ 93.343587][ T4454] Buffer I/O error on dev loop3, logical block 443, async page read [ 93.351658][ T4454] syz.3.190: attempt to access beyond end of device [ 93.351658][ T4454] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 93.364969][ T4454] Buffer I/O error on dev loop3, logical block 442, async page read [ 93.374628][ T4454] syz.3.190: attempt to access beyond end of device [ 93.374628][ T4454] loop3: rw=0, sector=1772, nr_sectors = 4 limit=256 [ 93.387904][ T4454] Buffer I/O error on dev loop3, logical block 443, async page read [ 93.396049][ T4454] syz.3.190: attempt to access beyond end of device [ 93.396049][ T4454] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 93.409772][ T4454] Buffer I/O error on dev loop3, logical block 442, async page read [ 93.417906][ T4454] syz.3.190: attempt to access beyond end of device [ 93.417906][ T4454] loop3: rw=0, sector=1772, nr_sectors = 4 limit=256 [ 93.431280][ T4454] Buffer I/O error on dev loop3, logical block 443, async page read [ 93.439362][ T4454] Buffer I/O error on dev loop3, logical block 442, async page read [ 93.465158][ T4454] Buffer I/O error on dev loop3, logical block 443, async page read [ 93.511589][ T4461] loop0: detected capacity change from 0 to 1024 [ 93.535660][ T4461] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 93.535660][ T4461] [ 93.918473][ T4468] netlink: 'syz.5.195': attribute type 1 has an invalid length. [ 93.979872][ T4470] dummy0: left promiscuous mode [ 93.988880][ T4470] netlink: 'syz.5.195': attribute type 10 has an invalid length. [ 93.996725][ T4470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.195'. [ 94.005906][ T4470] dummy0: entered promiscuous mode [ 94.429493][ T4429] loop4: detected capacity change from 0 to 512 [ 94.476914][ T4429] EXT4-fs: Ignoring removed oldalloc option [ 94.489127][ T4473] loop2: detected capacity change from 0 to 256 [ 94.500609][ T4429] EXT4-fs: Ignoring removed i_version option [ 94.725965][ T4429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.767941][ T4429] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.861999][ T4477] capability: warning: `syz.2.197' uses deprecated v2 capabilities in a way that may be insecure [ 94.877965][ T4429] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.180: invalid indirect mapped block 4294967295 (level 1) [ 94.928459][ T4429] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.929954][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 94.945681][ C0] EXT4-fs (loop4): initial error at time 1783857224: ext4_free_branches:1023: inode 11 [ 94.955378][ C0] EXT4-fs (loop4): last error at time 1783857224: ext4_free_branches:1023: inode 11 [ 94.974827][ T4429] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.180: invalid indirect mapped block 4294967295 (level 1) [ 94.991331][ T4429] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.992383][ T4429] EXT4-fs (loop4): 2 truncates cleaned up [ 95.088950][ T4429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.123668][ T4483] loop2: detected capacity change from 0 to 8192 [ 95.169982][ T4483] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 95.314234][ T4483] FAT-fs (loop2): Filesystem has been set read-only [ 95.550281][ T4491] loop3: detected capacity change from 0 to 512 [ 95.760207][ T4491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.202: corrupted inode contents [ 95.772219][ T4491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.772968][ T4491] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.202: mark_inode_dirty error [ 95.782178][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 95.782193][ C0] EXT4-fs (loop3): initial error at time 1783857225: ext4_do_update_inode:5742: inode 16 [ 95.782220][ C0] EXT4-fs (loop3): last error at time 1783857225: ext4_do_update_inode:5742: inode 16 [ 95.819873][ T4491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.825567][ T4491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.202: corrupted inode contents [ 95.846579][ T4491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.847136][ T4491] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.202: mark_inode_dirty error [ 95.867506][ T4491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.868679][ T4491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.202: corrupted inode contents [ 95.889734][ T4491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.890717][ T4491] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 95.908517][ T4491] loop3: lost filesystem error report for type 5 error -117 [ 95.909262][ T4491] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.202: corrupted inode contents [ 95.928486][ T4491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.931233][ T4491] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.202: mark_inode_dirty error [ 95.951481][ T4491] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.952226][ T4491] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 95.970441][ T4491] loop3: lost filesystem error report for type 5 error -117 [ 95.980526][ T4491] EXT4-fs (loop3): 1 truncate cleaned up [ 95.994066][ T4491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.007142][ T4491] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.134774][ T36] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.146193][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 98.467312][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.710649][ T4508] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 98.722614][ T4507] netlink: 'syz.5.205': attribute type 1 has an invalid length. [ 99.207955][ T4505] netlink: 'syz.5.205': attribute type 10 has an invalid length. [ 99.215788][ T4505] netlink: 40 bytes leftover after parsing attributes in process `syz.5.205'. [ 99.224827][ T4506] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 99.232600][ T4506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.204'. [ 99.244948][ T4509] bond1: (slave veth3): Enslaving as an active interface with a down link [ 99.255154][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.270209][ T4504] dummy0: left promiscuous mode [ 99.277939][ T4504] bond1: (slave dummy0): making interface the new active one [ 99.285847][ T4504] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 99.294594][ T4503] dummy0: left promiscuous mode [ 99.301682][ T4505] dummy0: entered promiscuous mode [ 99.308887][ T4506] dummy0: entered promiscuous mode [ 99.317922][ T4506] bond1: (slave dummy0): Releasing active interface [ 99.357234][ T4519] loop3: detected capacity change from 0 to 764 [ 99.370302][ T4519] iso9660: Unknown parameter 'ޥ @Aڜ&Z7T0|{]5mEQYWKNǭ#RiewI&6RjO!UJh$hI@ [ 99.370302][ T4519] {he{Xp1 [ 99.370302][ T4519] gvZ} H*T&WtQ}s1WҌC(fo-@HS1844674407370955161501777777777777777777777' [ 99.503426][ T4520] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 99.579837][ T4521] bond4: (slave veth11): Enslaving as an active interface with a down link [ 99.591117][ T4520] dummy0: left promiscuous mode [ 99.597345][ T4520] bond4: (slave dummy0): making interface the new active one [ 99.605230][ T4520] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 99.614380][ T4520] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 99.622172][ T4520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.208'. [ 99.631105][ T4520] dummy0: entered promiscuous mode [ 99.637049][ T4520] bond4: (slave dummy0): Releasing active interface [ 100.433668][ T4527] dvmrp1: entered allmulticast mode [ 101.377728][ T4532] loop2: detected capacity change from 0 to 512 [ 101.395395][ T4534] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.611300][ T4532] EXT4-fs: Ignoring removed orlov option [ 101.824936][ T4543] loop0: detected capacity change from 0 to 1024 [ 101.870398][ T4532] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.421140][ T4527] loop5: detected capacity change from 0 to 256 [ 102.431659][ T4527] vfat: Unknown parameter '' [ 102.792902][ T4543] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 102.792902][ T4543] [ 102.821203][ T4534] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.260906][ T4532] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.210: invalid indirect mapped block 32768 (level 2) [ 103.274449][ T4532] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.279923][ T4532] EXT4-fs (loop2): 1 orphan inode deleted [ 103.294812][ T4532] EXT4-fs (loop2): 1 truncate cleaned up [ 103.300787][ T4532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.397254][ T4534] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.422042][ T28] audit: type=1400 audit(1783857232.842:506): avc: denied { write } for pid=4546 comm="syz.3.214" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.459173][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 103.468187][ T28] audit: type=1400 audit(1783857232.842:507): avc: denied { open } for pid=4546 comm="syz.3.214" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.494330][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 103.506100][ T4534] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.518924][ T28] audit: type=1400 audit(1783857232.932:508): avc: denied { ioctl } for pid=4546 comm="syz.3.214" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.545602][ T4547] netlink: 516 bytes leftover after parsing attributes in process `syz.3.214'. [ 103.588632][ T4549] loop3: detected capacity change from 0 to 1024 [ 103.603203][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.646568][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.821192][ T4549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.945875][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.978178][ T4556] netlink: 'syz.5.216': attribute type 1 has an invalid length. [ 104.619996][ T28] audit: type=1400 audit(1783857233.272:509): avc: denied { write } for pid=4548 comm="syz.3.215" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.770063][ T4561] netlink: 'syz.5.216': attribute type 10 has an invalid length. [ 104.777854][ T4561] netlink: 40 bytes leftover after parsing attributes in process `syz.5.216'. [ 105.014488][ T4549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.215'. [ 105.028488][ T4560] dummy0: left promiscuous mode [ 105.036259][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.056030][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.170207][ T4567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.217'. [ 106.322287][ T4575] loop0: detected capacity change from 0 to 2048 [ 106.330665][ T4575] EXT4-fs: test_dummy_encryption option not supported [ 106.346874][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.474639][ T4576] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 106.540927][ T4576] bond3: (slave veth5): Enslaving as an active interface with a down link [ 106.555590][ T4576] dummy0: left promiscuous mode [ 106.566250][ T4576] bond3: (slave dummy0): making interface the new active one [ 106.575351][ T4576] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 106.586067][ T4576] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 106.593988][ T4576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.220'. [ 106.602928][ T4576] dummy0: entered promiscuous mode [ 106.611312][ T4576] bond3: (slave dummy0): Releasing active interface [ 106.700352][ T4570] netlink: 'syz.0.219': attribute type 4 has an invalid length. [ 106.908273][ T4582] netlink: 'syz.5.222': attribute type 1 has an invalid length. [ 106.966928][ T4582] netlink: 'syz.5.222': attribute type 10 has an invalid length. [ 106.974811][ T4582] netlink: 40 bytes leftover after parsing attributes in process `syz.5.222'. [ 106.984082][ T4582] dummy0: entered promiscuous mode [ 107.151157][ T28] audit: type=1400 audit(1783857236.522:510): avc: denied { watch watch_reads } for pid=4593 comm="syz.4.228" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 107.285421][ T4602] loop4: detected capacity change from 0 to 512 [ 107.407542][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.422151][ T4602] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.448889][ T28] audit: type=1400 audit(1783857236.862:511): avc: denied { setattr } for pid=4601 comm="syz.4.229" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.505735][ T28] audit: type=1400 audit(1783857236.862:512): avc: denied { read append } for pid=4601 comm="syz.4.229" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 107.529543][ T28] audit: type=1400 audit(1783857236.862:513): avc: denied { open } for pid=4601 comm="syz.4.229" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 107.540832][ T4602] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.229: iget: bad i_size value: 2533274857506816 [ 107.567022][ T28] audit: type=1400 audit(1783857236.862:514): avc: denied { ioctl } for pid=4601 comm="syz.4.229" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 107.602888][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.679194][ T28] audit: type=1400 audit(1783857237.092:515): avc: denied { bind } for pid=4605 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.700431][ T4607] syz_tun: entered allmulticast mode [ 107.723586][ T4607] dvmrp8: entered allmulticast mode [ 107.726966][ T4609] loop5: detected capacity change from 0 to 2048 [ 107.736309][ T4609] EXT4-fs: test_dummy_encryption option not supported [ 107.749457][ T4609] netlink: 'syz.5.231': attribute type 4 has an invalid length. [ 107.762499][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.444875][ T4623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.454019][ T4623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.053905][ T4631] netlink: 'syz.5.236': attribute type 1 has an invalid length. [ 109.541423][ T4631] dummy0: left promiscuous mode [ 109.662317][ T4631] netlink: 'syz.5.236': attribute type 10 has an invalid length. [ 109.670366][ T4631] netlink: 40 bytes leftover after parsing attributes in process `syz.5.236'. [ 109.679733][ T4631] dummy0: entered promiscuous mode [ 109.819995][ T3772] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.330169][ T4634] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 110.680153][ T4606] syz_tun: left allmulticast mode [ 110.922750][ T4634] netlink: 'syz.2.237': attribute type 10 has an invalid length. [ 110.930614][ T4634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.237'. [ 110.939644][ T4637] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 111.033813][ T4643] dummy0: left promiscuous mode [ 111.040562][ T4643] bond5: (slave dummy0): making interface the new active one [ 111.048314][ T4643] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 111.050172][ T4636] netlink: 'syz.0.235': attribute type 10 has an invalid length. [ 111.064649][ T4636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.235'. [ 111.073640][ T4636] dummy0: entered promiscuous mode [ 111.148308][ T4636] bond5: (slave dummy0): Releasing active interface [ 111.567405][ T4659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.576511][ T4659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.595936][ T4660] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 111.707383][ T4661] bond3: (slave veth7): Enslaving as an active interface with a down link [ 111.719650][ T4660] dummy0: left promiscuous mode [ 111.727662][ T4660] bond3: (slave dummy0): making interface the new active one [ 111.736760][ T4660] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 111.748165][ T4660] netlink: 'syz.2.241': attribute type 10 has an invalid length. [ 111.756014][ T4660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 111.765052][ T4660] dummy0: entered promiscuous mode [ 111.846207][ T4660] bond3: (slave dummy0): Releasing active interface [ 112.218257][ T4655] loop0: detected capacity change from 0 to 512 [ 112.440523][ T4655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.456874][ T4667] loop3: detected capacity change from 0 to 512 [ 112.540088][ T4655] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.599273][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 112.599291][ T28] audit: type=1400 audit(1783857242.012:517): avc: denied { write } for pid=4653 comm="syz.0.242" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.686583][ T28] audit: type=1400 audit(1783857242.012:518): avc: denied { write } for pid=4653 comm="syz.0.242" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.717784][ T4667] EXT4-fs (loop3): 1 orphan inode deleted [ 112.743051][ T4667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.774170][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.962031][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.073900][ T4688] loop0: detected capacity change from 0 to 512 [ 113.135427][ T4689] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 113.250914][ T4689] dummy0: left promiscuous mode [ 113.263164][ T4689] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 113.271080][ T4689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.248'. [ 113.280357][ T4689] dummy0: entered promiscuous mode [ 113.315101][ T4688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.329125][ T4688] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.474815][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 113.486501][ T4688] netlink: 17 bytes leftover after parsing attributes in process `syz.0.249'. [ 114.056819][ T4704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.252'. [ 114.133056][ T4701] bond4: (slave veth9): Enslaving as an active interface with a down link [ 114.146846][ T4699] dummy0: left promiscuous mode [ 114.155852][ T4699] bond4: (slave dummy0): making interface the new active one [ 114.164952][ T4699] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 114.180826][ T4704] dummy0: entered promiscuous mode [ 114.187332][ T4704] bond4: (slave dummy0): Releasing active interface [ 114.199432][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.228309][ T4707] loop0: detected capacity change from 0 to 512 [ 114.240301][ T4707] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.254: attempt to clear invalid blocks 2 len 1 [ 114.253186][ T4707] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 114.255174][ T4707] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, [ 114.264379][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 114.264410][ C0] EXT4-fs (loop0): initial error at time 1783857243: ext4_clear_blocks:876: inode 13 [ 114.264444][ C0] EXT4-fs (loop0): last error at time 1783857243: ext4_clear_blocks:876: inode 13 [ 114.298081][ T4707] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 114.306612][ T4707] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.254: invalid indirect mapped block 1819239214 (level 0) [ 114.320547][ T4707] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 114.320771][ T4707] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.254: invalid indirect mapped block 1819239214 (level 1) [ 114.343851][ T4707] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 114.359929][ T4713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.257'. [ 114.393672][ T4707] EXT4-fs (loop0): 1 truncate cleaned up [ 114.399819][ T4707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.586163][ T4716] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.633048][ T4744] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.659778][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.711522][ T4716] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.737420][ T4744] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.858379][ T4716] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.903739][ T4744] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.934051][ T4716] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.011757][ T4744] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.039931][ T329] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.053980][ T329] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.079411][ T329] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.099037][ T329] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.107362][ T329] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.120496][ T329] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.129026][ T329] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.189838][ T329] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.204472][ T4780] validate_nla: 3 callbacks suppressed [ 115.204525][ T4780] netlink: 'syz.5.263': attribute type 1 has an invalid length. [ 115.306591][ T4782] bond2: (slave veth5): Enslaving as an active interface with a down link [ 115.325621][ T4780] dummy0: left promiscuous mode [ 115.337053][ T4780] bond2: (slave dummy0): making interface the new active one [ 115.345890][ T4780] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 115.357552][ T4780] netlink: 'syz.5.263': attribute type 10 has an invalid length. [ 115.365438][ T4780] netlink: 40 bytes leftover after parsing attributes in process `syz.5.263'. [ 115.374518][ T4780] dummy0: entered promiscuous mode [ 115.386902][ T4780] bond2: (slave dummy0): Releasing active interface [ 115.736695][ T4786] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 115.769718][ T4786] bond5: (slave veth11): Enslaving as an active interface with a down link [ 115.783697][ T4786] dummy0: left promiscuous mode [ 115.791363][ T4786] bond5: (slave dummy0): making interface the new active one [ 115.799351][ T4786] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 115.811043][ T4786] netlink: 'syz.3.266': attribute type 10 has an invalid length. [ 115.818819][ T4786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 115.827808][ T4786] dummy0: entered promiscuous mode [ 115.882275][ T4786] bond5: (slave dummy0): Releasing active interface [ 116.161630][ T4798] netlink: 'syz.5.268': attribute type 1 has an invalid length. [ 116.870268][ T4803] netlink: 'syz.5.268': attribute type 10 has an invalid length. [ 116.878122][ T4803] netlink: 40 bytes leftover after parsing attributes in process `syz.5.268'. [ 116.980660][ T4798] bond3: (slave veth7): Enslaving as an active interface with a down link [ 117.059927][ T4801] dummy0: left promiscuous mode [ 117.066759][ T4801] bond3: (slave dummy0): making interface the new active one [ 117.074680][ T4801] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 117.151404][ T4803] dummy0: entered promiscuous mode [ 117.196341][ T4803] bond3: (slave dummy0): Releasing active interface [ 118.039986][ T4817] netlink: 14 bytes leftover after parsing attributes in process `syz.3.275'. [ 118.391118][ T4820] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 118.790848][ T28] audit: type=1400 audit(1783857248.212:519): avc: denied { name_bind } for pid=4825 comm="syz.4.279" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.070531][ T4828] netlink: 'syz.5.278': attribute type 1 has an invalid length. [ 119.081905][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 119.296089][ T4828] netlink: 'syz.5.278': attribute type 10 has an invalid length. [ 119.304044][ T4828] netlink: 40 bytes leftover after parsing attributes in process `syz.5.278'. [ 119.331148][ T4830] bond4: (slave veth9): Enslaving as an active interface with a down link [ 119.340354][ T4832] dummy0: left promiscuous mode [ 119.348827][ T4832] bond4: (slave dummy0): making interface the new active one [ 119.357299][ T4832] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 119.371935][ T4828] dummy0: entered promiscuous mode [ 119.382201][ T4828] bond4: (slave dummy0): Releasing active interface [ 119.744290][ T4846] Cannot find map_set index 0 as target [ 119.753139][ T4833] loop0: detected capacity change from 0 to 512 [ 119.759457][ T4845] loop2: detected capacity change from 0 to 512 [ 119.930695][ T4854] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 119.962280][ T4854] bond6: (slave veth13): Enslaving as an active interface with a down link [ 119.972505][ T4854] dummy0: left promiscuous mode [ 119.978916][ T4854] bond6: (slave dummy0): making interface the new active one [ 119.986881][ T4854] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 120.210058][ T4854] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 120.217891][ T4854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.284'. [ 120.226860][ T4854] dummy0: entered promiscuous mode [ 120.755059][ T4845] EXT4-fs (loop2): 1 orphan inode deleted [ 120.769410][ T4845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.899722][ T4854] bond6: (slave dummy0): Releasing active interface [ 120.908118][ T4860] loop4: detected capacity change from 0 to 512 [ 121.221819][ T4833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.309783][ T4860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.322593][ T4860] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.382699][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.392191][ T28] audit: type=1400 audit(1783857250.762:520): avc: denied { write } for pid=4839 comm="syz.4.285" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.461868][ T4833] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.732127][ T28] audit: type=1400 audit(1783857250.762:521): avc: denied { write } for pid=4839 comm="syz.4.285" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.826119][ T4872] loop3: detected capacity change from 0 to 512 [ 121.834826][ T4872] EXT4-fs: Ignoring removed nobh option [ 121.848764][ T4872] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.855788][ T4872] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.292: EA inode hash validation failed [ 121.868260][ T4872] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.882054][ T4872] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.292: corrupted inode contents [ 121.893840][ T4872] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.894295][ T4872] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.292: mark_inode_dirty error [ 121.914671][ T4872] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.915378][ T4872] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.292: corrupted inode contents [ 121.924900][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 121.925260][ C0] EXT4-fs (loop3): initial error at time 1783948401: ext4_do_update_inode:5742: inode 15 [ 121.925699][ C0] EXT4-fs (loop3): last error at time 1783948401: ext4_dirty_inode:6639: inode 15 [ 121.944067][ T4870] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.281: iget: bad i_size value: 2533274857506816 [ 121.989662][ T4872] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.990194][ T4872] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.292: mark_inode_dirty error [ 121.992149][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.999411][ T4872] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.999897][ T4872] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.292: mark inode dirty (error -117) [ 122.041785][ T4872] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.042450][ T4872] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 122.060721][ T4872] EXT4-fs (loop3): 1 orphan inode deleted [ 122.067084][ T4872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.087969][ T28] audit: type=1400 audit(1783948401.477:522): avc: denied { create } for pid=4871 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 122.132059][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.180111][ T4885] loop4: detected capacity change from 0 to 2048 [ 122.196198][ T4885] EXT4-fs: test_dummy_encryption option not supported [ 122.211791][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.222022][ T4885] netlink: 'syz.4.293': attribute type 4 has an invalid length. [ 122.287356][ T4895] netlink: 44 bytes leftover after parsing attributes in process `syz.4.293'. [ 122.313587][ T4889] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.462879][ T4889] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.250175][ T4904] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 123.353597][ T4889] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.392406][ T4902] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 123.418554][ T28] audit: type=1400 audit(1783948402.817:523): avc: denied { read } for pid=4909 comm="syz.5.299" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.450571][ T4896] bond6: (slave veth13): Enslaving as an active interface with a down link [ 123.459368][ T4901] dummy0: left promiscuous mode [ 123.465872][ T4901] bond6: (slave dummy0): making interface the new active one [ 123.473746][ T4901] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 123.488089][ T4896] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 123.496118][ T4896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'. [ 123.507531][ T4902] bond7: (slave veth15): Enslaving as an active interface with a down link [ 123.516366][ T4903] dummy0: left promiscuous mode [ 123.523151][ T4903] bond7: (slave dummy0): making interface the new active one [ 123.531286][ T4903] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 123.541847][ T4902] netlink: 'syz.3.298': attribute type 10 has an invalid length. [ 123.549682][ T4902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.298'. [ 123.558603][ T4902] dummy0: entered promiscuous mode [ 123.564145][ T28] audit: type=1400 audit(1783948402.827:524): avc: denied { open } for pid=4909 comm="syz.5.299" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.587853][ T28] audit: type=1400 audit(1783948402.827:525): avc: denied { kexec_image_load } for pid=4909 comm="syz.5.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 123.613738][ T4902] bond7: (slave dummy0): Releasing active interface [ 123.673341][ T4889] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.684854][ T4896] dummy0: entered promiscuous mode [ 123.690669][ T4896] bond6: (slave dummy0): Releasing active interface [ 123.810166][ T329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.837091][ T329] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.857828][ T4922] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 123.887817][ T28] audit: type=1400 audit(1783948403.297:526): avc: denied { create } for pid=4919 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 123.951814][ T4924] bond4: (slave veth7): Enslaving as an active interface with a down link [ 123.969872][ T4922] dummy0: left promiscuous mode [ 123.978657][ T4922] bond4: (slave dummy0): making interface the new active one [ 123.987313][ T4922] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 123.998260][ T4922] netlink: 'syz.4.300': attribute type 10 has an invalid length. [ 124.006109][ T4922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.300'. [ 124.015073][ T4922] dummy0: entered promiscuous mode [ 124.023936][ T4922] bond4: (slave dummy0): Releasing active interface [ 124.048499][ T329] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.075933][ T4923] loop0: detected capacity change from 0 to 1024 [ 124.082672][ T329] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.101188][ T4923] EXT4-fs: Ignoring removed nobh option [ 124.172939][ T4923] EXT4-fs: Ignoring removed i_version option [ 124.257486][ T4923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.372772][ T4933] loop3: detected capacity change from 0 to 512 [ 124.454451][ T4933] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.304: iget: bad i_size value: 38620345925642 [ 124.469853][ T4933] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.471635][ T4933] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.304: couldn't read orphan inode 15 (err -117) [ 124.480849][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 124.480885][ C0] EXT4-fs (loop3): initial error at time 1783948403: ext4_orphan_get:1399: inode 15 [ 124.480915][ C0] EXT4-fs (loop3): last error at time 1783948403: ext4_orphan_get:1399: inode 15 [ 124.518065][ T4933] loop3: lost filesystem error report for type 5 error -117 [ 124.520473][ T4933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.542454][ T28] audit: type=1400 audit(1783948403.957:527): avc: denied { write } for pid=4932 comm="syz.3.304" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.581725][ T4943] bond5: option min_links: invalid value (18446744073709551612) [ 124.589469][ T4943] bond5: option min_links: allowed values 0 - 2147483647 [ 124.599660][ T4941] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 124.621119][ T4933] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.629691][ T4943] bond5 (unregistering): Released all slaves [ 124.635578][ T3558] IPVS: starting estimator thread 0... [ 124.642680][ T28] audit: type=1400 audit(1783948403.957:528): avc: denied { add_name } for pid=4932 comm="syz.3.304" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.664809][ T28] audit: type=1400 audit(1783948403.987:529): avc: denied { create } for pid=4942 comm="syz.4.307" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.685683][ T28] audit: type=1400 audit(1783948403.987:530): avc: denied { write } for pid=4942 comm="syz.4.307" name="file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.695204][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.708295][ T28] audit: type=1400 audit(1783948403.987:531): avc: denied { open } for pid=4942 comm="syz.4.307" path="/56/file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.741488][ T4946] IPVS: using max 2160 ests per chain, 108000 per kthread [ 124.752489][ T4933] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.304: bg 0: block 5: invalid block bitmap [ 124.790856][ T4933] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 188 with error 28 [ 124.815638][ T28] audit: type=1400 audit(1783948404.217:532): avc: denied { unlink } for pid=3296 comm="syz-executor" name="file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.845362][ T4950] loop4: detected capacity change from 0 to 512 [ 124.853535][ T4933] EXT4-fs (loop3): This should not happen!! Data will be lost [ 124.853535][ T4933] [ 124.870135][ T4933] EXT4-fs (loop3): Total free blocks count 0 [ 124.897298][ T4950] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.310: iget: bad i_size value: 38620345925642 [ 124.914051][ T4933] EXT4-fs (loop3): Free/Dirty block details [ 124.920034][ T4933] EXT4-fs (loop3): free_blocks=0 [ 124.925012][ T4933] EXT4-fs (loop3): dirty_blocks=188 [ 124.930299][ T4933] EXT4-fs (loop3): Block reservation details [ 124.936425][ T4933] EXT4-fs (loop3): i_reserved_data_blocks=188 [ 124.943988][ T4950] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.948152][ T4950] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.310: couldn't read orphan inode 15 (err -117) [ 124.970036][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 124.997394][ C0] EXT4-fs (loop4): initial error at time 1783948404: ext4_orphan_get:1399: inode 15 [ 125.006901][ C0] EXT4-fs (loop4): last error at time 1783948404: ext4_orphan_get:1399: inode 15 [ 125.099598][ T4950] loop4: lost filesystem error report for type 5 error -117 [ 125.100317][ T4950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.138354][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 125.169980][ T28] audit: type=1400 audit(1783948404.527:533): avc: denied { write } for pid=4949 comm="syz.4.310" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.960742][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.977935][ T4950] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.310: bg 0: block 5: invalid block bitmap [ 125.993022][ T4959] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.122895][ T4962] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 126.131804][ T4960] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 126.147866][ T4950] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 488 with error 28 [ 126.163193][ T4950] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.163193][ T4950] [ 126.179962][ T4950] EXT4-fs (loop4): Total free blocks count 0 [ 126.186151][ T4950] EXT4-fs (loop4): Free/Dirty block details [ 126.192293][ T4950] EXT4-fs (loop4): free_blocks=0 [ 126.197274][ T4950] EXT4-fs (loop4): dirty_blocks=492 [ 126.203055][ T4950] EXT4-fs (loop4): Block reservation details [ 126.209156][ T4950] EXT4-fs (loop4): i_reserved_data_blocks=492 [ 126.225233][ T4950] EXT4-fs (loop4): shut down requested (0) [ 126.231233][ T4963] bond7: (slave veth15): Enslaving as an active interface with a down link [ 126.239981][ T4960] dummy0: left promiscuous mode [ 126.246212][ T4960] bond7: (slave dummy0): making interface the new active one [ 126.253988][ T4960] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 126.262699][ T4961] dummy0: left promiscuous mode [ 126.267623][ T4960] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 126.268086][ T4961] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 126.275463][ T4960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 126.283197][ T4961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.311'. [ 126.292299][ T4960] dummy0: entered promiscuous mode [ 126.308455][ T4960] bond7: (slave dummy0): Releasing active interface [ 126.324050][ T4961] dummy0: entered promiscuous mode [ 126.339970][ T4959] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.365068][ T28] audit: type=1400 audit(1783948405.757:534): avc: denied { mount } for pid=4973 comm="syz.4.314" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.392360][ T28] audit: type=1400 audit(1783948405.757:535): avc: denied { mounton } for pid=4973 comm="syz.4.314" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.424565][ T4967] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.554251][ T4959] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.629040][ T4967] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.637256][ T4987] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 126.733548][ T4959] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.811931][ T4967] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.919930][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.932596][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.956970][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.983363][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.026077][ T4967] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.291280][ T4996] loop5: detected capacity change from 0 to 512 [ 127.395276][ T4996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.431315][ T5002] process 'syz.0.324' launched './file1' with NULL argv: empty string added [ 127.496920][ T3817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.565404][ T5012] loop2: detected capacity change from 0 to 512 [ 127.572690][ T5012] EXT4-fs: Ignoring removed bh option [ 127.618666][ T5011] loop4: detected capacity change from 0 to 2048 [ 127.627400][ T5011] EXT4-fs: test_dummy_encryption option not supported [ 127.644521][ T5012] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.325: corrupted in-inode xattr: e_value size too large [ 127.658837][ T5012] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.659284][ T5012] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.325: couldn't read orphan inode 15 (err -117) [ 127.668467][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 127.668491][ C1] EXT4-fs (loop2): initial error at time 1783948407: ext4_iget_extra_inode:5180: inode 15 [ 127.668518][ C1] EXT4-fs (loop2): last error at time 1783948407: ext4_iget_extra_inode:5180: inode 15 [ 127.706316][ T5012] loop2: lost filesystem error report for type 5 error -117 [ 127.707582][ T5012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.735382][ T5012] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.325: Unrecognised inode hash code 4 [ 127.746815][ T5012] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.325: Corrupt directory, running e2fsck is recommended [ 127.759924][ T5012] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.325: corrupted in-inode xattr: e_value size too large [ 127.776645][ T5012] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.325: Unrecognised inode hash code 4 [ 127.787983][ T5012] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.325: Corrupt directory, running e2fsck is recommended [ 127.800904][ T5012] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.325: corrupted in-inode xattr: e_value size too large [ 127.816321][ T5012] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.325: Unrecognised inode hash code 4 [ 127.827655][ T5012] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.325: Corrupt directory, running e2fsck is recommended [ 127.840527][ T5012] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.325: corrupted in-inode xattr: e_value size too large [ 127.856501][ T5012] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.325: Unrecognised inode hash code 4 [ 127.867828][ T5012] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.325: Corrupt directory, running e2fsck is recommended [ 127.880760][ T5012] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.325: corrupted in-inode xattr: e_value size too large [ 127.897883][ T5012] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.325: Unrecognised inode hash code 4 [ 127.909224][ T5012] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.325: Corrupt directory, running e2fsck is recommended [ 128.150705][ T5008] 0"Pؓ: renamed from bond_slave_1 (while UP) [ 128.241172][ T30] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.331157][ T5011] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 128.344618][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.368606][ T30] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.386156][ T30] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.434650][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.444189][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.467097][ T5022] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 128.513078][ T5011] netlink: 44 bytes leftover after parsing attributes in process `syz.4.328'. [ 128.525244][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.552187][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.569117][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.647591][ T5033] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 128.728306][ T5033] bond6: (slave veth13): Enslaving as an active interface with a down link [ 128.744386][ T5033] dummy0: left promiscuous mode [ 128.798641][ T5036] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 128.806567][ T5036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 128.822712][ T5033] bond6: (slave dummy0): making interface the new active one [ 128.831677][ T5033] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 128.842832][ T5036] dummy0: entered promiscuous mode [ 128.853065][ T5036] bond6: (slave dummy0): Releasing active interface [ 129.354220][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 129.354234][ T28] audit: type=1400 audit(1783948408.727:550): avc: denied { create } for pid=5037 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.380475][ T28] audit: type=1400 audit(1783948408.767:551): avc: denied { bind } for pid=5037 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.585517][ T5047] loop0: detected capacity change from 0 to 128 [ 129.605849][ T28] audit: type=1400 audit(1783948408.997:552): avc: denied { mount } for pid=5041 comm="syz.5.336" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 129.732671][ T5044] loop5: detected capacity change from 0 to 8192 [ 129.746085][ T5044] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.808262][ T28] audit: type=1400 audit(1783948409.207:553): avc: denied { mount } for pid=5050 comm="syz.3.340" name="/" dev="autofs" ino=11223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 129.983175][ T5061] loop2: detected capacity change from 0 to 256 [ 130.000374][ T28] audit: type=1400 audit(1783948409.407:554): avc: denied { bind } for pid=5060 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.048619][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.070041][ T5061] FAT-fs (loop2): codepage cp850 not found [ 130.076210][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.082451][ T28] audit: type=1400 audit(1783948409.477:555): avc: denied { name_bind } for pid=5067 comm="syz.5.346" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 130.203537][ T5075] loop5: detected capacity change from 0 to 256 [ 130.241731][ T28] audit: type=1400 audit(1783948409.477:556): avc: denied { read } for pid=5055 comm="syz.4.342" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 130.275876][ T28] audit: type=1400 audit(1783948409.477:557): avc: denied { open } for pid=5055 comm="syz.4.342" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 130.382082][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 130.453876][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 130.825447][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 130.836787][ T5084] syzkaller0: entered promiscuous mode [ 130.900514][ T28] audit: type=1400 audit(1783948410.307:558): avc: denied { shutdown } for pid=5085 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.944968][ T5084] syzkaller0: entered allmulticast mode [ 131.234343][ T5095] random: crng reseeded on system resumption [ 131.245225][ T28] audit: type=1400 audit(1783948410.647:559): avc: denied { write } for pid=5094 comm="syz.2.356" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.093450][ T5103] syz_tun: entered allmulticast mode [ 132.153825][ T5103] dvmrp6: entered allmulticast mode [ 132.210328][ T5101] syz_tun: left allmulticast mode [ 132.255834][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.259633][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.354468][ T5111] lo speed is unknown, defaulting to 1000 [ 132.363330][ T5111] lo speed is unknown, defaulting to 1000 [ 132.372538][ T5111] lo speed is unknown, defaulting to 1000 [ 132.382279][ T5111] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.393019][ T5111] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 132.428457][ T5111] lo speed is unknown, defaulting to 1000 [ 132.447716][ T5111] lo speed is unknown, defaulting to 1000 [ 132.475077][ T5111] lo speed is unknown, defaulting to 1000 [ 132.494686][ T5111] lo speed is unknown, defaulting to 1000 [ 132.513448][ T5111] lo speed is unknown, defaulting to 1000 [ 132.913945][ T5136] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 133.466310][ T5152] program syz.5.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.718183][ T5161] loop5: detected capacity change from 0 to 512 [ 133.868899][ T5161] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.383: iget: bad i_size value: 38620345925642 [ 133.888177][ T5161] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.889242][ T5161] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.383: couldn't read orphan inode 15 (err -117) [ 133.898501][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 133.898533][ C1] EXT4-fs (loop5): initial error at time 1783948413: ext4_orphan_get:1399: inode 15 [ 133.898571][ C1] EXT4-fs (loop5): last error at time 1783948413: ext4_orphan_get:1399: inode 15 [ 134.041216][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.048466][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.110321][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.121518][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.202889][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.278345][ T3869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.352995][ T3869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.423660][ T3869] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.500450][ T5161] loop5: lost filesystem error report for type 5 error -117 [ 134.501156][ T5161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.623954][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 134.624008][ T28] audit: type=1400 audit(1783948414.037:574): avc: denied { bind } for pid=5174 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.749286][ T28] audit: type=1400 audit(1783948414.067:575): avc: denied { read } for pid=5174 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.805008][ T5161] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.383: bg 0: block 5: invalid block bitmap [ 134.852235][ T28] audit: type=1400 audit(1783948414.077:576): avc: denied { write } for pid=5160 comm="syz.5.383" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.874485][ T5161] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 556 with error 28 [ 134.916967][ T5161] EXT4-fs (loop5): This should not happen!! Data will be lost [ 134.916967][ T5161] [ 134.938865][ T5161] EXT4-fs (loop5): Total free blocks count 0 [ 134.954355][ T5161] EXT4-fs (loop5): Free/Dirty block details [ 134.971156][ T5161] EXT4-fs (loop5): free_blocks=0 [ 134.986549][ T5161] EXT4-fs (loop5): dirty_blocks=560 [ 135.003217][ T5161] EXT4-fs (loop5): Block reservation details [ 135.022769][ T5161] EXT4-fs (loop5): i_reserved_data_blocks=560 [ 135.059441][ T5178] EXT4-fs (loop5): shut down requested (0) [ 135.263722][ T5196] loop5: detected capacity change from 0 to 128 [ 135.330993][ T28] audit: type=1400 audit(1783948670.737:577): avc: denied { bind } for pid=5197 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.390133][ T28] audit: type=1400 audit(1783948670.767:578): avc: denied { setopt } for pid=5197 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.460649][ T5204] xt_hashlimit: size too large, truncated to 1048576 [ 135.488980][ T28] audit: type=1400 audit(1783948670.897:579): avc: denied { read write } for pid=5205 comm="syz.4.397" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.555725][ T28] audit: type=1400 audit(1783948670.897:580): avc: denied { open } for pid=5205 comm="syz.4.397" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.632321][ T3305] ================================================================== [ 135.640475][ T3305] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 135.647993][ T3305] [ 135.650380][ T3305] read-write to 0xffff88811c128108 of 8 bytes by task 5214 on cpu 1: [ 135.658472][ T3305] inode_add_bytes+0x47/0xe0 [ 135.663110][ T3305] __dquot_alloc_space+0x17d/0x890 [ 135.668249][ T3305] shmem_inode_acct_blocks+0x125/0x230 [ 135.673740][ T3305] shmem_get_folio_gfp+0x5d3/0xd90 [ 135.678894][ T3305] shmem_write_begin+0xfc/0x1f0 [ 135.683778][ T3305] generic_perform_write+0x186/0x490 [ 135.689101][ T3305] shmem_file_write_iter+0xc5/0xf0 [ 135.694258][ T3305] __kernel_write_iter+0x30f/0x590 [ 135.699405][ T3305] dump_user_range+0xa73/0xd00 [ 135.704224][ T3305] elf_core_dump+0x21c0/0x2340 [ 135.709017][ T3305] coredump_write+0xaf9/0xdd0 [ 135.713748][ T3305] vfs_coredump+0x2770/0x3290 [ 135.718474][ T3305] get_signal+0xd33/0xf10 [ 135.722863][ T3305] arch_do_signal_or_restart+0x96/0x480 [ 135.728450][ T3305] exit_to_user_mode_loop+0x15d/0x8c0 [ 135.733880][ T3305] ret_from_fork+0x188/0x330 [ 135.738510][ T3305] ret_from_fork_asm+0x1a/0x30 [ 135.743310][ T3305] [ 135.745659][ T3305] read to 0xffff88811c128108 of 8 bytes by task 3305 on cpu 0: [ 135.753235][ T3305] generic_fillattr+0x283/0x340 [ 135.758135][ T3305] shmem_getattr+0x181/0x200 [ 135.762756][ T3305] vfs_getattr_nosec+0x146/0x1e0 [ 135.767739][ T3305] vfs_getattr+0x48/0x60 [ 135.772051][ T3305] vfs_statx_path+0x28/0x140 [ 135.776691][ T3305] vfs_statx+0xc4/0x170 [ 135.780889][ T3305] vfs_fstatat+0x118/0x170 [ 135.780926][ T3305] __se_sys_newfstatat+0x55/0x3e0 [ 135.780958][ T3305] __x64_sys_newfstatat+0x55/0x70 [ 135.780984][ T3305] x64_sys_call+0x2c64/0x3020 [ 135.781008][ T3305] do_syscall_64+0x136/0x3c0 [ 135.781056][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.781085][ T3305] [ 135.781091][ T3305] value changed: 0x0000000000000910 -> 0x0000000000000920 [ 135.781106][ T3305] [ 135.781112][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 135.781143][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 135.781180][ T3305] Tainted: [W]=WARN [ 135.781188][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.781201][ T3305] ==================================================================