last executing test programs: 30.356706211s ago: executing program 3 (id=282): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0x1dc0, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 30.236455904s ago: executing program 3 (id=285): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) splice(r1, 0x0, r1, 0x0, 0x4, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0xc, 0xc4, &(0x7f0000000140)=""/196}, 0x94) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x2, 0x6, @random="ec3c4156e448"}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) getdents64(r6, &(0x7f0000000780)=""/166, 0xa6) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x181000, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x100, 0x1, "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"}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r5, 0x2, 0x6, @local}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fcntl$lock(r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xffffffff, 0x3ff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @binary="56ccabd869c20338"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 29.384343451s ago: executing program 3 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000a5365b4a988839f200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) 29.340552172s ago: executing program 3 (id=293): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) getpid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$SIOCSIFHWADDR(r5, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) ptrace(0x10, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x24014044) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xa, 0x3, 0x806, 0x4e3, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x200, 0x0, 0x44a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x30, 0x25, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) 28.169393899s ago: executing program 3 (id=303): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)={[{@prjquota}, {@nouid32}, {@jqfmt_vfsv0}, {@test_dummy_encryption_v1}, {@bsdgroups}, {@norecovery}, {@resuid={'resuid', 0x3d, r0}}, {@grpjquota}, {@dioread_nolock}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@uid_lt={'uid<', r0}}]}, 0x5, 0x50c, &(0x7f0000001640)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x484c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x5, 0xfffffffffffffbff}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigqueueinfo(0x0, 0x2b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=@setlink={0x60, 0x13, 0x4, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x392}, [@IFLA_PORT_SELF={0xfffffffffffffcb4, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "836ccdac81b8f5661f0e2d4222008a7e"}, @IFLA_PORT_VF={0x8, 0x1, 0x7f}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x12}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "d3e1899be03e5361a930ecc775757926"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x884) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0"], 0x120}}, 0x0) socket(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002340)=""/252, 0xfc}], 0x1}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x80}, 0x1c) 27.884713388s ago: executing program 3 (id=307): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 27.82310628s ago: executing program 32 (id=307): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 24.075524077s ago: executing program 2 (id=341): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x23f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x48000000) io_setup(0x6, &(0x7f00000000c0)) 21.943939423s ago: executing program 2 (id=349): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21.240149896s ago: executing program 2 (id=354): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 21.159127928s ago: executing program 2 (id=355): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) 20.743182581s ago: executing program 2 (id=361): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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") 19.51137501s ago: executing program 2 (id=368): syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x5, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000640)="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", 0x274}, {&(0x7f0000000240)="acf7aad9756b30", 0x7}], 0x3}, 0x44081) 18.771797123s ago: executing program 33 (id=368): syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x5, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000640)="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", 0x274}, {&(0x7f0000000240)="acf7aad9756b30", 0x7}], 0x3}, 0x44081) 4.15541048s ago: executing program 0 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x3, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f00000001c0)='./file1\x00', 0x20000508) io_submit(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0xfffffffc, 0x25dfdbfd, {0xa, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x20891}, 0x20000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50) 3.728472254s ago: executing program 4 (id=506): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r4}, 0xc) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000100)={0x3}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 3.490017151s ago: executing program 6 (id=509): r0 = eventfd(0x0) io_setup(0xc, &(0x7f0000000140)=0x0) r2 = io_uring_setup(0x1d40, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x0, 0x91}) close_range(r2, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000180)='\x00\x00\x00a\x00\x00\x00\x00', 0x8, 0x0, 0x0, 0x1, r0}]) 3.354842265s ago: executing program 1 (id=513): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x83501) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdX\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9=\t\xbb\x0e\xbb\xb5\x02\x95u\x94r\xfd\x00\xb9\xf8z\xa0\xe6\xcc\x85QO\x1dD\xd5\xe2\xa56j\\', 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x206, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) 3.300924087s ago: executing program 6 (id=514): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@data_err_ignore}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 3.299870397s ago: executing program 0 (id=515): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100), 0x3, 0x55c, &(0x7f0000000f40)="$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") 2.489916683s ago: executing program 4 (id=517): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x321a062, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) clock_adjtime(0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x16, {0x2, 0x4e20, @rand_addr=0x64010101}}) 2.192397652s ago: executing program 1 (id=519): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/138, 0x8a}], 0x1) 2.059588236s ago: executing program 6 (id=520): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000980)={[{@sysvgroups}, {@noquota}]}, 0xff, 0x4c4, &(0x7f00000001c0)="$eJzs3MtrXFUYAPDvTh59N7HWamtro1UsPpImrdqFCxUFQQVBFxXcxCSttWkrTQRbgqYidSkF9+JS8C9w50bUhQhuFVxKoWgQmnY1cl9tMp1MHk0yaeb3g8mcc5/nu+eemTP35N4AWlZP+ieJ2BoRf0REV56dvUBP/jY9NTF0fWpiKIlq9a1/kmy5a1MTQ+Wi5XpbiszBSkTl8yReSGp2uiFi7PyFU4OjoyPnikl946c/7Bs7f+Hpk6cHT4ycGDkzcPTokcP9zz078MyyxJnGdW3PJ2f37n71nctvDB27/N7P36XF2rUvnz8zjnldrw2ovp70qP1bzdTOe2wRZb8bbJuRTtqbWBAWpS0i0urqyNp/V7TFrcrrilc+a2rhgBWVfjdtmHv2ZBVYx5KoO/m1VS8IsMrKL/r092/5WqWux5pw9cWIziI9PTUxNH0z/vaoFNM7VnD/PRFxbPLG1+krFnsdAgBgCbK+zVP1+n+V2JW952Md24sxlO6IuCcidkTEvRGxMyLui8iWvT8644F85WrXAvffU5O/vf9TuVK3zMsk7f89P6PvNz0j/uKtu63Ibcvi70iOnxwdOVQck4PRsSHN9zfYxw8v//7lXPNm9v/SV7r/si9YFOBKe80FuuHB8cHlOghXL0bsaa8Xf3JzJCA9A3ZHxJ7FbXp7mTj5xLd751po/vgbWIZxpuo3EY/n9T8ZNfGXksbjk30bY3TkUF95Vtzul98uvVkkO2vn3VH8yyCt/82zz/9izsXiveu/NP6x8xc6YnR05NxYOm3zovZx6c8v5vxNs9TzvzN5Oxuz/vX9fNrHg+Pj5/ojOpPXs3x5oLPpA7fWLfPl8mn8Bw/Ub/87inXS+B+MiPQk3hcRD0XE/qLsD0fEIxFxoEH8P7306AcN4k8iiabW/3Ddz78kYmOW6C7qPx+vX0Ki7dSP3881Yr6w+j8Sk9lnbS77/JtH43K1Rznlzo8gAAAArH2ViNgaSaU3T/dsjUqltzf/H/6dcaNarY6NP3n87EdnhvN7BLqjo1Je6eqacT20P5kstpjnB4prxeX8w8V146/aNmX53qGzo8NNjh1a3ZbZ7T/K9p/6u63ZpQNWnPu1oHXVtv9Kk8oBrL6FfP/7LQDrU532v6kZ5QBWn9//0Lrqtf9Pa/L6/7A+3d7+/6rzyDpgPdL/h9al/UPr0v6hJS30Lv7yeQpLfgjArER5s8DSt7Nxnjv813KiZ0W2XNbQsm55/3S+0WLKprg1KyoNVq8sal+TC1743c5Z5Zl9iq6Jyl2hRNpilrJ6bJ/vWRhzJeo8rAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//0N93Y4=") 2.059446266s ago: executing program 4 (id=521): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x18, r0, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x880) 2.059309496s ago: executing program 1 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.032818207s ago: executing program 0 (id=523): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x12, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}, {@errors_remount}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x47d, 0xdf1c, 0x9, 0xfffffffffffff7f7}) pwrite64(r0, &(0x7f0000000dc0)='/', 0x1, 0x8000c64) 1.953837479s ago: executing program 5 (id=524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r2 = epoll_create1(0x0) epoll_pwait(r2, 0x0, 0x0, 0x3ff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) 1.895547211s ago: executing program 6 (id=525): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880000, 0x0, 0x40, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 1.814442944s ago: executing program 5 (id=526): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xef) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, &(0x7f0000000300)) 1.814227393s ago: executing program 4 (id=527): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) copy_file_range(r2, &(0x7f0000000000)=0x3ff, r2, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1c6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) 1.792675544s ago: executing program 6 (id=528): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0xffffffff80000002, 0x12) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, r6, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 1.723627446s ago: executing program 1 (id=529): unshare(0x40600) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ0SOHbUicKIodR7FTmrCH7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQkHDlsZ11/ji2sondjX8/aeQ38zz+3tvRvGd93swLYGLdioj9iLgWEe9GxFzneNLZ4s321nrfJ48eLB88erCcRLP5zj+TrL51LHrOaXmm85n5iPjBWxE/So4F/VNEfXdvY6lSKW93DhUb1a1ifXfv7np1aa28Vt4slRYXFudfv/da6cL6+lL1Nx9fj4jf/+7LH/1x/1s/aTVrtlPX24+L1O76zGGclumI+N5lBBuDqU5/rp3n5HOdxEVKI+JzEfFydv/PxVR2NY86epm+PcLWAQCXodmci+Zc7z4AcNWlWQ4sSQudXMBspGmh0M7hvRA30kqt3rizWtvZXGnnym7GTLq6XinPd3KFN2MmWV2fLi9k5e5+pVxKju7fi4jnI+JnuevZfmG5VlkZ5xcfAJhgzxyb//+Ta8//AMAVl39czI2zHQDA6OTH3QAAYOTM/wAwecz/ADB5zP8AMHnM/wAwecz/ADBRvv/2262tedB5/vXKe7s7G7X37q6U6xuF6s5yYbm2vVVYq9XWsmf2VAd9XqVW21p4NXbeLzbK9Uaxvrt3v1rb2Wzcz57rfb88M5JeAQBnef6lD/+SRMT+G9ezLXqe9z9wrn7xslsHXKZ03A0AxmZq3A0Axubkal/ApJCPh8n1/2azGT1r90bEw8NSz8NA+/4XoQ+GCpNaNxQ+e25/8Qny/8BTTf4fJtf58v++y8NVIP8Pk6vZTKz5DwATRo4fSAbU9/7+P9/s2Rnu938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kmazLUkLnbXAZyNNC4WIZyPiZswkq+uV8nxEPBcRf87N5Fr7CxFh3SAAeJqlf08663/dnntl9njttdx/c9lrRPz4F+/8/P2lRmN7IeJa8q/D440POsdL42g/ADBId57uzuNdnzx6sNzdRtmej7/TXly0Ffegs7VrpmM6e81nuYYb/046+22t7ytTFxB//2FEfOG0/idZbuRmZ+XT4/FbsZ8dafz0SPw0q2u/tv4tPn8BbYFJ82Fr/HnztPsvjVvZ6+n3fz4boZ5cd/w7ODH+pYfj31Sf8e/WsDFe/cN3TxxszrXrHkZ8aTrioPvhPeNPN37SJ/4rQ8b/64tfeblfXfOXEbfjtP4nR2IVG9WtYn137+56dWmtvFbeLJUWFxbnX7/3WqmY5aiL3Uz1Sf94485z/eK3+n+jT/z8gP5/fcj+/+p/7/7wq2fE/+bXTr/+L5wRvzUnfmPI+Es3fpvvV9eKv9Kn/4Ou/50h43/0t72VEwcHLTgOAFya+u7exlKlUt5+8kL+zPekFxFiiEISsX/JIR4Xcr/+6VuD35wbWXvOWYh+VVOflRZemULuHGflL/Y+HbIw7pEJuGyPb/pxtwQAAAAAAAAAAAAAAOhnFH9ONO4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHV9GgAA///+udUz") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x159) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) 1.723376476s ago: executing program 0 (id=530): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = eventfd2(0x7f, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1], 0x0) 1.62679447s ago: executing program 5 (id=531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000fc0)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 987.75988ms ago: executing program 1 (id=532): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf90880"], 0xfebc) 919.603292ms ago: executing program 5 (id=533): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmmsg$unix(r0, &(0x7f0000006d40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/143, 0x8f}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000740)=""/75, 0x4b}, {&(0x7f0000001a40)=""/158, 0x9e}, {&(0x7f0000000880)=""/129, 0x81}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/53, 0x35}], 0x9}}], 0x1, 0x10000, 0x0) 908.428572ms ago: executing program 5 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) getrlimit(0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00005bb000/0x3000)=nil, 0x3000, &(0x7f0000000340)='GPL\x00') rt_tgsigqueueinfo(r0, r0, 0x34, &(0x7f0000000380)={0x10, 0x9, 0x9}) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) 883.590633ms ago: executing program 1 (id=535): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 795.588885ms ago: executing program 6 (id=536): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f0000000280), 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 407.956728ms ago: executing program 0 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x303, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7f}]}}}]}, 0x3c}}, 0x20008088) 174.271545ms ago: executing program 4 (id=538): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x20003, 0x2d) 113.317366ms ago: executing program 0 (id=539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 920.19µs ago: executing program 4 (id=540): r0 = socket(0x840000000002, 0x3, 0xfe) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) 0s ago: executing program 5 (id=541): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xef) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, &(0x7f0000000300)) kernel console output (not intermixed with test programs): c_socket permissive=1 [ 58.948279][ T3994] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 58.970812][ T3994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.047879][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.096557][ T4014] netlink: 'syz.4.141': attribute type 21 has an invalid length. [ 59.108492][ T4014] netlink: 132 bytes leftover after parsing attributes in process `syz.4.141'. [ 59.118867][ T4014] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 59.132456][ T4016] loop0: detected capacity change from 0 to 256 [ 59.176893][ T4016] FAT-fs (loop0): Directory bread(block 64) failed [ 59.181467][ T3075] IPVS: starting estimator thread 0... [ 59.183501][ T4016] FAT-fs (loop0): Directory bread(block 65) failed [ 59.195583][ T4016] FAT-fs (loop0): Directory bread(block 66) failed [ 59.202119][ T4016] FAT-fs (loop0): Directory bread(block 67) failed [ 59.208696][ T4016] FAT-fs (loop0): Directory bread(block 68) failed [ 59.215250][ T4016] FAT-fs (loop0): Directory bread(block 69) failed [ 59.221805][ T4016] FAT-fs (loop0): Directory bread(block 70) failed [ 59.228378][ T4016] FAT-fs (loop0): Directory bread(block 71) failed [ 59.235008][ T4016] FAT-fs (loop0): Directory bread(block 72) failed [ 59.241609][ T4016] FAT-fs (loop0): Directory bread(block 73) failed [ 59.266828][ T4022] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4022 comm=syz.1.144 [ 59.282164][ T4024] netlink: 'syz.4.143': attribute type 21 has an invalid length. [ 59.290350][ T4019] IPVS: using max 2496 ests per chain, 124800 per kthread [ 59.297562][ T28] audit: type=1400 audit(1781848574.923:307): avc: denied { ioctl } for pid=4017 comm="syz.4.143" path="socket:[6867]" dev="sockfs" ino=6867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.325772][ T4024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.143'. [ 59.347511][ T4026] loop2: detected capacity change from 0 to 512 [ 59.354064][ T4024] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 59.371451][ T4026] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 59.411882][ T4026] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 59.624648][ T4026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.712333][ T4038] bond1: (slave veth0_to_bond): making interface the new active one [ 59.801708][ T4038] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 59.904326][ T4026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.146'. [ 59.919741][ T4042] netlink: 'syz.1.150': attribute type 3 has an invalid length. [ 60.052139][ T4044] netlink: 'syz.3.151': attribute type 10 has an invalid length. [ 60.060123][ T28] audit: type=1400 audit(1781848575.693:308): avc: denied { getopt } for pid=4043 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.266462][ T28] audit: type=1400 audit(1781848575.733:309): avc: denied { create } for pid=4043 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.608342][ T4057] loop2: detected capacity change from 0 to 1024 [ 61.098285][ T4057] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.107303][ T4057] EXT4-fs: Ignoring removed bh option [ 61.113390][ T28] audit: type=1400 audit(1781848576.733:310): avc: denied { write } for pid=4049 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.144643][ T4057] EXT4-fs: Mount option(s) incompatible with ext2 [ 61.463572][ T28] audit: type=1400 audit(1781848577.073:311): avc: denied { create } for pid=4056 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 61.552776][ T4062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.157'. [ 61.566507][ T4065] FAULT_INJECTION: forcing a failure. [ 61.566507][ T4065] name failslab, interval 1, probability 0, space 0, times 0 [ 61.586201][ T4061] loop1: detected capacity change from 0 to 1024 [ 61.603772][ T4065] CPU: 0 UID: 0 PID: 4065 Comm: syz.2.158 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 61.603804][ T4065] Tainted: [W]=WARN [ 61.603812][ T4065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 61.603827][ T4065] Call Trace: [ 61.603835][ T4065] [ 61.603846][ T4065] __dump_stack+0x1d/0x30 [ 61.603941][ T4065] dump_stack_lvl+0x95/0xd0 [ 61.604036][ T4065] dump_stack+0x15/0x1b [ 61.604057][ T4065] should_fail_ex+0x25e/0x270 [ 61.604083][ T4065] ? cls_bpf_init+0x32/0xc0 [ 61.604171][ T4065] should_failslab+0x8c/0xb0 [ 61.604200][ T4065] __kmalloc_cache_noprof+0x5f/0x400 [ 61.604252][ T4065] ? __pfx_cls_bpf_reoffload+0x10/0x10 [ 61.604284][ T4065] cls_bpf_init+0x32/0xc0 [ 61.604313][ T4065] tcf_proto_create+0x130/0x1a0 [ 61.604342][ T4065] tc_new_tfilter+0xa77/0x1170 [ 61.604364][ T4065] ? __rcu_read_unlock+0x4e/0x70 [ 61.604506][ T4065] ? __pfx_tc_new_tfilter+0x10/0x10 [ 61.604532][ T4065] rtnetlink_rcv_msg+0x64b/0x720 [ 61.604562][ T4065] netlink_rcv_skb+0x11e/0x220 [ 61.604586][ T4065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.604676][ T4065] rtnetlink_rcv+0x1c/0x30 [ 61.604698][ T4065] netlink_unicast+0x5a7/0x680 [ 61.604726][ T4065] netlink_sendmsg+0x5be/0x6f0 [ 61.604756][ T4065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.604787][ T4065] ____sys_sendmsg+0x532/0x580 [ 61.604821][ T4065] ___sys_sendmsg+0x195/0x1e0 [ 61.604934][ T4065] __x64_sys_sendmsg+0xd4/0x160 [ 61.605032][ T4065] x64_sys_call+0x194c/0x3020 [ 61.605060][ T4065] do_syscall_64+0x136/0x3c0 [ 61.605084][ T4065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.605110][ T4065] RIP: 0033:0x7ff624e9ce59 [ 61.605130][ T4065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.605150][ T4065] RSP: 002b:00007ff6238ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.605170][ T4065] RAX: ffffffffffffffda RBX: 00007ff625115fa0 RCX: 00007ff624e9ce59 [ 61.605258][ T4065] RDX: 0000000020044804 RSI: 0000200000000000 RDI: 0000000000000008 [ 61.605274][ T4065] RBP: 00007ff6238ef090 R08: 0000000000000000 R09: 0000000000000000 [ 61.605289][ T4065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.605304][ T4065] R13: 00007ff625116038 R14: 00007ff625115fa0 R15: 00007ffd27c96158 [ 61.605324][ T4065] [ 62.067962][ T4074] loop0: detected capacity change from 0 to 128 [ 62.079325][ T4074] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.155419][ T4074] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.356334][ T4068] loop3: detected capacity change from 0 to 512 [ 62.431452][ T4068] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.485682][ T4077] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 62.590240][ T4084] netlink: 'syz.4.165': attribute type 4 has an invalid length. [ 62.632988][ T4087] loop2: detected capacity change from 0 to 256 [ 62.694825][ T4087] FAT-fs (loop2): Directory bread(block 64) failed [ 62.701506][ T4087] FAT-fs (loop2): Directory bread(block 65) failed [ 62.708150][ T4087] FAT-fs (loop2): Directory bread(block 66) failed [ 62.714686][ T4087] FAT-fs (loop2): Directory bread(block 67) failed [ 62.721282][ T4087] FAT-fs (loop2): Directory bread(block 68) failed [ 62.727910][ T4087] FAT-fs (loop2): Directory bread(block 69) failed [ 62.734525][ T4087] FAT-fs (loop2): Directory bread(block 70) failed [ 62.741054][ T4087] FAT-fs (loop2): Directory bread(block 71) failed [ 62.747618][ T4087] FAT-fs (loop2): Directory bread(block 72) failed [ 62.754158][ T4087] FAT-fs (loop2): Directory bread(block 73) failed [ 62.789151][ T4068] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.160: corrupted xattr entries [ 62.821040][ T4091] loop4: detected capacity change from 0 to 512 [ 62.821764][ T4091] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.828044][ T4091] FAULT_INJECTION: forcing a failure. [ 62.828044][ T4091] name failslab, interval 1, probability 0, space 0, times 0 [ 62.828110][ T4091] CPU: 1 UID: 0 PID: 4091 Comm: syz.4.168 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 62.828165][ T4091] Tainted: [W]=WARN [ 62.828173][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 62.828186][ T4091] Call Trace: [ 62.828220][ T4091] [ 62.828228][ T4091] __dump_stack+0x1d/0x30 [ 62.828254][ T4091] dump_stack_lvl+0x95/0xd0 [ 62.828383][ T4091] dump_stack+0x15/0x1b [ 62.828404][ T4091] should_fail_ex+0x25e/0x270 [ 62.828429][ T4091] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 62.828469][ T4091] should_failslab+0x8c/0xb0 [ 62.828521][ T4091] kmem_cache_alloc_noprof+0x66/0x3f0 [ 62.828613][ T4091] ? mempool_alloc_slab+0x1a/0x30 [ 62.828719][ T4091] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 62.828744][ T4091] mempool_alloc_slab+0x1a/0x30 [ 62.828791][ T4091] mempool_init_node+0x139/0x240 [ 62.828861][ T4091] ? __pfx_mempool_free_slab+0x10/0x10 [ 62.828883][ T4091] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 62.828910][ T4091] mempool_init_noprof+0x3a/0x50 [ 62.828936][ T4091] bioset_init+0x37b/0x480 [ 62.828965][ T4091] ? __pfx_no_op+0x10/0x10 [ 62.829044][ T4091] ? percpu_ref_init+0x1dd/0x250 [ 62.829100][ T4091] mddev_init+0xc6/0x420 [ 62.829121][ T4091] ? __pfx_md_probe+0x10/0x10 [ 62.829154][ T4091] md_alloc+0x99/0xa00 [ 62.829230][ T4091] ? __rcu_read_unlock+0x4e/0x70 [ 62.829256][ T4091] ? __pfx_md_probe+0x10/0x10 [ 62.829353][ T4091] md_alloc_and_put+0x18/0x170 [ 62.829401][ T4091] md_probe+0x68/0x80 [ 62.829432][ T4091] blk_request_module+0x1bd/0x1e0 [ 62.829456][ T4091] blkdev_get_no_open+0x4b/0x100 [ 62.829479][ T4091] bdev_file_open_by_dev+0xa4/0x230 [ 62.829502][ T4091] swsusp_check+0x3f/0x2a0 [ 62.829589][ T4091] software_resume+0x41/0x2f0 [ 62.829616][ T4091] resume_store+0x2d9/0x3d0 [ 62.829705][ T4091] ? __pfx_resume_store+0x10/0x10 [ 62.829732][ T4091] kobj_attr_store+0x4a/0x70 [ 62.829757][ T4091] ? __pfx_kobj_attr_store+0x10/0x10 [ 62.829801][ T4091] sysfs_kf_write+0xfe/0x120 [ 62.829827][ T4091] ? __pfx_sysfs_kf_write+0x10/0x10 [ 62.829852][ T4091] kernfs_fop_write_iter+0x1d2/0x2e0 [ 62.829947][ T4091] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 62.829969][ T4091] vfs_write+0x57d/0x990 [ 62.830003][ T4091] ksys_write+0xdc/0x1a0 [ 62.830080][ T4091] __x64_sys_write+0x40/0x50 [ 62.830110][ T4091] x64_sys_call+0x27e1/0x3020 [ 62.830136][ T4091] do_syscall_64+0x136/0x3c0 [ 62.830159][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.830183][ T4091] RIP: 0033:0x7f2111face59 [ 62.830237][ T4091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.830257][ T4091] RSP: 002b:00007f2110a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.830281][ T4091] RAX: ffffffffffffffda RBX: 00007f2112225fa0 RCX: 00007f2111face59 [ 62.830354][ T4091] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000007 [ 62.830369][ T4091] RBP: 00007f2110a07090 R08: 0000000000000000 R09: 0000000000000000 [ 62.830484][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.830499][ T4091] R13: 00007f2112226038 R14: 00007f2112225fa0 R15: 00007ffc7c28fdc8 [ 62.830547][ T4091] [ 62.830565][ T4091] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.864591][ T4093] FAULT_INJECTION: forcing a failure. [ 62.864591][ T4093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.864627][ T4093] CPU: 1 UID: 0 PID: 4093 Comm: syz.1.170 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 62.864660][ T4093] Tainted: [W]=WARN [ 62.864668][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 62.864720][ T4093] Call Trace: [ 62.864727][ T4093] [ 62.864736][ T4093] __dump_stack+0x1d/0x30 [ 62.864816][ T4093] dump_stack_lvl+0x95/0xd0 [ 62.864838][ T4093] dump_stack+0x15/0x1b [ 62.864894][ T4093] should_fail_ex+0x25e/0x270 [ 62.864919][ T4093] should_fail+0xb/0x20 [ 62.864941][ T4093] should_fail_usercopy+0x1a/0x20 [ 62.864966][ T4093] _copy_to_user+0x20/0xa0 [ 62.865013][ T4093] simple_read_from_buffer+0xb5/0x130 [ 62.865045][ T4093] proc_fail_nth_read+0x10e/0x150 [ 62.865139][ T4093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.865171][ T4093] vfs_read+0x18e/0x7c0 [ 62.865243][ T4093] ? __rcu_read_unlock+0x4e/0x70 [ 62.865271][ T4093] ? __fget_files+0x184/0x1c0 [ 62.865323][ T4093] ? mutex_lock+0x57/0x90 [ 62.865353][ T4093] ksys_read+0xdc/0x1a0 [ 62.865383][ T4093] __x64_sys_read+0x40/0x50 [ 62.865413][ T4093] x64_sys_call+0x2886/0x3020 [ 62.865448][ T4093] do_syscall_64+0x136/0x3c0 [ 62.865470][ T4093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.865531][ T4093] RIP: 0033:0x7f0e1c5ed68e [ 62.865550][ T4093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.865573][ T4093] RSP: 002b:00007f0e1b07efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.865595][ T4093] RAX: ffffffffffffffda RBX: 00007f0e1b07f6c0 RCX: 00007f0e1c5ed68e [ 62.865612][ T4093] RDX: 000000000000000f RSI: 00007f0e1b07f0a0 RDI: 0000000000000004 [ 62.865626][ T4093] RBP: 00007f0e1b07f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.865691][ T4093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.865704][ T4093] R13: 00007f0e1c8a6038 R14: 00007f0e1c8a5fa0 R15: 00007ffc1305cd18 [ 62.865723][ T4093] [ 62.869808][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 62.869822][ T28] audit: type=1400 audit(1781848578.493:314): avc: denied { write } for pid=4090 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.986975][ T4095] pimreg: entered allmulticast mode [ 62.993485][ T4068] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.996829][ T4068] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.002855][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 63.002879][ C0] EXT4-fs (loop3): initial error at time 1781848578: xattr_find_entry:337: inode 15 [ 63.003199][ C0] EXT4-fs (loop3): last error at time 1781848578: xattr_find_entry:337: inode 15 [ 63.149298][ T4096] veth1_to_bond: entered allmulticast mode [ 63.149436][ T4096] pimreg: left allmulticast mode [ 63.738566][ T4094] veth1_to_bond: left allmulticast mode [ 63.761262][ T28] audit: type=1400 audit(1781848579.403:315): avc: denied { create } for pid=4108 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.769181][ T4068] EXT4-fs (loop3): 1 orphan inode deleted [ 63.927929][ T28] audit: type=1400 audit(1781848579.573:316): avc: denied { read } for pid=4125 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.467814][ T4068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.487578][ T28] audit: type=1400 audit(1781848580.133:317): avc: denied { write } for pid=4127 comm="syz.4.180" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.488128][ T4130] program syz.4.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.858767][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.879466][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 64.944572][ T28] audit: type=1400 audit(1781848580.593:318): avc: denied { bind } for pid=4134 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.965478][ T4136] validate_nla: 1 callbacks suppressed [ 64.965495][ T4136] netlink: 'syz.4.183': attribute type 2 has an invalid length. [ 64.978983][ T4136] netlink: 119 bytes leftover after parsing attributes in process `syz.4.183'. [ 64.990282][ T28] audit: type=1400 audit(1781848580.613:319): avc: denied { write } for pid=4134 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.129305][ T28] audit: type=1326 audit(1781848580.773:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.4.185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2111face59 code=0x7ffc0000 [ 65.201729][ T28] audit: type=1326 audit(1781848580.803:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.4.185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2111face59 code=0x7ffc0000 [ 65.251724][ T28] audit: type=1326 audit(1781848580.803:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.4.185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2111face59 code=0x7ffc0000 [ 65.311488][ T28] audit: type=1326 audit(1781848580.803:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.4.185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2111face59 code=0x7ffc0000 [ 65.577993][ T4149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 65.964346][ T4165] netlink: 'syz.0.189': attribute type 3 has an invalid length. [ 66.151028][ T4167] pimreg: entered allmulticast mode [ 66.217608][ T4167] pimreg: left allmulticast mode [ 66.308825][ T4169] veth1_to_bond: entered allmulticast mode [ 66.351191][ T4190] loop4: detected capacity change from 0 to 1024 [ 66.377859][ T4190] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 66.490387][ T4166] veth1_to_bond: left allmulticast mode [ 66.595444][ T4194] loop1: detected capacity change from 0 to 256 [ 66.634586][ T4190] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.199: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.728227][ T4190] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.728798][ T4190] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.199: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.737958][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 66.737977][ C0] EXT4-fs (loop4): initial error at time 1781848582: ext4_map_blocks:791: inode 3: block 2 [ 66.738010][ C0] EXT4-fs (loop4): last error at time 1781848582: ext4_map_blocks:791: inode 3: block 2 [ 66.798236][ T4194] FAT-fs (loop1): Directory bread(block 64) failed [ 66.804820][ T4194] FAT-fs (loop1): Directory bread(block 65) failed [ 66.811351][ T4194] FAT-fs (loop1): Directory bread(block 66) failed [ 66.817898][ T4194] FAT-fs (loop1): Directory bread(block 67) failed [ 66.824656][ T4194] FAT-fs (loop1): Directory bread(block 68) failed [ 66.831225][ T4194] FAT-fs (loop1): Directory bread(block 69) failed [ 66.837849][ T4194] FAT-fs (loop1): Directory bread(block 70) failed [ 66.844458][ T4194] FAT-fs (loop1): Directory bread(block 71) failed [ 66.850993][ T4194] FAT-fs (loop1): Directory bread(block 72) failed [ 66.857534][ T4194] FAT-fs (loop1): Directory bread(block 73) failed [ 67.370541][ T4190] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.370737][ T4190] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.199: Failed to acquire dquot type 0 [ 67.793465][ T4190] loop4: lost filesystem error report for type 5 error -117 [ 67.793679][ T4190] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 68.380299][ T4190] loop4: lost filesystem error report for type 5 error -117 [ 68.441243][ T4203] loop2: detected capacity change from 0 to 8192 [ 68.506386][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 68.516635][ T4207] netlink: 'syz.3.203': attribute type 3 has an invalid length. [ 68.549797][ T4206] batadv1: entered promiscuous mode [ 68.562053][ T4206] batadv1: entered allmulticast mode [ 68.616604][ T4211] loop3: detected capacity change from 0 to 2048 [ 68.627328][ T4190] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.199: mark_inode_dirty error [ 68.640437][ T4203] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.664280][ T4190] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.664465][ T4190] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 68.751324][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 68.751342][ T28] audit: type=1400 audit(1781848584.393:371): avc: denied { name_bind } for pid=4210 comm="syz.3.205" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.797025][ T4190] EXT4-fs (loop4): 1 orphan inode deleted [ 68.815391][ T310] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.836542][ T4190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.898792][ T4218] netlink: 52 bytes leftover after parsing attributes in process `syz.0.207'. [ 68.909559][ T310] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.909727][ T310] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 68.931359][ T28] audit: type=1400 audit(1781848584.433:372): avc: denied { sqpoll } for pid=4202 comm="syz.2.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.969308][ T4218] netlink: 52 bytes leftover after parsing attributes in process `syz.0.207'. [ 68.990012][ T310] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 69.008350][ T4218] netlink: 52 bytes leftover after parsing attributes in process `syz.0.207'. [ 69.020786][ T28] audit: type=1400 audit(1781848584.603:373): avc: denied { write } for pid=4189 comm="syz.4.199" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.098608][ T28] audit: type=1400 audit(1781848584.603:374): avc: denied { add_name } for pid=4189 comm="syz.4.199" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.119887][ T28] audit: type=1400 audit(1781848584.603:375): avc: denied { create } for pid=4189 comm="syz.4.199" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.140321][ T28] audit: type=1400 audit(1781848584.603:376): avc: denied { execute } for pid=4221 comm="syz.3.208" path="/41/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.204422][ T4229] loop0: detected capacity change from 0 to 512 [ 69.246326][ T4229] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 69.286420][ T28] audit: type=1400 audit(1781848584.703:377): avc: denied { write } for pid=4189 comm="syz.4.199" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.320406][ T4229] EXT4-fs (loop0): 1 truncate cleaned up [ 69.339400][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.351363][ T4227] loop3: detected capacity change from 0 to 256 [ 69.361671][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.396814][ T4227] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.428361][ T28] audit: type=1400 audit(1781848584.703:378): avc: denied { create } for pid=4189 comm="syz.4.199" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 69.457652][ T4229] EXT4-fs error (device loop0): __ext4_remount:6844: comm syz.0.210: Abort forced by user [ 69.484466][ T4229] EXT4-fs (loop0): Remounting filesystem read-only [ 69.501545][ T28] audit: type=1400 audit(1781848584.713:379): avc: denied { write } for pid=4189 comm="syz.4.199" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.527598][ T4229] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.548393][ T68] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.566798][ T68] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 69.567041][ T68] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 69.587781][ T68] loop4: lost filesystem error report for type 5 error -117 [ 69.591240][ T3301] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 69.636291][ T4237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 69.652899][ T3301] loop4: lost filesystem error report for type 5 error -117 [ 69.653020][ T3301] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 69.670206][ T3301] loop4: lost filesystem error report for type 5 error -117 [ 69.670505][ T3301] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 69.724216][ T3301] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 69.724923][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.896860][ T4245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.214'. [ 69.924558][ T4241] pimreg: entered allmulticast mode [ 69.935194][ T4249] loop1: detected capacity change from 0 to 512 [ 69.955170][ T4249] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.970240][ T4246] veth1_to_bond: entered allmulticast mode [ 69.986578][ T4241] pimreg: left allmulticast mode [ 70.045784][ T4249] EXT4-fs (loop1): 1 truncate cleaned up [ 70.069675][ T4245] netlink: 'syz.3.214': attribute type 3 has an invalid length. [ 70.083266][ T4249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.093560][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 70.170958][ T4254] loop0: detected capacity change from 0 to 1024 [ 70.194581][ T4254] EXT4-fs: Ignoring removed bh option [ 70.240626][ T4254] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 70.269286][ T4240] veth1_to_bond: left allmulticast mode [ 70.419623][ T4254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.540735][ T4275] loop3: detected capacity change from 0 to 256 [ 70.548840][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.583704][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 70.607870][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 70.619234][ T4278] loop4: detected capacity change from 0 to 512 [ 70.628869][ T4278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.652483][ T4280] loop0: detected capacity change from 0 to 256 [ 70.686885][ T4278] EXT4-fs (loop4): 1 truncate cleaned up [ 70.704788][ T4280] FAT-fs (loop0): Directory bread(block 64) failed [ 70.711353][ T4280] FAT-fs (loop0): Directory bread(block 65) failed [ 70.717953][ T4280] FAT-fs (loop0): Directory bread(block 66) failed [ 70.724607][ T4280] FAT-fs (loop0): Directory bread(block 67) failed [ 70.731170][ T4280] FAT-fs (loop0): Directory bread(block 68) failed [ 70.737806][ T4280] FAT-fs (loop0): Directory bread(block 69) failed [ 70.744382][ T4280] FAT-fs (loop0): Directory bread(block 70) failed [ 70.750910][ T4280] FAT-fs (loop0): Directory bread(block 71) failed [ 70.757523][ T4280] FAT-fs (loop0): Directory bread(block 72) failed [ 70.764172][ T4280] FAT-fs (loop0): Directory bread(block 73) failed [ 70.765062][ T4278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.223670][ T4233] loop2: detected capacity change from 0 to 512 [ 71.471286][ T4289] SET target dimension over the limit! [ 71.527534][ T4233] EXT4-fs: Ignoring removed nobh option [ 71.630229][ T4233] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.702841][ T4233] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.211: EA inode hash validation failed [ 71.732490][ T4233] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.766916][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.811633][ T4233] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.211: corrupted inode contents [ 71.841450][ T4233] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.842824][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 71.860512][ C1] EXT4-fs (loop2): initial error at time 1781848588: ext4_do_update_inode:5742: inode 15 [ 71.872694][ C1] EXT4-fs (loop2): last error at time 1781848588: ext4_do_update_inode:5742: inode 15 [ 71.888745][ T4233] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.211: mark_inode_dirty error [ 71.901376][ T4233] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.906086][ T4233] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.211: corrupted inode contents [ 71.965273][ T4233] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.980334][ T4233] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.211: mark_inode_dirty error [ 72.008895][ T4296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'. [ 72.043148][ T4233] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.049819][ T4233] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.211: mark inode dirty (error -117) [ 72.099034][ T4233] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.107076][ T4233] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 72.172121][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.184478][ T4233] EXT4-fs (loop2): 1 orphan inode deleted [ 72.222330][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.356822][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.621703][ T4302] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 72.652177][ T4302] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 72.693253][ T4302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.724030][ T4309] FAULT_INJECTION: forcing a failure. [ 72.724030][ T4309] name failslab, interval 1, probability 0, space 0, times 0 [ 72.783556][ T4309] CPU: 1 UID: 0 PID: 4309 Comm: syz.1.231 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 72.783665][ T4309] Tainted: [W]=WARN [ 72.783671][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.783682][ T4309] Call Trace: [ 72.783689][ T4309] [ 72.783697][ T4309] __dump_stack+0x1d/0x30 [ 72.783798][ T4309] dump_stack_lvl+0x95/0xd0 [ 72.783817][ T4309] dump_stack+0x15/0x1b [ 72.783838][ T4309] should_fail_ex+0x25e/0x270 [ 72.783865][ T4309] should_failslab+0x8c/0xb0 [ 72.783957][ T4309] kmem_cache_alloc_noprof+0x66/0x3f0 [ 72.784061][ T4309] ? skb_clone+0x151/0x1f0 [ 72.784097][ T4309] skb_clone+0x151/0x1f0 [ 72.784133][ T4309] __netlink_deliver_tap+0x2be/0x510 [ 72.784228][ T4309] netlink_unicast+0x654/0x680 [ 72.784304][ T4309] netlink_sendmsg+0x5be/0x6f0 [ 72.784365][ T4309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.784390][ T4309] ____sys_sendmsg+0x532/0x580 [ 72.784419][ T4309] ___sys_sendmsg+0x195/0x1e0 [ 72.784582][ T4309] __x64_sys_sendmsg+0xd4/0x160 [ 72.784614][ T4309] x64_sys_call+0x194c/0x3020 [ 72.784711][ T4309] do_syscall_64+0x136/0x3c0 [ 72.784732][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.784761][ T4309] RIP: 0033:0x7f0e1c62ce59 [ 72.784776][ T4309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.784865][ T4309] RSP: 002b:00007f0e1b07f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.784885][ T4309] RAX: ffffffffffffffda RBX: 00007f0e1c8a5fa0 RCX: 00007f0e1c62ce59 [ 72.784899][ T4309] RDX: 0000000000008000 RSI: 0000200000000480 RDI: 0000000000000003 [ 72.784912][ T4309] RBP: 00007f0e1b07f090 R08: 0000000000000000 R09: 0000000000000000 [ 72.784923][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.784959][ T4309] R13: 00007f0e1c8a6038 R14: 00007f0e1c8a5fa0 R15: 00007ffc1305cd18 [ 72.784977][ T4309] [ 72.834511][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.875225][ T4307] bond1: (slave veth0_to_bond): making interface the new active one [ 72.883254][ T4313] netlink: 48 bytes leftover after parsing attributes in process `syz.0.229'. [ 72.895459][ T4310] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.955397][ T4307] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 73.019328][ T4310] netlink: 4172 bytes leftover after parsing attributes in process `syz.3.230'. [ 73.230777][ T4328] netlink: 'syz.4.227': attribute type 3 has an invalid length. [ 73.307602][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 73.501624][ T4332] set_capacity_and_notify: 2 callbacks suppressed [ 73.501726][ T4332] loop4: detected capacity change from 0 to 512 [ 73.582327][ T4327] loop1: detected capacity change from 0 to 1024 [ 73.672102][ T4332] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 73.717934][ T4327] EXT4-fs: Ignoring removed bh option [ 73.818839][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.842409][ T4327] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 73.867543][ T4333] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 73.952266][ T4327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.952512][ T4338] loop0: detected capacity change from 0 to 1024 [ 73.971687][ T4338] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.009025][ T4338] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.019311][ T4333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.045892][ T4338] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.061894][ T4338] __quota_error: 16 callbacks suppressed [ 74.061966][ T4338] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 74.143334][ T4338] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 74.171611][ T4338] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 74.182204][ T4332] bond1: (slave veth0_to_bond): Releasing active interface [ 74.188232][ T4338] EXT4-fs (loop0): 1 truncate cleaned up [ 74.196715][ T4338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.238131][ T4346] netlink: 48 bytes leftover after parsing attributes in process `syz.4.236'. [ 74.272970][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.282198][ T4332] bond3: (slave veth0_to_bond): making interface the new active one [ 74.295306][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.317340][ T4332] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 74.358700][ T28] audit: type=1400 audit(1781848591.005:395): avc: denied { create } for pid=4343 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.378949][ T28] audit: type=1400 audit(1781848591.005:396): avc: denied { connect } for pid=4343 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.430241][ T4349] loop0: detected capacity change from 0 to 256 [ 74.478533][ T4349] FAT-fs (loop0): Directory bread(block 64) failed [ 74.485213][ T4349] FAT-fs (loop0): Directory bread(block 65) failed [ 74.491774][ T4349] FAT-fs (loop0): Directory bread(block 66) failed [ 74.498512][ T4349] FAT-fs (loop0): Directory bread(block 67) failed [ 74.505083][ T4349] FAT-fs (loop0): Directory bread(block 68) failed [ 74.510202][ T28] audit: type=1326 audit(1781848591.155:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.1.239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c62ce59 code=0x7ffc0000 [ 74.511623][ T4349] FAT-fs (loop0): Directory bread(block 69) failed [ 74.544003][ T4349] FAT-fs (loop0): Directory bread(block 70) failed [ 74.550558][ T4349] FAT-fs (loop0): Directory bread(block 71) failed [ 74.557194][ T4349] FAT-fs (loop0): Directory bread(block 72) failed [ 74.563824][ T4349] FAT-fs (loop0): Directory bread(block 73) failed [ 74.571000][ T28] audit: type=1326 audit(1781848591.155:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.1.239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c62ce59 code=0x7ffc0000 [ 74.604085][ T28] audit: type=1326 audit(1781848591.155:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.1.239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c62ce59 code=0x7ffc0000 [ 74.636096][ T28] audit: type=1326 audit(1781848591.195:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.1.239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f0e1c62ce59 code=0x7ffc0000 [ 74.661977][ T28] audit: type=1326 audit(1781848591.195:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.1.239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c62ce59 code=0x7ffc0000 [ 74.699919][ T28] audit: type=1326 audit(1781848591.195:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.1.239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c62ce59 code=0x7ffc0000 [ 74.733681][ T28] audit: type=1326 audit(1781848591.195:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4354 comm="syz.1.239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c62ce59 code=0x7ffc0000 [ 74.919689][ T4367] loop4: detected capacity change from 0 to 512 [ 74.957631][ T4367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.987207][ T4372] loop3: detected capacity change from 0 to 512 [ 74.997778][ T4367] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.010761][ T4372] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 75.034893][ T4375] loop2: detected capacity change from 0 to 512 [ 75.067070][ T4375] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 75.077610][ T4372] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 75.094125][ T4375] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 75.110224][ T4372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.124534][ T4375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.141902][ T4372] bond2: (slave veth0_to_bond): making interface the new active one [ 75.152012][ T4372] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 75.180756][ T4375] bond1: (slave veth0_to_bond): Releasing active interface [ 75.182103][ T4365] mmap: syz.1.244 (4365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.228972][ T4382] loop1: detected capacity change from 0 to 256 [ 75.235600][ T4383] netlink: 48 bytes leftover after parsing attributes in process `syz.3.246'. [ 75.244751][ T4375] bond2: (slave veth0_to_bond): making interface the new active one [ 75.258204][ T4384] netlink: 48 bytes leftover after parsing attributes in process `syz.2.247'. [ 75.290784][ T4375] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 75.334045][ T4382] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 75.342287][ T4382] FAT-fs (loop1): Filesystem has been set read-only [ 75.384326][ T4389] loop0: detected capacity change from 0 to 512 [ 75.391193][ T4389] EXT4-fs: Ignoring removed i_version option [ 75.414388][ T4389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.426959][ T4389] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.831826][ T4393] syzkaller1: entered promiscuous mode [ 75.837484][ T4393] syzkaller1: entered allmulticast mode [ 75.914461][ T3295] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 76.142515][ T4404] loop1: detected capacity change from 0 to 512 [ 76.151573][ T4404] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.249116][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.406108][ T4404] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 76.751292][ T4404] macvlan2: entered promiscuous mode [ 76.757040][ T4404] macvlan2: entered allmulticast mode [ 76.768476][ T4404] bond1: entered promiscuous mode [ 76.776731][ T4404] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.810835][ T4404] bond1: left promiscuous mode [ 77.186310][ T4421] EXT4-fs: Ignoring removed bh option [ 77.191795][ T4421] EXT4-fs: inline encryption not supported [ 77.219890][ T4421] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.281208][ T4421] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.295995][ T4421] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 77.345628][ T4425] FAT-fs (loop4): Directory bread(block 64) failed [ 77.352186][ T4425] FAT-fs (loop4): Directory bread(block 65) failed [ 77.358876][ T4425] FAT-fs (loop4): Directory bread(block 66) failed [ 77.365468][ T4425] FAT-fs (loop4): Directory bread(block 67) failed [ 77.371991][ T4425] FAT-fs (loop4): Directory bread(block 68) failed [ 77.378602][ T4425] FAT-fs (loop4): Directory bread(block 69) failed [ 77.385183][ T4425] FAT-fs (loop4): Directory bread(block 70) failed [ 77.391706][ T4425] FAT-fs (loop4): Directory bread(block 71) failed [ 77.398552][ T4425] FAT-fs (loop4): Directory bread(block 72) failed [ 77.405118][ T4425] FAT-fs (loop4): Directory bread(block 73) failed [ 77.551236][ T4421] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.257: bg 0: block 248: padding at end of block bitmap is not set [ 77.817578][ T4421] loop1: lost filesystem error report for type 5 error -117 [ 77.818802][ T4421] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.257: Failed to acquire dquot type 1 [ 77.826245][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 77.826274][ C0] EXT4-fs (loop1): last error at time 1781848594: ext4_validate_block_bitmap:441 [ 77.853642][ T4421] loop1: lost filesystem error report for type 5 error -28 [ 77.882127][ T4421] EXT4-fs (loop1): 1 truncate cleaned up [ 77.903800][ T4421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback. [ 77.964465][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 78.010501][ T4439] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 78.069295][ T4445] EXT4-fs: Ignoring removed bh option [ 78.143354][ T4447] netlink: 'syz.2.263': attribute type 1 has an invalid length. [ 78.145807][ T4445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.173340][ T4445] FAULT_INJECTION: forcing a failure. [ 78.173340][ T4445] name failslab, interval 1, probability 0, space 0, times 0 [ 78.187468][ T4445] CPU: 1 UID: 0 PID: 4445 Comm: syz.3.266 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 78.187559][ T4445] Tainted: [W]=WARN [ 78.187566][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.187583][ T4445] Call Trace: [ 78.187590][ T4445] [ 78.187598][ T4445] __dump_stack+0x1d/0x30 [ 78.187701][ T4445] dump_stack_lvl+0x95/0xd0 [ 78.187725][ T4445] dump_stack+0x15/0x1b [ 78.187746][ T4445] should_fail_ex+0x25e/0x270 [ 78.187772][ T4445] ? getname_long+0x32/0x100 [ 78.187796][ T4445] should_failslab+0x8c/0xb0 [ 78.187880][ T4445] __kmalloc_cache_noprof+0x5f/0x400 [ 78.187902][ T4445] ? should_fail_usercopy+0x1a/0x20 [ 78.187938][ T4445] getname_long+0x32/0x100 [ 78.187963][ T4445] do_getname+0x12e/0x1c0 [ 78.187985][ T4445] __se_sys_symlink+0x20/0x1b0 [ 78.188116][ T4445] __x64_sys_symlink+0x31/0x40 [ 78.188152][ T4445] x64_sys_call+0x2465/0x3020 [ 78.188178][ T4445] do_syscall_64+0x136/0x3c0 [ 78.188202][ T4445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.188284][ T4445] RIP: 0033:0x7fb22f46ce59 [ 78.188334][ T4445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.188354][ T4445] RSP: 002b:00007fb22dec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 78.188381][ T4445] RAX: ffffffffffffffda RBX: 00007fb22f6e5fa0 RCX: 00007fb22f46ce59 [ 78.188398][ T4445] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 00002000000006c0 [ 78.188414][ T4445] RBP: 00007fb22dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.188504][ T4445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.188537][ T4445] R13: 00007fb22f6e6038 R14: 00007fb22f6e5fa0 R15: 00007fff4287c2d8 [ 78.188557][ T4445] [ 78.385680][ T4447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.405021][ T4461] netlink: 64 bytes leftover after parsing attributes in process `syz.4.268'. [ 78.430352][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.447121][ T4461] netlink: 64 bytes leftover after parsing attributes in process `syz.4.268'. [ 78.479732][ T4465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.263'. [ 78.498224][ T4439] bond2: (slave veth0_to_bond): Releasing active interface [ 78.532115][ T4471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.271'. [ 78.551780][ T4439] bond3: (slave veth0_to_bond): making interface the new active one [ 78.591462][ T4439] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 78.762173][ T4477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.272'. [ 78.925211][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.932647][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.980424][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.990847][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.047701][ T4471] bridge1: left promiscuous mode [ 79.053308][ T4471] bridge1: left allmulticast mode [ 79.059583][ T4471] bond1: left promiscuous mode [ 79.065396][ T4471] bond1: left allmulticast mode [ 79.522712][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 79.522727][ T28] audit: type=1400 audit(1781848596.145:425): avc: denied { unlink } for pid=3294 comm="syz-executor" name="file0" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.765076][ T4492] set_capacity_and_notify: 4 callbacks suppressed [ 79.765161][ T4492] loop3: detected capacity change from 0 to 256 [ 79.803343][ T4492] FAT-fs (loop3): Directory bread(block 64) failed [ 79.809917][ T4492] FAT-fs (loop3): Directory bread(block 65) failed [ 79.816535][ T4492] FAT-fs (loop3): Directory bread(block 66) failed [ 79.823120][ T4492] FAT-fs (loop3): Directory bread(block 67) failed [ 79.829780][ T4492] FAT-fs (loop3): Directory bread(block 68) failed [ 79.836398][ T4492] FAT-fs (loop3): Directory bread(block 69) failed [ 79.843002][ T4492] FAT-fs (loop3): Directory bread(block 70) failed [ 79.849600][ T4492] FAT-fs (loop3): Directory bread(block 71) failed [ 79.856275][ T4492] FAT-fs (loop3): Directory bread(block 72) failed [ 79.862831][ T4492] FAT-fs (loop3): Directory bread(block 73) failed [ 80.132645][ T28] audit: type=1400 audit(1781848596.745:426): avc: denied { create } for pid=4493 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.237819][ T310] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.246953][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.256149][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.267176][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 80.282436][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.299990][ T28] audit: type=1400 audit(1781848596.915:427): avc: denied { bind } for pid=4493 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.376065][ T28] audit: type=1400 audit(1781848596.915:428): avc: denied { ioctl } for pid=4493 comm="syz.4.278" path="socket:[8200]" dev="sockfs" ino=8200 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.439487][ T4502] loop4: detected capacity change from 0 to 512 [ 80.503027][ T4502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.661250][ T4502] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.777130][ T28] audit: type=1400 audit(1781848597.425:429): avc: denied { create } for pid=4512 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.798310][ T4511] loop2: detected capacity change from 0 to 512 [ 80.823087][ T4511] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 80.880882][ T4511] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 80.948294][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.046306][ T4527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.283'. [ 81.110296][ T4530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'. [ 81.145219][ T4516] pimreg: entered allmulticast mode [ 81.190781][ T4511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.337866][ T4518] bond3: (slave veth0_to_bond): Releasing active interface [ 81.401180][ T4518] bond4: (slave veth0_to_bond): making interface the new active one [ 81.425287][ T4518] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 81.451189][ T4519] veth1_to_bond: entered allmulticast mode [ 81.463043][ T4515] veth1_to_bond: left allmulticast mode [ 81.468920][ T4533] veth1_to_bond: entered allmulticast mode [ 81.476880][ T4515] pimreg: left allmulticast mode [ 81.497258][ T4520] veth1_to_bond: left allmulticast mode [ 81.551913][ T4541] random: crng reseeded on system resumption [ 81.559327][ T28] audit: type=1400 audit(1781848598.195:430): avc: denied { write } for pid=4540 comm="syz.1.289" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.593954][ T28] audit: type=1400 audit(1781848598.195:431): avc: denied { open } for pid=4540 comm="syz.1.289" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.620783][ T4541] Restarting kernel threads ... [ 81.631371][ T4541] Done restarting kernel threads. [ 81.665926][ T4547] loop2: detected capacity change from 0 to 256 [ 81.688194][ T28] audit: type=1400 audit(1781848598.275:432): avc: denied { ioctl } for pid=4540 comm="syz.1.289" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.690990][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 81.758263][ T4550] loop3: detected capacity change from 0 to 2048 [ 81.766282][ T4547] FAT-fs (loop2): Directory bread(block 64) failed [ 81.772925][ T4547] FAT-fs (loop2): Directory bread(block 65) failed [ 81.779545][ T4547] FAT-fs (loop2): Directory bread(block 66) failed [ 81.786126][ T4547] FAT-fs (loop2): Directory bread(block 67) failed [ 81.792769][ T4547] FAT-fs (loop2): Directory bread(block 68) failed [ 81.799365][ T4547] FAT-fs (loop2): Directory bread(block 69) failed [ 81.805946][ T4547] FAT-fs (loop2): Directory bread(block 70) failed [ 81.812480][ T4547] FAT-fs (loop2): Directory bread(block 71) failed [ 81.819061][ T4547] FAT-fs (loop2): Directory bread(block 72) failed [ 81.825612][ T4547] FAT-fs (loop2): Directory bread(block 73) failed [ 81.857031][ T4550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.984241][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.994834][ T4550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 82.014570][ T4548] netlink: 'syz.0.290': attribute type 3 has an invalid length. [ 82.044380][ T28] audit: type=1400 audit(1781848598.675:433): avc: denied { write } for pid=4549 comm="syz.3.293" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.145914][ T28] audit: type=1400 audit(1781848598.785:434): avc: denied { mmap_zero } for pid=4549 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 82.232004][ T4559] bridge0: port 3(gretap0) entered blocking state [ 82.254321][ T4559] bridge0: port 3(gretap0) entered disabled state [ 82.266694][ T4559] gretap0: entered allmulticast mode [ 82.288683][ T4559] gretap0: entered promiscuous mode [ 82.434856][ T4552] loop1: detected capacity change from 0 to 512 [ 82.454948][ T4568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 82.531371][ T4564] loop4: detected capacity change from 0 to 512 [ 82.614056][ T4564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.662003][ T4564] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.297: iget: bad i_size value: 38620345925642 [ 82.675003][ T4564] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.681628][ T4564] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.297: couldn't read orphan inode 15 (err -117) [ 82.681799][ T4575] loop0: detected capacity change from 0 to 1024 [ 82.691070][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 82.715904][ C1] EXT4-fs (loop4): initial error at time 1781848599: ext4_orphan_get:1399: inode 15 [ 82.725605][ C1] EXT4-fs (loop4): last error at time 1781848599: ext4_orphan_get:1399: inode 15 [ 82.738167][ T4564] loop4: lost filesystem error report for type 5 error -117 [ 82.741583][ T4564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.746429][ T4575] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.796757][ T3294] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 82.838521][ T4575] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 82.860561][ T4575] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.877841][ T4572] pimreg: entered allmulticast mode [ 82.885375][ T4575] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 82.885456][ T4576] veth1_to_bond: entered allmulticast mode [ 82.901641][ T4552] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.294: bad orphan inode 13 [ 82.906419][ T4581] pimreg: left allmulticast mode [ 82.920629][ T4575] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 82.921274][ T4575] EXT4-fs (loop0): 1 truncate cleaned up [ 82.921755][ T4575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.960099][ T4552] loop1: lost filesystem error report for type 5 error -117 [ 82.963153][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 82.965902][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.971505][ C1] EXT4-fs (loop1): initial error at time 1781848599: ext4_orphan_get:1425 [ 82.997604][ C1] EXT4-fs (loop1): last error at time 1781848599: ext4_orphan_get:1425 [ 83.009155][ T4552] ext4_test_bit(bit=12, block=4) = 1 [ 83.031156][ T4552] is_bad_inode(inode)=0 [ 83.037155][ T4552] NEXT_ORPHAN(inode)=0 [ 83.038194][ T4571] veth1_to_bond: left allmulticast mode [ 83.042236][ T4552] max_ino=32 [ 83.051905][ T4552] i_nlink=1 [ 83.081111][ T4556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.151694][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 83.175041][ T4588] netlink: 'syz.0.306': attribute type 3 has an invalid length. [ 83.280333][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 83.282535][ T4552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.314244][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 212 with error 28 [ 83.336139][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.336139][ T12] [ 83.345969][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 83.349427][ T4592] Illegal XDP return value 4294967274 on prog (id 57) dev syz_tun, expect packet loss! [ 83.352010][ T12] EXT4-fs (loop4): Free/Dirty block details [ 83.352026][ T12] EXT4-fs (loop4): free_blocks=0 [ 83.352086][ T12] EXT4-fs (loop4): dirty_blocks=216 [ 83.352100][ T12] EXT4-fs (loop4): Block reservation details [ 83.352113][ T12] EXT4-fs (loop4): i_reserved_data_blocks=216 [ 83.353603][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 83.354655][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.480059][ T4600] loop4: detected capacity change from 0 to 256 [ 83.502716][ T4600] FAT-fs (loop4): Directory bread(block 64) failed [ 83.509364][ T4600] FAT-fs (loop4): Directory bread(block 65) failed [ 83.515926][ T4600] FAT-fs (loop4): Directory bread(block 66) failed [ 83.522500][ T4600] FAT-fs (loop4): Directory bread(block 67) failed [ 83.529062][ T4600] FAT-fs (loop4): Directory bread(block 68) failed [ 83.535783][ T4600] FAT-fs (loop4): Directory bread(block 69) failed [ 83.542428][ T4600] FAT-fs (loop4): Directory bread(block 70) failed [ 83.548971][ T4600] FAT-fs (loop4): Directory bread(block 71) failed [ 83.555520][ T4600] FAT-fs (loop4): Directory bread(block 72) failed [ 83.562039][ T4600] FAT-fs (loop4): Directory bread(block 73) failed [ 83.706860][ T4587] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 83.723266][ T4587] bond5 (unregistering): Released all slaves [ 83.759283][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.897520][ T4611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 83.985094][ T4618] loop2: detected capacity change from 0 to 1024 [ 84.003069][ T4618] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.031825][ T4618] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 84.054923][ T4618] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.063490][ T310] gretap0: left allmulticast mode [ 84.068799][ T4618] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 84.083599][ T310] gretap0: left promiscuous mode [ 84.094765][ T310] bridge0: port 3(gretap0) entered disabled state [ 84.114003][ T310] bridge_slave_1: left allmulticast mode [ 84.121531][ T4618] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 84.131369][ T310] bridge_slave_1: left promiscuous mode [ 84.137581][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.145561][ T4618] EXT4-fs (loop2): 1 truncate cleaned up [ 84.155659][ T310] bridge_slave_0: left allmulticast mode [ 84.163095][ T4618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.172699][ T310] bridge_slave_0: left promiscuous mode [ 84.181291][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.244201][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.253601][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.263888][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.274064][ T310] bond0 (unregistering): Released all slaves [ 84.291107][ T310] bond1 (unregistering): Released all slaves [ 84.313656][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 84.378771][ T310] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 84.389717][ T310] bond2 (unregistering): Released all slaves [ 84.406627][ T4640] veth1_to_bond: entered allmulticast mode [ 84.413008][ T3016] 8021q: adding VLAN 0 to HW filter on device eth2 [ 84.420416][ T4647] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 84.430611][ T4620] veth1_to_bond: left allmulticast mode [ 84.446324][ T4651] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.453682][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.460911][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.469055][ T4593] bridge_slave_0: entered allmulticast mode [ 84.476159][ T4593] bridge_slave_0: entered promiscuous mode [ 84.483469][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.490616][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.498888][ T4593] bridge_slave_1: entered allmulticast mode [ 84.505452][ T4593] bridge_slave_1: entered promiscuous mode [ 84.534356][ T4643] netlink: 'syz.0.318': attribute type 3 has an invalid length. [ 84.537097][ T4593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.578541][ T4593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.593977][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 84.594006][ T28] audit: type=1400 audit(1781848601.245:612): avc: denied { read } for pid=4658 comm="syz.0.322" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.662167][ T28] audit: type=1400 audit(1781848601.245:613): avc: denied { open } for pid=4658 comm="syz.0.322" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.666866][ T4593] team0: Port device team_slave_0 added [ 84.739033][ T28] audit: type=1400 audit(1781848601.295:614): avc: denied { watch watch_reads } for pid=4658 comm="syz.0.322" path="/62/file1" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.768656][ T4593] team0: Port device team_slave_1 added [ 84.837667][ T4677] capability: warning: `syz.2.327' uses 32-bit capabilities (legacy support in use) [ 84.860596][ T310] hsr_slave_0: left promiscuous mode [ 84.874208][ T310] hsr_slave_1: left promiscuous mode [ 84.905250][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.923748][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.984245][ T28] audit: type=1400 audit(1781848601.595:615): avc: denied { write } for pid=4657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.021893][ T28] audit: type=1400 audit(1781848601.615:616): avc: denied { write } for pid=4686 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.044049][ T28] audit: type=1400 audit(1781848601.665:617): avc: denied { lock } for pid=4674 comm="syz.1.328" path="socket:[8510]" dev="sockfs" ino=8510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.068603][ T28] audit: type=1400 audit(1781848601.665:618): avc: denied { lock } for pid=4674 comm="syz.1.328" path="socket:[9424]" dev="sockfs" ino=9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.141220][ T310] team0 (unregistering): Port device team_slave_1 removed [ 85.201682][ T4690] cgroup: Invalid name [ 85.207355][ T28] audit: type=1400 audit(1781848601.855:619): avc: denied { write } for pid=4682 comm="syz.2.329" path="socket:[8506]" dev="sockfs" ino=8506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.696002][ T310] team0 (unregistering): Port device team_slave_0 removed [ 85.804738][ T3016] 8021q: adding VLAN 0 to HW filter on device eth3 [ 85.811458][ T4697] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 85.927910][ T4593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.935753][ T4593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.962441][ T4593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.028937][ T4703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 86.488758][ T28] audit: type=1400 audit(1781848603.135:620): avc: denied { ioctl } for pid=4705 comm="syz.4.335" path="socket:[9465]" dev="sockfs" ino=9465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.912072][ T4697] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 86.954086][ T4702] vlan2: entered allmulticast mode [ 86.967852][ T4702] veth0_to_bond: entered allmulticast mode [ 87.021427][ T4593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.028514][ T4593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.056456][ T4593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.660069][ T4593] hsr_slave_0: entered promiscuous mode [ 88.673709][ T4593] hsr_slave_1: entered promiscuous mode [ 88.693036][ T4593] debugfs: 'hsr0' already exists in 'hsr' [ 88.699093][ T4593] Cannot create hsr debugfs directory [ 88.830471][ T4737] loop1: detected capacity change from 0 to 512 [ 88.839691][ T4737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.840181][ T28] audit: type=1400 audit(1781848605.485:621): avc: denied { write } for pid=4727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.848448][ T4737] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.886798][ T4737] EXT4-fs (loop1): orphan cleanup on readonly fs [ 88.896998][ T4737] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.343: Allocating blocks 41-42 which overlap fs metadata [ 88.910692][ T4737] loop1: lost filesystem error report for type 5 error -117 [ 88.910945][ T4737] EXT4-fs (loop1): Remounting filesystem read-only [ 88.918285][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 88.918309][ C0] EXT4-fs (loop1): initial error at time 1781848605: ext4_mb_mark_diskspace_used:4222 [ 88.918354][ C0] EXT4-fs (loop1): last error at time 1781848605: ext4_mb_mark_diskspace_used:4222 [ 88.950296][ T4737] EXT4-fs (loop1): 1 truncate cleaned up [ 88.957519][ T4593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.964340][ T4737] EXT4-fs (loop1): pa ffff8881065cd3f0: logic 1, phys. 41, len 23 [ 88.972954][ T4737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.988143][ T4593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.007879][ T4756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'. [ 89.021919][ T4593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.040227][ T4593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.048961][ T4593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.068877][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.080983][ T4593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.089957][ T3016] 8021q: adding VLAN 0 to HW filter on device eth1 [ 89.097200][ T4593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.105764][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.118786][ T4593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.277993][ T4593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.295529][ T4593] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.328827][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.349057][ T4593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.367385][ T4593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.414110][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.421241][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.469261][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.476488][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.704893][ T4788] syzkaller0: entered promiscuous mode [ 89.738138][ T4788] syzkaller0: entered allmulticast mode [ 89.751204][ T4793] tipc: Started in network mode [ 89.776673][ T4793] tipc: Node identity 8a97b9c5171a, cluster identity 4711 [ 89.789266][ T4793] tipc: Enabled bearer , priority 0 [ 89.799344][ T4775] tipc: Resetting bearer [ 89.836710][ T4774] tipc: Resetting bearer [ 89.848943][ T4810] loop2: detected capacity change from 0 to 512 [ 89.857962][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 89.857979][ T28] audit: type=1400 audit(1781848606.505:625): avc: denied { write } for pid=4786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.906966][ T4810] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.355: inode has both inline data and extents flags [ 89.907828][ T4774] tipc: Disabling bearer [ 89.931721][ T4810] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.931851][ T4810] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.355: couldn't read orphan inode 15 (err -117) [ 89.941116][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 89.941139][ C0] EXT4-fs (loop2): initial error at time 1781848606: ext4_orphan_get:1399: inode 15 [ 89.941173][ C0] EXT4-fs (loop2): last error at time 1781848606: ext4_orphan_get:1399: inode 15 [ 89.941296][ T28] audit: type=1400 audit(1781848606.575:626): avc: denied { execute } for pid=4814 comm="syz.0.356" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 89.961027][ T4810] loop2: lost filesystem error report for type 5 error -117 [ 90.006188][ T4810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.040399][ T28] audit: type=1400 audit(1781848606.675:627): avc: denied { write } for pid=4818 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.050144][ T4822] loop1: detected capacity change from 0 to 512 [ 90.077590][ T28] audit: type=1400 audit(1781848606.725:628): avc: denied { write } for pid=4808 comm="syz.2.355" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.112654][ T3016] 8021q: adding VLAN 0 to HW filter on device eth4 [ 90.132406][ T28] audit: type=1400 audit(1781848606.725:629): avc: denied { write } for pid=4808 comm="syz.2.355" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.164896][ T28] audit: type=1400 audit(1781848606.725:630): avc: denied { mounton } for pid=4808 comm="syz.2.355" path="/60/file0/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.192749][ T4810] loop2: detected capacity change from 512 to 0 [ 90.195230][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.232698][ T4822] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.233413][ T3300] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 90.243136][ T28] audit: type=1400 audit(1781848606.865:631): avc: denied { write } for pid=4833 comm="syz.4.360" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.280440][ T28] audit: type=1400 audit(1781848606.865:632): avc: denied { open } for pid=4833 comm="syz.4.360" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.303911][ T28] audit: type=1400 audit(1781848606.865:633): avc: denied { ioctl } for pid=4833 comm="syz.4.360" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.311367][ T4593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.365672][ T28] audit: type=1400 audit(1781848606.995:634): avc: denied { write } for pid=4820 comm="syz.1.358" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.366444][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.421300][ T4691] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:5009: inode #2: block 5: comm kworker/u8:8: unable to read itable block [ 90.463987][ T4691] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 90.496277][ T4691] EXT4-fs (loop2): I/O error while writing superblock [ 90.527744][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.556365][ T4854] capability: warning: `syz.1.363' uses deprecated v2 capabilities in a way that may be insecure [ 90.730557][ T3300] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 90.747357][ T3300] EXT4-fs (loop2): I/O error while writing superblock [ 91.296750][ T4863] loop0: detected capacity change from 0 to 512 [ 91.385152][ T4869] loop1: detected capacity change from 0 to 256 [ 91.423214][ T4869] FAT-fs (loop1): bogus number of directory entries (129) [ 91.449671][ T4869] FAT-fs (loop1): Can't find a valid FAT filesystem [ 91.476333][ T4691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.005141][ T4886] loop4: detected capacity change from 0 to 256 [ 92.090101][ T4886] FAT-fs (loop4): codepage cp737 not found [ 92.332070][ T4593] veth0_vlan: entered promiscuous mode [ 92.359029][ T4691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.403316][ T4593] veth1_vlan: entered promiscuous mode [ 92.442399][ T4904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.473306][ T4691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.498371][ T4904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.537944][ T4593] veth0_macvtap: entered promiscuous mode [ 92.551041][ T4911] syzkaller0: entered promiscuous mode [ 92.556660][ T4911] syzkaller0: entered allmulticast mode [ 92.575697][ T4593] veth1_macvtap: entered promiscuous mode [ 92.589412][ T4691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.601244][ T4911] tipc: Enabled bearer , priority 0 [ 92.611380][ T4910] tipc: Resetting bearer [ 92.625484][ T4910] tipc: Disabling bearer [ 92.647509][ T4593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.685959][ T4593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.755404][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.772499][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.792733][ T4691] bridge_slave_1: left allmulticast mode [ 92.798470][ T4691] bridge_slave_1: left promiscuous mode [ 92.804674][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.813813][ T4691] bridge_slave_0: left allmulticast mode [ 92.827996][ T4691] bridge_slave_0: left promiscuous mode [ 92.836556][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.939115][ T4691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.963167][ T4691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.974105][ T4691] bond0 (unregistering): Released all slaves [ 92.985963][ T4691] bond1 (unregistering): Released all slaves [ 93.005897][ T4691] bond2 (unregistering): Released all slaves [ 93.025924][ T4691] bond3 (unregistering): Released all slaves [ 93.067617][ T4691] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 93.102833][ T4691] bond4 (unregistering): Released all slaves [ 93.138250][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.166668][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.240173][ T4691] hsr_slave_0: left promiscuous mode [ 93.262487][ T4691] hsr_slave_1: left promiscuous mode [ 93.271157][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.294535][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.312008][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.333580][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.348843][ T4691] veth1_macvtap: left promiscuous mode [ 93.359177][ T4691] veth1_vlan: left promiscuous mode [ 93.368281][ T4691] veth0_vlan: left promiscuous mode [ 93.462173][ T4954] loop4: detected capacity change from 0 to 128 [ 93.468784][ T4691] team0 (unregistering): Port device team_slave_1 removed [ 93.480312][ T4691] team0 (unregistering): Port device team_slave_0 removed [ 93.480696][ T4954] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.504917][ T4954] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.521397][ T3016] 8021q: adding VLAN 0 to HW filter on device eth5 [ 93.581394][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.632906][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.632938][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.633008][ T4893] bridge_slave_0: entered allmulticast mode [ 93.633423][ T4893] bridge_slave_0: entered promiscuous mode [ 93.634528][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.634570][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.634666][ T4893] bridge_slave_1: entered allmulticast mode [ 93.639662][ T4893] bridge_slave_1: entered promiscuous mode [ 93.705792][ T4893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.717660][ T4893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.747619][ T4893] team0: Port device team_slave_0 added [ 93.755918][ T4893] team0: Port device team_slave_1 added [ 93.780338][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.787695][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.840414][ T4893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.890682][ T4985] loop4: detected capacity change from 0 to 256 [ 93.917917][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.937711][ T4985] vfat: Bad value for 'time_offset' [ 93.960577][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.988929][ T4987] loop0: detected capacity change from 0 to 1024 [ 94.015198][ T4987] EXT4-fs (loop0): unsupported inode size: 4096 [ 94.033307][ T4987] EXT4-fs (loop0): blocksize: 1024 [ 94.119762][ T4893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.260420][ T4987] loop0: detected capacity change from 0 to 512 [ 94.268346][ T4996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.286628][ T4996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.287062][ T3016] 8021q: adding VLAN 0 to HW filter on device eth6 [ 94.310914][ T4993] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 94.326463][ T4999] loop0: detected capacity change from 0 to 512 [ 94.327100][ T4893] hsr_slave_0: entered promiscuous mode [ 94.333865][ T4999] EXT4-fs: journaled quota format not specified [ 94.342919][ T4893] hsr_slave_1: entered promiscuous mode [ 94.350764][ T4893] debugfs: 'hsr0' already exists in 'hsr' [ 94.357230][ T4893] Cannot create hsr debugfs directory [ 94.527367][ T5012] tipc: Started in network mode [ 94.535283][ T5012] tipc: Node identity 5e8640b0801b, cluster identity 4711 [ 94.551449][ T5012] tipc: Enabled bearer , priority 0 [ 94.579436][ T5012] tipc: Disabling bearer [ 94.604677][ T4893] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.619960][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.628188][ T4893] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.637051][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.646352][ T3016] 8021q: adding VLAN 0 to HW filter on device eth7 [ 94.662139][ T4893] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.670787][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.678550][ T4893] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.687512][ T4893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.738627][ T4893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.751798][ T4893] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.761847][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.768985][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.804214][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.811337][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.865948][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 94.865965][ T28] audit: type=1400 audit(1781848611.515:648): avc: denied { write } for pid=5034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.907158][ T5050] loop4: detected capacity change from 0 to 128 [ 94.930119][ T5050] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.934717][ T28] audit: type=1400 audit(1781848611.575:649): avc: denied { write } for pid=5049 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.958981][ T5050] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.008551][ T3016] 8021q: adding VLAN 0 to HW filter on device eth8 [ 95.048513][ T28] audit: type=1400 audit(1781848611.695:650): avc: denied { write } for pid=5048 comm="syz.4.406" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.102371][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.162475][ T5063] loop4: detected capacity change from 0 to 1024 [ 95.193198][ T5063] EXT4-fs: Ignoring removed orlov option [ 95.201621][ T4893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.208997][ T5063] EXT4-fs: inline encryption not supported [ 95.224036][ T5063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.258922][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.303626][ T5076] SELinux: invalid class [ 95.308177][ T5076] SELinux: failed to load policy [ 95.368154][ T5085] loop0: detected capacity change from 0 to 512 [ 95.384417][ T5085] EXT4-fs: Ignoring removed oldalloc option [ 95.422982][ T5085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.444928][ T4893] veth0_vlan: entered promiscuous mode [ 95.448154][ T5093] loop1: detected capacity change from 0 to 1024 [ 95.454989][ T4893] veth1_vlan: entered promiscuous mode [ 95.460247][ T5085] EXT4-fs (loop0): 1 orphan inode deleted [ 95.470135][ T5093] EXT4-fs: Ignoring removed oldalloc option [ 95.472522][ T4893] veth0_macvtap: entered promiscuous mode [ 95.477932][ T5093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.484383][ T4893] veth1_macvtap: entered promiscuous mode [ 95.491178][ T5085] EXT4-fs (loop0): 1 truncate cleaned up [ 95.495407][ T5093] EXT4-fs: Ignoring removed i_version option [ 95.500765][ T5085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.529046][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.537942][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.557008][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.574781][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.586465][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.588396][ T5085] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.0.410: path /79/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 95.596615][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.664269][ T5093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.679183][ T5093] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.706456][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.727294][ T28] audit: type=1400 audit(1781848612.375:651): avc: denied { write } for pid=5092 comm="syz.1.411" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.752761][ T5093] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.411: lblock 3 mapped to illegal pblock 3 (length 2) [ 95.768920][ T5093] EXT4-fs (loop1): Remounting filesystem read-only [ 95.776208][ T28] audit: type=1400 audit(1781848612.405:652): avc: denied { append } for pid=5092 comm="syz.1.411" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.849523][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.132675][ T5111] loop6: detected capacity change from 0 to 1024 [ 96.141531][ T5111] EXT4-fs: Ignoring removed nobh option [ 96.147370][ T5111] EXT4-fs: Ignoring removed bh option [ 96.159640][ T5111] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 96.170587][ T5113] loop0: detected capacity change from 0 to 256 [ 96.199197][ T5113] FAT-fs (loop0): IO charset cp850 not found [ 96.225019][ T5111] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 96.233836][ T5111] System zones: 0-1, 3-12 [ 96.238878][ T5111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.258362][ T28] audit: type=1400 audit(1781848612.905:653): avc: denied { write } for pid=5110 comm="syz.6.416" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.290055][ T5111] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.303782][ T5121] EXT4-fs: Ignoring removed nobh option [ 96.309659][ T5121] EXT4-fs: Ignoring removed bh option [ 96.317190][ T5121] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 96.347941][ T4893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.353331][ T5121] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 96.366640][ T5121] System zones: 0-1, 3-12 [ 96.366720][ T5125] FAT-fs (loop0): codepage cp852 not found [ 96.371613][ T5121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.436397][ T28] audit: type=1400 audit(1781848613.065:654): avc: denied { write } for pid=5120 comm="syz.4.417" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.469804][ T28] audit: type=1400 audit(1781848613.115:655): avc: denied { create } for pid=5129 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.489871][ T28] audit: type=1400 audit(1781848613.115:656): avc: denied { write } for pid=5129 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.554752][ T5137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.583301][ T5137] EXT4-fs (loop0): 1 truncate cleaned up [ 96.595447][ T5137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.609625][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.621079][ T28] audit: type=1400 audit(1781848613.275:657): avc: denied { watch watch_reads } for pid=5136 comm="syz.0.423" path="/84/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.659904][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.674363][ T5141] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.712918][ T5143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.728826][ T5141] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.424: bad orphan inode 13 [ 96.747311][ T5141] loop4: lost filesystem error report for type 5 error -117 [ 96.747719][ T5141] ext4_test_bit(bit=12, block=18) = 1 [ 96.755092][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 96.755117][ C0] EXT4-fs (loop4): last error at time 1781848613: ext4_orphan_get:1425 [ 96.773439][ T5143] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.778336][ T5141] is_bad_inode(inode)=0 [ 96.790550][ T5141] NEXT_ORPHAN(inode)=0 [ 96.794810][ T5143] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 96.795631][ T5141] max_ino=32 [ 96.811909][ T5141] i_nlink=1 [ 96.816209][ T5141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 96.828997][ T5143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 96.854380][ T5143] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 96.854810][ T5149] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 96.885935][ T5143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 96.899593][ T5143] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 96.914361][ T5143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 96.934028][ T5149] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 96.943487][ T5149] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 96.959713][ T5143] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 96.974054][ T5149] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 97.036567][ T5143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 97.060500][ T5143] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 97.153582][ T5157] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 97.172354][ T5157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.424: bg 0: block 248: padding at end of block bitmap is not set [ 97.189981][ T5157] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.424: Failed to acquire dquot type 1 [ 97.227613][ T5143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 97.260966][ T5159] tipc: Enabling of bearer rejected, failed to enable media [ 97.656100][ T5143] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 97.676578][ T5168] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 97.678695][ T5149] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 97.694739][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 97.711697][ T5168] EXT4-fs (loop6): 1 truncate cleaned up [ 97.717458][ T5149] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 97.717495][ T5149] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.425: corrupted xattr block 33: e_value out of bounds [ 97.726670][ T5149] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 97.726704][ T5149] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.726704][ T5149] [ 97.726722][ T5149] EXT4-fs (loop0): Total free blocks count 0 [ 97.726738][ T5149] EXT4-fs (loop0): Free/Dirty block details [ 97.726753][ T5149] EXT4-fs (loop0): free_blocks=65280 [ 97.740971][ T5168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.785637][ T5149] EXT4-fs (loop0): dirty_blocks=33 [ 97.827294][ T5149] EXT4-fs (loop0): Block reservation details [ 97.827952][ T5171] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.833390][ T5149] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 97.854072][ T5143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 97.911503][ T5171] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 97.926348][ T5173] EXT4-fs (loop1): unsupported inode size: 2 [ 97.935665][ T5173] EXT4-fs (loop1): blocksize: 4096 [ 97.982481][ T5142] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.982915][ T5142] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 98.908291][ T5196] set_capacity_and_notify: 11 callbacks suppressed [ 98.908308][ T5196] loop0: detected capacity change from 0 to 256 [ 98.942382][ T5186] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.434: Bad quota inum: 65529, type: 0 [ 98.954733][ T5178] EXT4-fs mount: 1 callbacks suppressed [ 98.954778][ T5178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.973291][ T5186] loop1: lost filesystem error report for type 5 error -117 [ 98.973514][ T5186] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=65529). Please run e2fsck to fix. [ 98.995827][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.995847][ C1] EXT4-fs (loop1): initial error at time 1781848615: ext4_quota_enable:7228 [ 98.995880][ C1] EXT4-fs (loop1): last error at time 1781848615: ext4_quota_enable:7228 [ 99.030840][ T5178] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.046353][ T5199] loop0: detected capacity change from 0 to 128 [ 99.052948][ T5186] EXT4-fs (loop1): mount failed [ 99.858320][ T4893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.916053][ T5201] syzkaller0: entered promiscuous mode [ 99.952335][ T5201] syzkaller0: entered allmulticast mode [ 99.982146][ T5206] can0: slcan on ttyS3. [ 99.988416][ T5208] tipc: Enabled bearer , priority 0 [ 100.020119][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 100.020136][ T28] audit: type=1400 audit(1781848616.665:667): avc: denied { read } for pid=5210 comm="syz.0.444" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.078818][ T5200] tipc: Resetting bearer [ 100.106284][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.115865][ T5206] can0 (unregistered): slcan off ttyS3. [ 100.122498][ T5200] tipc: Disabling bearer [ 100.151650][ T5217] loop6: detected capacity change from 0 to 512 [ 100.170189][ T5217] EXT4-fs: Ignoring removed i_version option [ 100.196712][ T5217] EXT4-fs: Ignoring removed bh option [ 100.214007][ T5221] loop1: detected capacity change from 0 to 4096 [ 100.228423][ T5221] EXT4-fs: quotafile must be on filesystem root [ 100.275148][ T5217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.318672][ T5228] loop0: detected capacity change from 0 to 256 [ 100.368952][ T5234] loop5: detected capacity change from 0 to 1024 [ 100.444904][ T5217] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.456712][ T5234] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.466664][ T5228] FAT-fs (loop0): codepage cp949 not found [ 100.471632][ T5234] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 100.516753][ T5234] JBD2: no valid journal superblock found [ 100.566876][ T5238] loop1: detected capacity change from 0 to 512 [ 100.616873][ T5234] EXT4-fs (loop5): Could not load journal inode [ 100.645051][ T5238] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.448: inode has both inline data and extents flags [ 100.658293][ T5238] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.658762][ T5238] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.448: couldn't read orphan inode 15 (err -117) [ 100.667972][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 100.667993][ C1] EXT4-fs (loop1): initial error at time 1781848617: ext4_orphan_get:1399: inode 15 [ 100.668032][ C1] EXT4-fs (loop1): last error at time 1781848617: ext4_orphan_get:1399: inode 15 [ 100.705498][ T5238] loop1: lost filesystem error report for type 5 error -117 [ 100.707050][ T5238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 100.748385][ T28] audit: type=1400 audit(1781848617.385:668): avc: denied { write } for pid=5219 comm="syz.1.448" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.866999][ T4893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.353350][ T28] audit: type=1400 audit(1781848617.445:669): avc: denied { mounton } for pid=5227 comm="syz.0.449" path="/95/bus" dev="tmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.457286][ T5256] loop6: detected capacity change from 0 to 512 [ 101.510207][ T5256] EXT4-fs: Ignoring removed bh option [ 101.529481][ T28] audit: type=1400 audit(1781848617.945:670): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 101.583395][ T5256] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 101.634085][ T5270] loop0: detected capacity change from 0 to 512 [ 101.657547][ T28] audit: type=1400 audit(1781848618.145:671): avc: denied { getopt } for pid=5257 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.679596][ T5270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.697698][ T5256] EXT4-fs (loop6): 1 truncate cleaned up [ 101.712029][ T5270] EXT4-fs: inline encryption not supported [ 101.723571][ T5256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.754122][ T28] audit: type=1400 audit(1781848618.275:672): avc: denied { write } for pid=5242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.784087][ T5270] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 102.253568][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 102.275220][ T5270] EXT4-fs (loop0): 1 truncate cleaned up [ 102.542822][ T28] audit: type=1400 audit(1781848618.275:673): avc: denied { mount } for pid=5268 comm="syz.5.461" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.561495][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.565228][ T28] audit: type=1400 audit(1781848618.335:674): avc: denied { getopt } for pid=5268 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.034680][ T28] audit: type=1400 audit(1781848618.885:675): avc: denied { write } for pid=5280 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.056588][ T28] audit: type=1400 audit(1781848618.925:676): avc: denied { write } for pid=5255 comm="syz.6.453" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.122299][ T5290] loop4: detected capacity change from 0 to 512 [ 103.123182][ T5290] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.130706][ T5270] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 103.131130][ T5290] EXT4-fs (loop4): 1 truncate cleaned up [ 103.131745][ T5290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.241814][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.249062][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.317143][ T5306] EXT4-fs: test_dummy_encryption option not supported [ 103.392883][ T5308] loop4: p2 < > p3 < > p4 < > [ 103.392904][ T5308] loop4: partition table partially beyond EOD, truncated [ 103.393043][ T5308] loop4: p2 start 4278190080 is beyond EOD, truncated [ 103.393061][ T5308] loop4: p3 start 720896 is beyond EOD, truncated [ 103.422105][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 103.656670][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.695346][ T5333] FAT-fs (loop4): codepage cp866 not found [ 103.706976][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.396821][ T4893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.433389][ T5362] set_capacity_and_notify: 4 callbacks suppressed [ 104.433405][ T5362] loop5: detected capacity change from 0 to 256 [ 104.588784][ T5362] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 104.617170][ T5362] FAT-fs (loop5): Filesystem has been set read-only [ 104.773560][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.913866][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.952895][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.068299][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 105.068391][ T28] audit: type=1400 audit(1781848621.715:751): avc: denied { allowed } for pid=5378 comm="syz.6.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.304000][ T5375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.313463][ T5375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.653416][ T68] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.766698][ T5400] 9p: Bad value for 'wfdno' [ 105.808646][ T68] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.936024][ T68] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.001631][ T28] audit: type=1400 audit(1781848622.645:752): avc: denied { prog_run } for pid=5411 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.018433][ T5416] loop1: detected capacity change from 0 to 512 [ 106.043968][ T5416] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.489: iget: bad i_size value: 38620345925642 [ 106.058823][ T68] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.092107][ T28] audit: type=1400 audit(1781848622.735:753): avc: denied { read } for pid=5401 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.119964][ T5416] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.120297][ T5416] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.489: couldn't read orphan inode 15 (err -117) [ 106.129483][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 106.129509][ C1] EXT4-fs (loop1): initial error at time 1781848622: ext4_orphan_get:1399: inode 15 [ 106.129557][ C1] EXT4-fs (loop1): last error at time 1781848622: ext4_orphan_get:1399: inode 15 [ 106.129992][ T5409] syzkaller0: entered promiscuous mode [ 106.141647][ T5416] loop1: lost filesystem error report for type 5 error -117 [ 106.180998][ T5424] loop4: detected capacity change from 0 to 512 [ 106.201702][ T5426] loop5: detected capacity change from 0 to 128 [ 106.205880][ T5409] syzkaller0: entered allmulticast mode [ 106.222518][ T5404] tipc: Started in network mode [ 106.227627][ T5424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.233615][ T5404] tipc: Node identity 42c7ae052d5c, cluster identity 4711 [ 106.241433][ T5426] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 106.245293][ T5416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.252682][ T5426] FAT-fs (loop5): Filesystem has been set read-only [ 106.271970][ T5404] tipc: Enabled bearer , priority 0 [ 106.289679][ T5401] tipc: Disabling bearer [ 106.296061][ T5424] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 106.312579][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 106.312852][ T28] audit: type=1400 audit(1781848622.955:754): avc: denied { write } for pid=5396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.319223][ C1] EXT4-fs (loop4): initial error at time 1781848622: ext4_mb_generate_buddy:1317 [ 106.319247][ C1] EXT4-fs (loop4): last error at time 1781848622: ext4_mb_generate_buddy:1317 [ 106.352452][ T5424] EXT4-fs (loop4): 1 truncate cleaned up [ 106.367147][ T5424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.371744][ T5416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.489: bg 0: block 5: invalid block bitmap [ 106.411915][ T5409] tipc: Started in network mode [ 106.416938][ T28] audit: type=1400 audit(1781848623.015:755): avc: denied { write } for pid=5413 comm="syz.1.489" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.423465][ T5409] tipc: Node identity ce1b69f03a97, cluster identity 4711 [ 106.439130][ T28] audit: type=1400 audit(1781848623.015:756): avc: denied { map } for pid=5413 comm="syz.1.489" path="/94/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.470041][ T5409] tipc: Enabled bearer , priority 0 [ 106.487920][ T5435] loop5: detected capacity change from 0 to 512 [ 106.496264][ T5408] tipc: Resetting bearer [ 106.530049][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.536658][ T28] audit: type=1400 audit(1781848623.105:757): avc: denied { write } for pid=5436 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.542771][ T5408] tipc: Disabling bearer [ 106.567861][ T5435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.568697][ T28] audit: type=1400 audit(1781848623.145:758): avc: denied { write } for pid=5423 comm="syz.4.490" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.592240][ T5435] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.605002][ T28] audit: type=1400 audit(1781848623.145:759): avc: denied { read } for pid=5423 comm="syz.4.490" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.615472][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.652700][ T5444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.493'. [ 106.671300][ T28] audit: type=1400 audit(1781848623.315:760): avc: denied { read write } for pid=5445 comm="syz.1.495" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 106.696402][ T4593] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.705813][ T5448] loop4: detected capacity change from 0 to 1024 [ 106.715330][ T5448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.724529][ T5448] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 106.773522][ T5455] loop5: detected capacity change from 0 to 128 [ 106.781547][ T5448] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.494: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.819285][ T5448] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 106.819543][ T5448] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.494: Failed to acquire dquot type 0 [ 106.828726][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 106.828745][ C1] EXT4-fs (loop4): initial error at time 1781848623: ext4_map_blocks:833: inode 3: block 1 [ 106.828782][ C1] EXT4-fs (loop4): last error at time 1781848623: ext4_map_blocks:833: inode 3: block 1 [ 106.855384][ T5455] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.856610][ T5448] loop4: lost filesystem error report for type 5 error -117 [ 106.883114][ T5448] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.494: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.903934][ T5448] loop4: lost filesystem error report for type 5 error -117 [ 106.904160][ T5455] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.933135][ T5448] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.494: Invalid inode bitmap blk 0 in block_group 0 [ 106.956108][ T4691] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.001931][ T4691] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.002201][ T4691] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 0 [ 107.023977][ T5448] loop4: lost filesystem error report for type 5 error -117 [ 107.024247][ T5448] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 107.041027][ T4691] loop4: lost filesystem error report for type 5 error -117 [ 107.041585][ T5448] loop4: lost filesystem error report for type 5 error -117 [ 107.049795][ T5448] EXT4-fs (loop4): 1 orphan inode deleted [ 107.064537][ T5448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.083045][ T5455] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.496: No space for directory leaf checksum. Please run e2fsck -D. [ 107.116195][ T5471] tipc: Enabled bearer , priority 0 [ 107.135107][ T5455] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.496: checksumming directory block 0 [ 107.150764][ T5469] tipc: Disabling bearer [ 107.227350][ T4593] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.275068][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.447437][ T5474] syzkaller0: entered promiscuous mode [ 107.453097][ T5474] syzkaller0: entered allmulticast mode [ 107.462520][ T5474] tipc: Started in network mode [ 107.467506][ T5474] tipc: Node identity 42ba615ea7e3, cluster identity 4711 [ 107.474961][ T5474] tipc: Enabled bearer , priority 0 [ 107.491184][ T5473] tipc: Resetting bearer [ 107.550176][ T5473] tipc: Disabling bearer [ 107.657221][ T5490] loop1: detected capacity change from 0 to 256 [ 107.864397][ T5492] loop6: detected capacity change from 0 to 1024 [ 108.026170][ T5497] loop0: detected capacity change from 0 to 512 [ 108.768992][ T5504] netlink: 'syz.4.517': attribute type 12 has an invalid length. [ 108.809124][ T5497] EXT4-fs (loop0): failed to initialize system zone (-117) [ 108.817585][ T5492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.845972][ T5497] EXT4-fs (loop0): mount failed [ 108.861385][ T5507] syzkaller0: entered promiscuous mode [ 108.884647][ T5507] syzkaller0: entered allmulticast mode [ 108.906246][ T4893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.908954][ T5507] tipc: Enabled bearer , priority 0 [ 108.928239][ T5505] tipc: Resetting bearer [ 108.962277][ T5505] tipc: Disabling bearer [ 109.001905][ T5529] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 109.017014][ T5523] syzkaller0: entered promiscuous mode [ 109.032542][ T5523] syzkaller0: entered allmulticast mode [ 109.048555][ T5529] EXT4-fs (loop0): 1 truncate cleaned up [ 109.073009][ T5529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.079099][ T5523] tipc: Enabled bearer , priority 0 [ 109.129398][ T5538] FAT-fs (loop6): IO charset koi8-ru not found [ 109.135926][ T5541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5541 comm=syz.5.524 [ 109.148705][ T5522] tipc: Resetting bearer [ 109.156598][ T5522] tipc: Disabling bearer [ 109.260169][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.283359][ T5551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 109.299819][ T5551] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.313745][ T5551] EXT4-fs (loop1): shut down requested (0) [ 109.329103][ T5557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.338189][ T5557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.016670][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 110.061848][ T5565] SELinux: policydb string length 32776 does not match expected length 8 [ 110.083097][ T5565] SELinux: failed to load policy [ 110.126730][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 110.126747][ T28] audit: type=1400 audit(1781848626.775:793): avc: denied { write } for pid=5562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.246314][ T5585] set_capacity_and_notify: 4 callbacks suppressed [ 110.246331][ T5585] loop1: detected capacity change from 0 to 512 [ 110.420400][ T5585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.461115][ T5588] loop6: detected capacity change from 0 to 4096 [ 110.475294][ T5585] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.507257][ T5588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.694235][ T5588] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.536: corrupted inode contents [ 110.745707][ T28] audit: type=1400 audit(1781848626.785:794): avc: denied { write } for pid=5580 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.810286][ T5588] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #15: comm syz.6.536: mark_inode_dirty error [ 110.833016][ T28] audit: type=1400 audit(1781848627.265:795): avc: denied { write } for pid=5582 comm="syz.1.535" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.845832][ T5588] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.536: corrupted inode contents [ 110.856255][ T28] audit: type=1400 audit(1781848627.325:796): avc: denied { write } for pid=5587 comm="syz.6.536" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.888592][ T28] audit: type=1400 audit(1781848627.505:797): avc: denied { create } for pid=5605 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.909197][ T28] audit: type=1400 audit(1781848627.545:798): avc: denied { setopt } for pid=5605 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.932129][ T5588] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.536: mark_inode_dirty error [ 110.937133][ T5609] syzkaller0: entered promiscuous mode [ 110.944500][ T28] audit: type=1400 audit(1781848627.575:799): avc: denied { write } for pid=5587 comm="syz.6.536" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.988163][ T5609] syzkaller0: entered allmulticast mode [ 111.006366][ T5609] tipc: Enabled bearer , priority 0 [ 111.016393][ T28] audit: type=1400 audit(1781848627.665:800): avc: denied { write } for pid=5589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.016564][ T5588] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.536: corrupted inode contents [ 111.064088][ T5607] tipc: Resetting bearer [ 111.082322][ T5599] ================================================================== [ 111.083420][ T5607] tipc: Disabling bearer [ 111.090457][ T5599] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 111.103001][ T28] audit: type=1400 audit(1781848627.725:801): avc: denied { connect } for pid=5612 comm="syz.4.540" lport=254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.104223][ T5599] [ 111.104234][ T5599] write to 0xffff88810b1d80a0 of 8 bytes by task 5585 on cpu 1: [ 111.129242][ T5588] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.536: mark_inode_dirty error [ 111.134492][ T5599] filemap_splice_read+0x52a/0x790 [ 111.150728][ T5599] ext4_file_splice_read+0x8f/0xb0 [ 111.155858][ T5599] splice_direct_to_actor+0x261/0x680 [ 111.161273][ T5599] do_splice_direct+0x119/0x1a0 [ 111.166148][ T5599] do_sendfile+0x37d/0x640 [ 111.170583][ T5599] __x64_sys_sendfile64+0x105/0x150 [ 111.175841][ T5599] x64_sys_call+0x2dc4/0x3020 [ 111.179856][ T5588] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.536: corrupted inode contents [ 111.180565][ T5599] do_syscall_64+0x136/0x3c0 [ 111.196977][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.202915][ T5599] [ 111.205255][ T5599] write to 0xffff88810b1d80a0 of 8 bytes by task 5599 on cpu 0: [ 111.209390][ T5588] EXT4-fs error (device loop6): ext4_truncate:4691: inode #15: comm syz.6.536: mark_inode_dirty error [ 111.212909][ T5599] filemap_splice_read+0x52a/0x790 [ 111.212949][ T5599] ext4_file_splice_read+0x8f/0xb0 [ 111.234250][ T5599] splice_direct_to_actor+0x261/0x680 [ 111.239724][ T5599] do_splice_direct+0x119/0x1a0 [ 111.244603][ T5599] do_sendfile+0x37d/0x640 [ 111.249048][ T5599] __x64_sys_sendfile64+0x105/0x150 [ 111.249294][ T5588] EXT4-fs error (device loop6) in ext4_setattr:6172: Corrupt filesystem [ 111.254264][ T5599] x64_sys_call+0x2dc4/0x3020 [ 111.254302][ T5599] do_syscall_64+0x136/0x3c0 [ 111.272044][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.277958][ T5599] [ 111.280331][ T5599] value changed: 0x00000000000000d2 -> 0x00000000000000d3 [ 111.287450][ T5599] [ 111.289792][ T5599] Reported by Kernel Concurrency Sanitizer on: [ 111.295965][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: syz.1.535 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 111.306774][ T5599] Tainted: [W]=WARN [ 111.310586][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.320666][ T5599] ================================================================== [ 111.335579][ T28] audit: type=1400 audit(1781848627.985:802): avc: denied { write } for pid=5616 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.346898][ T5601] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.536: corrupted inode contents [ 111.381479][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.406864][ T4893] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.408705][ T4893] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.418606][ T4893] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 111.442093][ T4893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.