last executing test programs: 1m29.823192212s ago: executing program 32 (id=67): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x45e, &(0x7f00000008c0)="$eJzs3M9vFFUcAPDvzLZFKNiK+IMfahWNjT9aWlC5YjTxoImJHvBY20KQQg2tiRCiaAweDYl349FE/wFPejHqycSr3g0JMVxA42HM7M7Q7bIt7XZhqvv5JNO+N/O27333zdt9M6+7AfSskfxHErE9In6LiKFGdnmBkcav61fPT/919fx0Eln2xp9Jvdy1q+eny6Ll4waLzGgakX6SxN429S6cPXdyam5u9kyRH1889e74wtlzz544NXV89vjs6cnDhw8dnHjh+cnnuhJn3qZrez6Y37f7lbcuvTZ99NLbP32dlPG3xNElI6sdfCLLulxdtXY0pZO+ChvCutQiIu+u/vr4H4paLHXeULz8caWNA26rLMuywZUPX8iA/7Ekqm4BUI3yjT6//i23OzT12BSuHGlcAOVxXy+2xpG+SIsy/S3Xt900EhFHL/z9Rb7F7bkPAQCwzHdHIqs9027+l8b9TeXuLtaGhiPinojYGRH3RsSuiLgvol72gYh4cJ31ty6S3Dz/SS93FNga5fO/wbSxtrV8/lfO/mK4VuR21OPvT46dmJs9UDwno9G/Jc9PrFLH9y/9+tlKx5rnf/mW11/OBYt2XO7bsvwxM1OLUxuJudmVjyL29LWLP7mxEpBExO6I2NNhHSee+mrfSsduHf8qurDOlH0Z8WRjbfNCtMRfSlZfnxy/K+ZmD4yXZ8XNfv7l4usr1b+h+Lsg7/9t0b7/C8NJ83rtwvrruPj7pyte03R6/g8kb9bTA8W+96cWF89MRAwkrzYa3bx/cumxZb4sn8c/ur/9+N8ZS8/E3ojIT+KHIuLhiHikaPujEfFYROxfJf4fX3z8nc7jX/LN0CqVdCiPf2Yt/Z+n6v1/40Q4OxBTLXvaJ2onf/h2WaXD64k/7/9D9dRosWctr39raVdnZzMAAAD896QRsT2SdOxGOk3Hxhr/L78rtqVz8wuLTx+bf+/0TOMzAsPRn5Z3uoaa7odOFJf1ZX6yJX+wuG/8eW1rPT82PT83U3Xw0OMGVxj/uT9qVbcOuO18Xgt6l/EPvcv4h95l/EPvajP+t1bRDuDOa/f+/2EF7QDuvJbxb9kPeojrf+hdxj/0LuMfetLC1rj1h+QrT5QvUBv4O/9UHEWW3fT9CV1P9K/jiw82nIh0c5wb1Se2bI5mdDlR8QsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl/wbAAD//45C4d0=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x6, 0x4, 0x7, 0x20a}) timer_settime(0x0, 0x1, 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xee01) 1m19.865793825s ago: executing program 4 (id=292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$tcp_congestion(r1, &(0x7f00000005c0)='bbr\x00', 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m19.809902285s ago: executing program 4 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m19.780408656s ago: executing program 4 (id=295): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1m19.159528662s ago: executing program 4 (id=303): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x44000, 0x0) 1m19.088444673s ago: executing program 4 (id=305): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020600) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m18.894267125s ago: executing program 4 (id=306): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m18.824813215s ago: executing program 33 (id=306): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 50.708353946s ago: executing program 2 (id=715): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x90000004}) 49.824642335s ago: executing program 2 (id=735): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x2, 0x3}}, 0x20) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.821658075s ago: executing program 2 (id=736): getpgrp(0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(r0, &(0x7f0000000140)=""/125, 0x7d) 49.804191536s ago: executing program 2 (id=737): syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0xe6, 0x2602) r0 = syz_clone(0x4000580, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x6, 0x2, 0xa9, 0x7fffffffffffffff, 0x1000000000000, 0xfffffffffffffff5, 0x0, 0x7fff, 0x400005}) 49.659538677s ago: executing program 2 (id=738): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x7) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 49.100942053s ago: executing program 2 (id=741): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r3, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}}, 0x20}}, 0x40000) 49.086894043s ago: executing program 34 (id=741): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r3, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}}, 0x20}}, 0x40000) 31.426796745s ago: executing program 5 (id=1081): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000680)) 29.245290708s ago: executing program 5 (id=1109): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 29.108463759s ago: executing program 5 (id=1113): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x3c, 0x0, 0x0, 0x200}]}) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 28.09901736s ago: executing program 5 (id=1132): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x8220, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 27.716812054s ago: executing program 5 (id=1139): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) 27.459757026s ago: executing program 5 (id=1145): r0 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 27.422878637s ago: executing program 35 (id=1145): r0 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 14.246452393s ago: executing program 1 (id=1461): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00e4ffff02"], 0x48}}, 0x0) 14.160060944s ago: executing program 1 (id=1464): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x2, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 13.252617093s ago: executing program 1 (id=1482): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) 13.237915133s ago: executing program 1 (id=1484): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000003c0)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 13.187661784s ago: executing program 1 (id=1486): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 13.104621725s ago: executing program 1 (id=1487): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.104258545s ago: executing program 36 (id=1487): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.979980066s ago: executing program 7 (id=1507): r0 = fsopen(&(0x7f00000001c0)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffc, 0x0) 11.895922397s ago: executing program 7 (id=1508): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 11.856451927s ago: executing program 7 (id=1509): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 10.986444377s ago: executing program 7 (id=1521): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 10.937294107s ago: executing program 7 (id=1522): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0x1, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) 10.808621998s ago: executing program 7 (id=1523): unshare(0x8000000) r0 = semget$private(0x0, 0x1, 0x500) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fff, 0x1800}], 0x1, 0x0) unshare(0x8000000) 10.750929079s ago: executing program 37 (id=1523): unshare(0x8000000) r0 = semget$private(0x0, 0x1, 0x500) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0) r1 = semget$private(0x0, 0x207, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fff, 0x1800}], 0x1, 0x0) unshare(0x8000000) 2.86861604s ago: executing program 0 (id=1688): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='comm\x00') write$binfmt_script(r2, 0x0, 0x0) 2.073972348s ago: executing program 8 (id=1701): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 2.070776299s ago: executing program 0 (id=1693): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 2.044705179s ago: executing program 8 (id=1695): unshare(0x62000000) syz_mount_image$vfat(&(0x7f0000008140), &(0x7f0000008180)='./file0\x00', 0x0, &(0x7f00000081c0), 0x1, 0x8130, &(0x7f0000008200)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.894723391s ago: executing program 0 (id=1698): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd04}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.790653971s ago: executing program 0 (id=1700): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) 1.572333904s ago: executing program 6 (id=1708): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.424245636s ago: executing program 8 (id=1714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8e0bdeb9"], 0x10}, 0x40) 1.252266557s ago: executing program 3 (id=1715): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f00000010c0)=ANY=[], 0xa1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{0x0, 0x97}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2401c444) 1.198090918s ago: executing program 8 (id=1716): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000009dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006740)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0x10}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/4096, 0x1000}, 0x81}], 0x1, 0x2, 0x0) 1.142722068s ago: executing program 3 (id=1717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) 1.084513359s ago: executing program 8 (id=1718): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r2 = dup3(r1, r0, 0x80000) pread64(r2, 0x0, 0x0, 0x10001) 1.077595339s ago: executing program 3 (id=1719): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffefc, 0x80, 0x4, 0x359}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 978.22637ms ago: executing program 3 (id=1720): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000001540)={0xa, 0x4e21, 0x0, @private2, 0x800}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000010c0)="b3", 0x1}], 0x1}}, {{&(0x7f0000001400)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001bc0)='j', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e22, @local}}, [0x3, 0x2, 0x8, 0x2, 0x81, 0x7288, 0x8000000000000001, 0xe28b, 0xfffffffffffffffe, 0xc, 0xa, 0x800, 0xe, 0x0, 0xfffffffffffffff9]}, &(0x7f0000000000)=0x100) 870.025081ms ago: executing program 6 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 869.783671ms ago: executing program 0 (id=1722): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x4, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 869.589851ms ago: executing program 3 (id=1723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xd4, 0x50, 0x800}, 0x8) accept4(r0, 0x0, 0x0, 0x80800) 744.116542ms ago: executing program 3 (id=1724): r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 727.989853ms ago: executing program 8 (id=1725): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e300252c028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 644.091074ms ago: executing program 6 (id=1726): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 483.018565ms ago: executing program 6 (id=1727): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000380)=""/47, 0x2f) 426.529546ms ago: executing program 6 (id=1728): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)='z', 0x1}], 0x1, &(0x7f00000010c0)=ANY=[], 0xa1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{0x0, 0x97}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2401c444) 342.621837ms ago: executing program 6 (id=1729): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x195f, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 280.722817ms ago: executing program 9 (id=1731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) 229.840918ms ago: executing program 9 (id=1732): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 172.651588ms ago: executing program 9 (id=1733): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) 172.482048ms ago: executing program 9 (id=1734): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 139.750439ms ago: executing program 9 (id=1735): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 90.782239ms ago: executing program 9 (id=1736): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 60.113789ms ago: executing program 38 (id=1736): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 0s ago: executing program 0 (id=1739): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x436, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="c7", 0x5f) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x8000008) kernel console output (not intermixed with test programs): _orphan_del:303: Corrupt filesystem [ 80.840543][ T5412] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 80.842619][ T5428] loop1: lost filesystem error report for type 5 error -117 [ 80.854435][ T5412] syz.2.588: attempt to access beyond end of device [ 80.854435][ T5412] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 80.861106][ T5428] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.593: corrupted inode contents [ 80.874262][ T5412] syz.2.588: attempt to access beyond end of device [ 80.874262][ T5412] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 80.881415][ T5428] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.593: mark_inode_dirty error [ 80.893537][ T5412] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 80.906788][ T5428] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 80.935476][ T5428] loop1: lost filesystem error report for type 5 error -117 [ 80.935883][ T5412] syz.2.588: attempt to access beyond end of device [ 80.935883][ T5412] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 80.937118][ T5428] EXT4-fs (loop1): 1 truncate cleaned up [ 80.943945][ T5412] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 80.959396][ T5428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.974389][ T5412] syz.2.588: attempt to access beyond end of device [ 80.974389][ T5412] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 81.012969][ T5428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.593'. [ 81.014265][ T5412] syz.2.588: attempt to access beyond end of device [ 81.014265][ T5412] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 81.043366][ T5412] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 81.053970][ T5412] syz.2.588: attempt to access beyond end of device [ 81.053970][ T5412] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 81.069041][ T5412] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 81.083028][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.107014][ T5412] syz.2.588: attempt to access beyond end of device [ 81.107014][ T5412] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 81.126007][ T5412] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 81.138371][ T5412] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 81.171386][ T5412] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 81.185571][ T5412] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 81.195994][ T5446] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.249816][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 81.249830][ T28] audit: type=1400 audit(1778528585.059:503): avc: denied { ioctl } for pid=5448 comm="syz.3.603" path="socket:[10847]" dev="sockfs" ino=10847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.310081][ T5449] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 81.376239][ T28] audit: type=1400 audit(1778528585.179:504): avc: denied { kexec_image_load } for pid=5455 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 81.455247][ T5458] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 81.473042][ T5458] System zones: 0-1, 3-36 [ 81.481762][ T5458] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.607: bad orphan inode 134217728 [ 81.494808][ T5458] loop1: lost filesystem error report for type 5 error -117 [ 81.508886][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 81.522628][ C0] EXT4-fs (loop1): initial error at time 1778528585: ext4_orphan_get:1423 [ 81.531166][ C0] EXT4-fs (loop1): last error at time 1778528585: ext4_orphan_get:1423 [ 81.541775][ T5458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.572119][ T28] audit: type=1400 audit(1778528585.379:505): avc: denied { write } for pid=5457 comm="syz.1.607" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.655355][ T28] audit: type=1400 audit(1778528585.459:506): avc: denied { write } for pid=5466 comm="syz.2.611" path="socket:[10884]" dev="sockfs" ino=10884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.815431][ T5472] set_capacity_and_notify: 6 callbacks suppressed [ 81.815505][ T5472] loop2: detected capacity change from 0 to 512 [ 81.915118][ T5472] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.613: iget: checksum invalid [ 81.958762][ T5472] fserror_report: 5 callbacks suppressed [ 81.976804][ T5472] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 81.978887][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 81.994279][ C0] EXT4-fs (loop2): initial error at time 1778528585: __ext4_fill_super:5596: inode 2 [ 82.003759][ C0] EXT4-fs (loop2): last error at time 1778528585: __ext4_fill_super:5596: inode 2 [ 82.017139][ T5472] EXT4-fs (loop2): get root inode failed [ 82.032997][ T5472] EXT4-fs (loop2): mount failed [ 82.145565][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.258220][ T5494] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 82.287016][ T5494] SELinux: failed to load policy [ 82.706103][ T28] audit: type=1400 audit(1778528586.509:507): avc: denied { create } for pid=5503 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.751120][ T28] audit: type=1400 audit(1778528586.509:508): avc: denied { write } for pid=5503 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.799686][ T5516] loop6: detected capacity change from 0 to 256 [ 82.806090][ T28] audit: type=1326 audit(1778528586.599:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.5.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 82.836793][ T28] audit: type=1326 audit(1778528586.599:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.5.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 82.876394][ T28] audit: type=1326 audit(1778528586.599:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.5.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 82.903382][ T28] audit: type=1326 audit(1778528586.599:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.5.628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 82.978309][ T5524] __nla_validate_parse: 1 callbacks suppressed [ 82.978346][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.634'. [ 83.016512][ T3365] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 83.029883][ T3365] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.049792][ T5526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.058682][ T5526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.100200][ T5530] fido_id[5530]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.134260][ T5531] raw_sendmsg: syz.3.637 forgot to set AF_INET. Fix it! [ 83.197670][ T5536] loop6: detected capacity change from 0 to 128 [ 83.376956][ T5546] loop1: detected capacity change from 0 to 8192 [ 83.441321][ T3297] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 83.449660][ T3297] FAT-fs (loop1): Filesystem has been set read-only [ 83.782181][ T5578] SELinux: failed to load policy [ 83.931462][ T5600] netlink: 572 bytes leftover after parsing attributes in process `syz.2.668'. [ 83.940546][ T5600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 83.995248][ T5604] netlink: 'syz.2.670': attribute type 29 has an invalid length. [ 84.003978][ T5604] netlink: 'syz.2.670': attribute type 29 has an invalid length. [ 84.012460][ T5604] netlink: 500 bytes leftover after parsing attributes in process `syz.2.670'. [ 84.104780][ T5616] geneve2: entered promiscuous mode [ 84.111487][ T5616] geneve2: entered allmulticast mode [ 84.124185][ T310] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.132311][ T5616] loop2: detected capacity change from 0 to 256 [ 84.133146][ T310] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.152492][ T5616] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.167383][ T310] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.176311][ T310] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.177400][ T5616] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.890293][ T5622] loop6: detected capacity change from 0 to 512 [ 84.945242][ T5622] EXT4-fs: Ignoring removed oldalloc option [ 84.979597][ T5622] EXT4-fs (loop6): filesystem is read-only [ 84.997278][ T5622] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 85.054798][ T5622] EXT4-fs (loop6): filesystem is read-only [ 85.081988][ T5622] EXT4-fs (loop6): orphan cleanup on readonly fs [ 85.117240][ T5622] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.678: bg 0: block 64: padding at end of block bitmap is not set [ 85.176970][ T5622] loop6: lost filesystem error report for type 5 error -117 [ 85.178927][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 85.192674][ C0] EXT4-fs (loop6): initial error at time 1778528588: ext4_validate_block_bitmap:441 [ 85.202122][ C0] EXT4-fs (loop6): last error at time 1778528588: ext4_validate_block_bitmap:441 [ 85.221688][ T5622] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 85.239424][ T5622] loop6: lost filesystem error report for type 5 error -117 [ 85.243063][ T5622] EXT4-fs (loop6): 1 orphan inode deleted [ 85.284806][ T5622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.380791][ T5677] loop5: detected capacity change from 0 to 1024 [ 85.406138][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.420772][ T5677] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 85.452875][ T5677] System zones: 0-1, 3-36 [ 85.485197][ T5677] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.702: bad orphan inode 134217728 [ 85.524609][ T5677] loop5: lost filesystem error report for type 5 error -117 [ 85.524984][ T5677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.579037][ T5699] netlink: 1508 bytes leftover after parsing attributes in process `syz.1.710'. [ 85.588192][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.602351][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.710293][ T5706] Process accounting resumed [ 85.778550][ T5721] xt_hashlimit: size too large, truncated to 1048576 [ 85.898915][ T5728] netlink: 'syz.6.725': attribute type 4 has an invalid length. [ 85.940414][ T5731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5731 comm=syz.6.726 [ 85.952969][ T5731] netlink: 95 bytes leftover after parsing attributes in process `syz.6.726'. [ 86.007977][ T5733] loop6: detected capacity change from 0 to 512 [ 86.030533][ T5733] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.727: inode has both inline data and extents flags [ 86.050171][ T5733] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.055054][ T5733] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.727: couldn't read orphan inode 15 (err -117) [ 86.065508][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 86.065522][ C1] EXT4-fs (loop6): initial error at time 1778528589: ext4_orphan_get:1397: inode 15 [ 86.065549][ C1] EXT4-fs (loop6): last error at time 1778528589: ext4_orphan_get:1397: inode 15 [ 86.109856][ T3807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.181866][ T5733] loop6: lost filesystem error report for type 5 error -117 [ 86.187245][ T5733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.240086][ T5733] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 86.300500][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.372222][ T5751] loop1: detected capacity change from 0 to 256 [ 86.394890][ T28] kauditd_printk_skb: 491 callbacks suppressed [ 86.394904][ T28] audit: type=1400 audit(1778528590.199:1004): avc: denied { watch watch_reads } for pid=5750 comm="syz.1.733" path="/132/file0/file0" dev="loop1" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 86.571123][ T5762] loop2: detected capacity change from 0 to 512 [ 86.592117][ T5762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.619050][ T5762] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.668600][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.668960][ T28] audit: type=1400 audit(1778528590.469:1005): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.699346][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.719072][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.751406][ T28] audit: type=1400 audit(1778528590.469:1006): avc: denied { rmdir } for pid=3302 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.779719][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.809438][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.819795][ T28] audit: type=1400 audit(1778528590.469:1007): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.844526][ T28] audit: type=1400 audit(1778528590.499:1008): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.854671][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.868052][ T28] audit: type=1400 audit(1778528590.529:1009): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.901684][ T28] audit: type=1400 audit(1778528590.589:1010): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.923635][ T28] audit: type=1400 audit(1778528590.619:1011): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.938722][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 86.945508][ T28] audit: type=1400 audit(1778528590.659:1012): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.986356][ T28] audit: type=1400 audit(1778528590.739:1013): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.991983][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 87.023463][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 87.037451][ T3302] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 87.109904][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.123646][ T5094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.134106][ T5094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.144717][ T5094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.192570][ T5094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.203224][ T5094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.213970][ T5094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.253649][ T5094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.264016][ T5094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.274484][ T5094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.314560][ T5094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.326117][ T5094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.336728][ T5094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 87.425606][ T5094] bridge_slave_1: left allmulticast mode [ 87.431527][ T5094] bridge_slave_1: left promiscuous mode [ 87.437213][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.445007][ T5094] bridge_slave_0: left allmulticast mode [ 87.450720][ T5094] bridge_slave_0: left promiscuous mode [ 87.456556][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.496404][ T5094] gretap0 (unregistering): left promiscuous mode [ 87.532284][ T5094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.542156][ T5094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.551463][ T5094] bond0 (unregistering): Released all slaves [ 87.584563][ T5094] veth1_to_team: left promiscuous mode [ 87.591151][ T5094] hsr_slave_0: left promiscuous mode [ 87.596730][ T5094] hsr_slave_1: left promiscuous mode [ 87.602531][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.610020][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.617458][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.625028][ T5094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.637221][ T5094] veth1_macvtap: left promiscuous mode [ 87.643075][ T5094] veth0_macvtap: left promiscuous mode [ 87.685867][ T5094] team0 (unregistering): Port device team_slave_1 removed [ 87.695954][ T5094] team0 (unregistering): Port device team_slave_0 removed [ 87.731166][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.738369][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.745684][ T5773] bridge_slave_0: entered allmulticast mode [ 87.752040][ T5773] bridge_slave_0: entered promiscuous mode [ 87.759120][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.766208][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.773298][ T5773] bridge_slave_1: entered allmulticast mode [ 87.779639][ T5773] bridge_slave_1: entered promiscuous mode [ 87.795486][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.806487][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.825273][ T5773] team0: Port device team_slave_0 added [ 87.831927][ T5773] team0: Port device team_slave_1 added [ 87.848662][ T5792] process 'syz.3.744' launched './file1' with NULL argv: empty string added [ 87.850462][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.864358][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.893149][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.904369][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.912784][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.938775][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.963135][ T5773] hsr_slave_0: entered promiscuous mode [ 87.969189][ T5773] hsr_slave_1: entered promiscuous mode [ 89.255018][ T5743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.299595][ T5811] loop6: detected capacity change from 0 to 512 [ 89.335069][ T5815] SELinux: failed to load policy [ 89.385525][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.420546][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.451501][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.458590][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.479630][ T5833] loop6: detected capacity change from 0 to 128 [ 89.501158][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.508275][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.530903][ T5833] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.570321][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 89.575125][ T5833] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.592040][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.666447][ T5816] loop3: detected capacity change from 0 to 512 [ 89.700506][ T4358] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.813499][ T5816] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 89.852261][ T5816] System zones: 0-2, 18-18, 34-34 [ 89.928525][ T5816] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.751: bg 0: block 248: padding at end of block bitmap is not set [ 89.987025][ T5816] loop3: lost filesystem error report for type 5 error -117 [ 89.988918][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 90.002668][ C0] EXT4-fs (loop3): last error at time 1778528593: ext4_validate_block_bitmap:441 [ 90.015992][ T5816] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.751: Failed to acquire dquot type 1 [ 90.047253][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.049186][ T5816] loop3: lost filesystem error report for type 5 error -117 [ 90.094326][ T5816] EXT4-fs (loop3): 1 truncate cleaned up [ 90.107269][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 90.150170][ T5816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.215096][ T5816] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.360522][ T5816] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.751: path /140/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0 [ 90.444221][ T5815] syz.5.749 (5815) used greatest stack depth: 8688 bytes left [ 90.456641][ T5816] syz.3.751 (5816) used greatest stack depth: 7744 bytes left [ 90.463247][ T5773] veth0_vlan: entered promiscuous mode [ 90.480231][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.504239][ T5773] veth1_vlan: entered promiscuous mode [ 90.521620][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 90.577924][ T5773] veth0_macvtap: entered promiscuous mode [ 90.612505][ T5773] veth1_macvtap: entered promiscuous mode [ 90.644090][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.678978][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.846490][ T5924] loop3: detected capacity change from 0 to 128 [ 90.883827][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 90.955610][ T5943] loop5: detected capacity change from 0 to 128 [ 90.973859][ T5943] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.001685][ T5943] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.062981][ T5924] bio_check_eod: 62 callbacks suppressed [ 91.063016][ T5924] syz.3.767: attempt to access beyond end of device [ 91.063016][ T5924] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 91.093964][ T5924] syz.3.767: attempt to access beyond end of device [ 91.093964][ T5924] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 91.109807][ T5924] buffer_io_error: 38 callbacks suppressed [ 91.109894][ T5924] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 91.111743][ T3807] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.116594][ T5924] syz.3.767: attempt to access beyond end of device [ 91.116594][ T5924] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 91.148149][ T5924] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 91.204160][ T5924] syz.3.767: attempt to access beyond end of device [ 91.204160][ T5924] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 91.225547][ T5924] syz.3.767: attempt to access beyond end of device [ 91.225547][ T5924] loop3: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 91.240377][ T5924] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 91.265178][ T5949] caif0: tun_chr_ioctl cmd 1074812117 [ 91.275438][ T5924] syz.3.767: attempt to access beyond end of device [ 91.275438][ T5924] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 91.293424][ T5924] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 91.307766][ T5924] syz.3.767: attempt to access beyond end of device [ 91.307766][ T5924] loop3: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 91.332978][ T5924] syz.3.767: attempt to access beyond end of device [ 91.332978][ T5924] loop3: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 91.348503][ T5924] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 91.358528][ T5924] syz.3.767: attempt to access beyond end of device [ 91.358528][ T5924] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 91.373173][ T5924] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 91.415530][ T5924] syz.3.767: attempt to access beyond end of device [ 91.415530][ T5924] loop3: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 91.470565][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 91.470606][ T28] audit: type=1400 audit(1778528595.279:1127): avc: denied { bind } for pid=5956 comm="syz.6.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.500940][ T5924] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 91.514238][ T5954] loop5: detected capacity change from 0 to 8192 [ 91.531777][ T5924] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 91.556670][ T5954] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 91.570387][ T5954] FAT-fs (loop5): Filesystem has been set read-only [ 91.635155][ T5924] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 91.643827][ T28] audit: type=1400 audit(1778528595.439:1128): avc: denied { ioctl } for pid=5960 comm="syz.6.778" path="socket:[12839]" dev="sockfs" ino=12839 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.674148][ T5924] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 91.709554][ T5966] loop6: detected capacity change from 0 to 256 [ 91.929493][ T5981] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 91.952540][ T5981] SELinux: failed to load policy [ 92.150934][ T28] audit: type=1400 audit(1778528595.959:1129): avc: denied { sys_nice } for pid=5986 comm="syz.3.787" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 92.597433][ T6012] loop7: detected capacity change from 0 to 256 [ 92.622771][ T28] audit: type=1400 audit(1778528596.429:1130): avc: denied { watch watch_reads } for pid=6010 comm="syz.7.797" path="/8/file0/file0/file0" dev="loop7" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 92.739637][ T28] audit: type=1400 audit(1778528596.549:1131): avc: denied { module_load } for pid=6019 comm="syz.7.802" path="/10/bus" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 93.375313][ T28] audit: type=1400 audit(1778528597.179:1132): avc: denied { create } for pid=6063 comm="syz.6.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.395769][ T28] audit: type=1400 audit(1778528597.209:1133): avc: denied { read } for pid=6063 comm="syz.6.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.446322][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 93.490492][ T6068] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 93.527841][ T28] audit: type=1400 audit(1778528597.329:1134): avc: denied { create } for pid=6069 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.547603][ T28] audit: type=1400 audit(1778528597.329:1135): avc: denied { connect } for pid=6069 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.568035][ T28] audit: type=1400 audit(1778528597.329:1136): avc: denied { setopt } for pid=6069 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.040115][ T6087] loop3: detected capacity change from 0 to 1024 [ 94.047101][ T6087] EXT4-fs: Ignoring removed orlov option [ 94.077328][ T6087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.164364][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.453758][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.6.840'. [ 94.685496][ T6115] loop7: detected capacity change from 0 to 128 [ 94.973445][ T6124] geneve2: entered promiscuous mode [ 94.990105][ T6124] geneve2: entered allmulticast mode [ 95.008132][ T310] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.032640][ T310] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.052985][ T6124] loop1: detected capacity change from 0 to 256 [ 95.065984][ T310] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.086621][ T310] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.095947][ T6124] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.115958][ T6124] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.360411][ T6143] loop6: detected capacity change from 0 to 128 [ 95.392123][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 95.484347][ T6153] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.593137][ T6160] 9pnet: p9_errstr2errno: server reported unknown error  [ 95.699045][ T6156] loop6: detected capacity change from 0 to 512 [ 95.720671][ T6156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 95.728800][ T6156] System zones: 0-2, 18-18, 34-34 [ 95.736269][ T6156] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.858: bg 0: block 248: padding at end of block bitmap is not set [ 95.750799][ T6156] loop6: lost filesystem error report for type 5 error -117 [ 95.751429][ T6156] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.858: Failed to acquire dquot type 1 [ 95.768888][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 95.772297][ T6156] loop6: lost filesystem error report for type 5 error -117 [ 95.776680][ C0] EXT4-fs (loop6): last error at time 1778528599: ext4_validate_block_bitmap:441 [ 95.798326][ T6156] EXT4-fs (loop6): 1 truncate cleaned up [ 95.823156][ T6156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.837728][ T6156] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.919307][ T6156] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.858: path /124/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0 [ 95.980877][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.991216][ T6184] loop5: detected capacity change from 0 to 128 [ 96.022111][ T6194] loop1: detected capacity change from 0 to 128 [ 96.042985][ T6194] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.065390][ T6194] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.130037][ T6184] bio_check_eod: 49 callbacks suppressed [ 96.130072][ T6184] syz.5.867: attempt to access beyond end of device [ 96.130072][ T6184] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 96.237675][ T6184] syz.5.867: attempt to access beyond end of device [ 96.237675][ T6184] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 96.252631][ T6184] buffer_io_error: 28 callbacks suppressed [ 96.252672][ T6184] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 96.268590][ T6184] syz.5.867: attempt to access beyond end of device [ 96.268590][ T6184] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 96.304582][ T6184] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 96.318585][ T6184] syz.5.867: attempt to access beyond end of device [ 96.318585][ T6184] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 96.340646][ T6184] syz.5.867: attempt to access beyond end of device [ 96.340646][ T6184] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 96.354819][ T6184] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 96.365552][ T6184] syz.5.867: attempt to access beyond end of device [ 96.365552][ T6184] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 96.380837][ T6184] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 96.394709][ T6184] syz.5.867: attempt to access beyond end of device [ 96.394709][ T6184] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 96.415084][ T6184] syz.5.867: attempt to access beyond end of device [ 96.415084][ T6184] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 96.430685][ T6184] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 96.440772][ T6184] syz.5.867: attempt to access beyond end of device [ 96.440772][ T6184] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 96.455245][ T6184] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 96.466362][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.468311][ T6184] syz.5.867: attempt to access beyond end of device [ 96.468311][ T6184] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 96.502997][ T6184] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 96.526570][ T6184] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 96.587124][ T6184] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 96.606467][ T6184] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 96.817696][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.887'. [ 96.837267][ T6222] netlink: 'syz.6.887': attribute type 3 has an invalid length. [ 96.839901][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 96.839912][ T28] audit: type=1400 audit(1778528600.649:1143): avc: denied { ioctl } for pid=6227 comm="syz.3.888" path="socket:[12207]" dev="sockfs" ino=12207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.876655][ T6222] netlink: 'syz.6.887': attribute type 2 has an invalid length. [ 96.888268][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.887'. [ 97.032039][ T6241] netlink: 'syz.5.892': attribute type 3 has an invalid length. [ 97.049599][ T6241] netlink: 'syz.5.892': attribute type 1 has an invalid length. [ 97.068016][ T6241] netlink: 216 bytes leftover after parsing attributes in process `syz.5.892'. [ 97.087544][ T6242] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 97.104979][ T6226] loop7: detected capacity change from 0 to 512 [ 97.120134][ T6242] SELinux: failed to load policy [ 97.165751][ T6226] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 97.176100][ T6226] System zones: 0-2, 18-18, 34-34 [ 97.198669][ T6226] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.885: bg 0: block 248: padding at end of block bitmap is not set [ 97.214766][ T6226] loop7: lost filesystem error report for type 5 error -117 [ 97.216562][ T6226] Quota error (device loop7): write_blk: dquota write failed [ 97.224102][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 97.224162][ C1] EXT4-fs (loop7): last error at time 1778528601: ext4_validate_block_bitmap:441 [ 97.274841][ T6226] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 97.287618][ T6226] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.885: Failed to acquire dquot type 1 [ 97.299418][ T6226] loop7: lost filesystem error report for type 5 error -117 [ 97.325618][ T6226] EXT4-fs (loop7): 1 truncate cleaned up [ 97.346181][ T6226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.374448][ T6226] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.424974][ T6226] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.885: path /22/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0 [ 97.481628][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.665050][ T6282] netlink: 'syz.6.909': attribute type 21 has an invalid length. [ 97.682736][ T6282] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.754001][ T6290] loop7: detected capacity change from 0 to 128 [ 97.759267][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.911'. [ 98.016152][ T6294] loop5: detected capacity change from 0 to 512 [ 98.090768][ T6294] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 98.107503][ T6294] System zones: 0-2, 18-18, 34-34 [ 98.163829][ T6323] loop7: detected capacity change from 0 to 512 [ 98.189544][ T6294] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.913: bg 0: block 248: padding at end of block bitmap is not set [ 98.213802][ T6323] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 98.246621][ T6323] EXT4-fs (loop7): failed to open journal device unknown-block(8,0) -16 [ 98.256865][ T6294] loop5: lost filesystem error report for type 5 error -117 [ 98.262424][ T6294] Quota error (device loop5): write_blk: dquota write failed [ 98.270015][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 98.270110][ C0] EXT4-fs (loop5): last error at time 1778528602: ext4_validate_block_bitmap:441 [ 98.321150][ T6294] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 98.337697][ T6294] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.913: Failed to acquire dquot type 1 [ 98.360144][ T6294] loop5: lost filesystem error report for type 5 error -117 [ 98.390241][ T6294] EXT4-fs (loop5): 1 truncate cleaned up [ 98.429929][ T6294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.434581][ T6338] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 98.452058][ T6338] EXT4-fs (loop1): 1 truncate cleaned up [ 98.458143][ T6338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.484100][ T28] audit: type=1400 audit(1778528602.289:1144): avc: denied { setattr } for pid=6336 comm="syz.1.931" path="/161/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.507478][ T28] audit: type=1400 audit(1778528602.319:1145): avc: denied { write } for pid=6336 comm="syz.1.931" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.529396][ T28] audit: type=1400 audit(1778528602.319:1146): avc: denied { create } for pid=6336 comm="syz.1.931" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 98.530900][ T6294] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.591941][ T28] audit: type=1400 audit(1778528602.399:1147): avc: denied { write } for pid=6336 comm="syz.1.931" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.631501][ T6343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.634459][ T28] audit: type=1400 audit(1778528602.399:1148): avc: denied { write } for pid=6336 comm="syz.1.931" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.688611][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.711025][ T6294] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.913: path /138/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0 [ 98.736303][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.764165][ T3807] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.050728][ T6371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.066700][ T997] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.073251][ T6371] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.093528][ T6371] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.946: bg 0: block 112: padding at end of block bitmap is not set [ 99.117244][ T6370] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.946: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.170269][ T6371] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #15: comm syz.6.946: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.197624][ T6351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 99.218697][ T6351] System zones: 0-2, 18-18, 34-34 [ 99.245196][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.267149][ T6353] netlink: 'syz.7.937': attribute type 16 has an invalid length. [ 99.268746][ T6351] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.936: bg 0: block 248: padding at end of block bitmap is not set [ 99.285120][ T6353] netlink: 'syz.7.937': attribute type 17 has an invalid length. [ 99.311464][ T6351] loop1: lost filesystem error report for type 5 error -117 [ 99.313912][ T6353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 99.328890][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 99.340855][ T6351] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.936: Failed to acquire dquot type 1 [ 99.343239][ C0] EXT4-fs (loop1): last error at time 1778528603: ext4_validate_block_bitmap:441 [ 99.367410][ T6351] loop1: lost filesystem error report for type 5 error -117 [ 99.404668][ T6351] EXT4-fs (loop1): 1 truncate cleaned up [ 99.428678][ T6351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.467397][ T6351] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.698989][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.729789][ T6395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.820105][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.945894][ T6414] set_capacity_and_notify: 7 callbacks suppressed [ 99.945907][ T6414] loop6: detected capacity change from 0 to 128 [ 99.980131][ T6414] FAT-fs (loop6): bogus number of reserved sectors [ 100.010860][ T6414] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 100.030262][ T6414] FAT-fs (loop6): Can't find a valid FAT filesystem [ 100.046862][ T6414] loop6: detected capacity change from 0 to 128 [ 100.215429][ T6420] loop6: detected capacity change from 0 to 8192 [ 100.398369][ T6430] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.970'. [ 100.488680][ T6435] loop6: detected capacity change from 0 to 128 [ 100.525425][ T6439] bridge1: entered promiscuous mode [ 100.589558][ T6441] veth3: entered allmulticast mode [ 100.727169][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.980'. [ 100.736651][ T6453] netlink: 'syz.7.980': attribute type 9 has an invalid length. [ 100.744490][ T6453] netlink: 47 bytes leftover after parsing attributes in process `syz.7.980'. [ 100.822045][ T6459] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 100.828445][ T6459] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 100.842030][ T6462] netlink: 35 bytes leftover after parsing attributes in process `syz.7.983'. [ 100.851427][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.983'. [ 101.062174][ T6483] loop5: detected capacity change from 0 to 128 [ 101.070110][ T3872] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.076395][ T4755] Bluetooth: hci0: command 0x1003 tx timeout [ 101.114074][ T6483] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 101.152964][ T6494] loop1: detected capacity change from 0 to 128 [ 101.170188][ T6494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 101.182666][ T6497] loop3: detected capacity change from 0 to 128 [ 101.202023][ T6494] System zones: 1-3, 19-19, 35-36 [ 101.217609][ T6497] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 101.227613][ T6494] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.256408][ T6494] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.290284][ T6494] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 1752196451 (only 1 groups) [ 101.334902][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.411429][ T6518] sd 0:0:1:0: device reset [ 101.443542][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1010'. [ 101.466167][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1010'. [ 101.476071][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1010'. [ 101.485341][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1010'. [ 101.520843][ T6535] netlink: 'syz.7.1012': attribute type 21 has an invalid length. [ 101.543518][ T6535] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.634257][ T6530] loop1: detected capacity change from 0 to 512 [ 101.665059][ T6530] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 101.673843][ T6530] System zones: 0-2, 18-18, 34-34 [ 101.700586][ T6530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1009: bg 0: block 248: padding at end of block bitmap is not set [ 101.716280][ T6530] loop1: lost filesystem error report for type 5 error -117 [ 101.717589][ T6530] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1009: Failed to acquire dquot type 1 [ 101.725340][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 101.725400][ C0] EXT4-fs (loop1): last error at time 1778528605: ext4_validate_block_bitmap:441 [ 101.753440][ T6530] loop1: lost filesystem error report for type 5 error -117 [ 101.767726][ T6530] EXT4-fs (loop1): 1 truncate cleaned up [ 101.781545][ T6530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.799328][ T6530] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.830889][ T6530] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.1009: path /180/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0 [ 101.862462][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.910837][ T6566] IPv6: Can't replace route, no match found [ 102.517157][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 102.517171][ T28] audit: type=1400 audit(1778528606.319:1189): avc: denied { mount } for pid=6580 comm="syz.6.1033" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 102.549584][ T28] audit: type=1400 audit(1778528606.359:1190): avc: denied { search } for pid=6580 comm="syz.6.1033" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.574481][ T28] audit: type=1400 audit(1778528606.359:1191): avc: denied { search } for pid=6580 comm="syz.6.1033" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.596866][ T28] audit: type=1400 audit(1778528606.359:1192): avc: denied { search } for pid=6580 comm="syz.6.1033" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.635144][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 102.819167][ T6609] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.908566][ T28] audit: type=1400 audit(1778528606.709:1193): avc: denied { write } for pid=6606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.947714][ T6633] loop1: detected capacity change from 0 to 128 [ 102.971234][ T6633] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.975904][ T28] audit: type=1400 audit(1778528606.769:1194): avc: denied { write } for pid=6634 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.026097][ T6633] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.108060][ T28] audit: type=1400 audit(1778528606.909:1195): avc: denied { write } for pid=6632 comm="syz.1.1051" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.141139][ T6633] Invalid argument reading file caps for ./file0 [ 103.154616][ T28] audit: type=1400 audit(1778528606.949:1196): avc: denied { setattr } for pid=6632 comm="syz.1.1051" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.211731][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.216409][ T28] audit: type=1400 audit(1778528606.949:1197): avc: denied { execute } for pid=6632 comm="syz.1.1051" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.262142][ T28] audit: type=1400 audit(1778528606.949:1198): avc: denied { execute_no_trans } for pid=6632 comm="syz.1.1051" path="/187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.330942][ T6635] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 103.419665][ T6652] loop3: detected capacity change from 0 to 1024 [ 103.471383][ T6652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.509523][ T6652] EXT4-fs (loop3): shut down requested (1) [ 103.536676][ T6652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.582342][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.630404][ T6742] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.818767][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.854708][ T1040] team_slave_0: entered promiscuous mode [ 104.860389][ T1040] team_slave_1: entered promiscuous mode [ 104.867250][ T6753] bio_check_eod: 244 callbacks suppressed [ 104.867265][ T6753] syz.3.1077: attempt to access beyond end of device [ 104.867265][ T6753] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 104.899358][ T1040] team_slave_0: left promiscuous mode [ 104.904984][ T1040] team_slave_1: left promiscuous mode [ 104.929028][ T6753] syz.3.1077: attempt to access beyond end of device [ 104.929028][ T6753] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 104.963647][ T6753] syz.3.1077: attempt to access beyond end of device [ 104.963647][ T6753] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 104.978768][ T997] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.010807][ T6753] syz.3.1077: attempt to access beyond end of device [ 105.010807][ T6753] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 105.042236][ T6753] syz.3.1077: attempt to access beyond end of device [ 105.042236][ T6753] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 105.075842][ T6753] syz.3.1077: attempt to access beyond end of device [ 105.075842][ T6753] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 105.104017][ T6753] syz.3.1077: attempt to access beyond end of device [ 105.104017][ T6753] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 105.142953][ T6753] syz.3.1077: attempt to access beyond end of device [ 105.142953][ T6753] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 105.183425][ T6753] syz.3.1077: attempt to access beyond end of device [ 105.183425][ T6753] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 105.246222][ T6753] syz.3.1077: attempt to access beyond end of device [ 105.246222][ T6753] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 105.495556][ T6775] __nla_validate_parse: 4 callbacks suppressed [ 105.495572][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 105.538010][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 105.672943][ T6781] capability: warning: `syz.3.1090' uses 32-bit capabilities (legacy support in use) [ 106.116835][ T6798] set_capacity_and_notify: 2 callbacks suppressed [ 106.116850][ T6798] loop3: detected capacity change from 0 to 2048 [ 106.168802][ T6798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.340375][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.714470][ T6815] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1104'. [ 106.920412][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1105'. [ 106.985640][ T6821] veth0: entered promiscuous mode [ 106.990789][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 106.996829][ T6486] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.010774][ T6821] bond0: entered promiscuous mode [ 107.024373][ T6821] bond_slave_0: entered promiscuous mode [ 107.039236][ T6821] bond_slave_1: entered promiscuous mode [ 107.055807][ T6820] bond0: left promiscuous mode [ 107.069018][ T6820] bond_slave_0: left promiscuous mode [ 107.086749][ T6820] bond_slave_1: left promiscuous mode [ 107.105338][ T6820] veth0: left promiscuous mode [ 107.304658][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.311834][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.409582][ T6843] loop1: detected capacity change from 0 to 1024 [ 107.430437][ T6843] EXT4-fs: Ignoring removed orlov option [ 107.471184][ T6843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.482803][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.508550][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.563443][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.636394][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 107.975478][ T6869] xt_hashlimit: size too large, truncated to 1048576 [ 108.305102][ T6886] loop5: detected capacity change from 0 to 4096 [ 108.360381][ T6886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.389064][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 108.389077][ T28] audit: type=1326 audit(1778528612.199:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.420613][ T28] audit: type=1326 audit(1778528612.209:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.446439][ T28] audit: type=1326 audit(1778528612.209:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.478919][ T28] audit: type=1326 audit(1778528612.209:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.504418][ T28] audit: type=1326 audit(1778528612.209:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.535053][ T28] audit: type=1400 audit(1778528612.209:1214): avc: denied { execute } for pid=6885 comm="syz.5.1132" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.594045][ T3807] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 108.617264][ T28] audit: type=1326 audit(1778528612.209:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.640682][ T3807] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 108.704724][ T28] audit: type=1326 audit(1778528612.209:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.758670][ T28] audit: type=1326 audit(1778528612.339:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.793293][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.798418][ T28] audit: type=1326 audit(1778528612.379:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.5.1132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcae2fbcdd9 code=0x7ffc0000 [ 108.810950][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.849327][ T49] bridge_slave_1: left allmulticast mode [ 108.858262][ T49] bridge_slave_1: left promiscuous mode [ 108.869671][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.883171][ T49] bridge_slave_0: left allmulticast mode [ 108.888950][ T49] bridge_slave_0: left promiscuous mode [ 108.897887][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.010848][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.020732][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.030225][ T49] bond0 (unregistering): Released all slaves [ 109.067912][ T49] hsr_slave_0: left promiscuous mode [ 109.083959][ T49] hsr_slave_1: left promiscuous mode [ 109.089896][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.097300][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.114341][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.119721][ T6936] loop3: detected capacity change from 0 to 256 [ 109.128259][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.136880][ T6938] loop7: detected capacity change from 0 to 512 [ 109.149407][ T49] veth1_macvtap: left promiscuous mode [ 109.160084][ T49] veth0_macvtap: left promiscuous mode [ 109.164040][ T6936] FAT-fs (loop3): IO charset macgaelic not found [ 109.228437][ T49] team0 (unregistering): Port device team_slave_1 removed [ 109.244247][ T49] team0 (unregistering): Port device team_slave_0 removed [ 109.313486][ T6941] loop7: detected capacity change from 0 to 512 [ 109.374947][ T6941] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 109.392723][ T6941] System zones: 0-2, 18-18, 34-34 [ 109.438347][ T6941] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1153: bg 0: block 248: padding at end of block bitmap is not set [ 109.467973][ T6941] loop7: lost filesystem error report for type 5 error -117 [ 109.468898][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 109.482652][ C0] EXT4-fs (loop7): last error at time 1778528613: ext4_validate_block_bitmap:441 [ 109.503008][ T6941] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.1153: Failed to acquire dquot type 1 [ 109.530421][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.531830][ T6941] loop7: lost filesystem error report for type 5 error -117 [ 109.537557][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.537713][ T6918] bridge_slave_0: entered allmulticast mode [ 109.538234][ T6918] bridge_slave_0: entered promiscuous mode [ 109.565782][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.572938][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.580121][ T6918] bridge_slave_1: entered allmulticast mode [ 109.586590][ T6918] bridge_slave_1: entered promiscuous mode [ 109.604233][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.614891][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.627704][ T6941] EXT4-fs (loop7): 1 truncate cleaned up [ 109.653247][ T6918] team0: Port device team_slave_0 added [ 109.659998][ T6918] team0: Port device team_slave_1 added [ 109.662241][ T6941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.676024][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.685241][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.712217][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.714533][ T6941] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.725088][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.740356][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.781139][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.826600][ T6918] hsr_slave_0: entered promiscuous mode [ 109.832964][ T6918] hsr_slave_1: entered promiscuous mode [ 109.833249][ T6918] debugfs: 'hsr0' already exists in 'hsr' [ 109.833262][ T6918] Cannot create hsr debugfs directory [ 110.018806][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.025729][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.042763][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.042796][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.044636][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.044724][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.078216][ T6918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.217738][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.235208][ T7012] loop3: detected capacity change from 0 to 1024 [ 110.252602][ T7012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.275215][ T7012] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.304247][ T7012] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.1174: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.322533][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.338390][ T7012] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 110.362841][ T7012] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.362841][ T7012] [ 110.378379][ T7036] netlink: 'syz.7.1178': attribute type 1 has an invalid length. [ 110.392930][ T7036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.400098][ T3298] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 110.421221][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.657426][ T6918] veth0_vlan: entered promiscuous mode [ 110.669712][ T6918] veth1_vlan: entered promiscuous mode [ 110.686516][ T6918] veth0_macvtap: entered promiscuous mode [ 110.712491][ T6918] veth1_macvtap: entered promiscuous mode [ 110.732798][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.748412][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.996613][ T1040] IPVS: starting estimator thread 0... [ 111.067481][ T7073] loop8: detected capacity change from 0 to 8192 [ 111.090228][ T7071] IPVS: using max 2112 ests per chain, 105600 per kthread [ 111.145678][ T7077] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 111.147199][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1189'. [ 111.157242][ T7077] netlink: 'syz.1.1190': attribute type 3 has an invalid length. [ 111.170562][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1189'. [ 111.180077][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1189'. [ 111.189365][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1189'. [ 111.305399][ T7085] SELinux: failed to load policy [ 111.361206][ T7102] netlink: 'syz.6.1200': attribute type 1 has an invalid length. [ 111.383431][ T7102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.408289][ T7102] bond1: (slave gretap1): making interface the new active one [ 111.420475][ T7102] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 111.434592][ T7110] sch_fq: defrate 0 ignored. [ 112.334857][ T7177] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1229'. [ 112.376021][ T7182] loop7: detected capacity change from 0 to 128 [ 112.399176][ T7182] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.414596][ T7182] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.433300][ T7191] loop8: detected capacity change from 0 to 512 [ 112.465928][ T7191] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 112.477506][ T7191] EXT4-fs (loop8): 1 truncate cleaned up [ 112.483771][ T7191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.508985][ T5773] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.566231][ T6918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.665376][ T7205] SELinux: failed to load policy [ 113.031514][ T7232] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1252'. [ 113.040818][ T7232] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1252'. [ 113.086721][ T7234] loop6: detected capacity change from 0 to 512 [ 113.107863][ T7234] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1253: inode has both inline data and extents flags [ 113.138979][ T7234] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.139681][ T7234] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1253: couldn't read orphan inode 15 (err -117) [ 113.148933][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 113.148948][ C0] EXT4-fs (loop6): initial error at time 1778528616: ext4_orphan_get:1397: inode 15 [ 113.148990][ C0] EXT4-fs (loop6): last error at time 1778528616: ext4_orphan_get:1397: inode 15 [ 113.186160][ T7234] loop6: lost filesystem error report for type 5 error -117 [ 113.189153][ T7234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.226901][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.308831][ T7243] loop1: detected capacity change from 0 to 256 [ 113.409977][ T7245] netlink: 'syz.7.1259': attribute type 3 has an invalid length. [ 113.418385][ T7245] netlink: 'syz.7.1259': attribute type 3 has an invalid length. [ 113.587254][ T28] kauditd_printk_skb: 688 callbacks suppressed [ 113.587267][ T28] audit: type=1400 audit(1778528617.389:1905): avc: denied { setopt } for pid=7254 comm="syz.8.1264" lport=35647 faddr=::ffff:172.30.0.9 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 113.625734][ T7269] sch_fq: defrate 0 ignored. [ 113.696139][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 113.705158][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 113.952848][ T7298] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 114.428489][ T7302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.468301][ T5098] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.477843][ T5098] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.488584][ T5098] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.497735][ T5098] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.507105][ T5098] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.516338][ T5098] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.525919][ T5098] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.555280][ T5098] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.572602][ T5098] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.574990][ T7306] netlink: 182 bytes leftover after parsing attributes in process `syz.6.1285'. [ 114.582688][ T5098] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.600631][ T5098] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.610002][ T5098] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 114.653010][ T28] audit: type=1400 audit(1778528618.459:1906): avc: denied { view } for pid=7308 comm="syz.7.1288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 115.030483][ T7331] netlink: 'syz.6.1297': attribute type 29 has an invalid length. [ 115.050424][ T7331] netlink: 'syz.6.1297': attribute type 29 has an invalid length. [ 115.071075][ T7331] netlink: 'syz.6.1297': attribute type 32 has an invalid length. [ 115.339553][ T28] audit: type=1400 audit(1778528619.149:1907): avc: denied { bind } for pid=7341 comm="syz.8.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.419527][ T7343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.433495][ T7343] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.459903][ T7343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.508555][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.526977][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.539007][ T7343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.549695][ T7343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.563173][ T7343] veth1_vlan: left promiscuous mode [ 115.572056][ T7343] veth0_vlan: left promiscuous mode [ 115.578067][ T7343] veth0_vlan: entered promiscuous mode [ 115.592194][ T7343] veth1_vlan: entered promiscuous mode [ 115.602459][ T7343] veth1_macvtap: left promiscuous mode [ 115.609357][ T7343] veth0_macvtap: left promiscuous mode [ 115.615662][ T7343] veth0_macvtap: entered promiscuous mode [ 115.622758][ T7343] veth1_macvtap: entered promiscuous mode [ 115.705130][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.712230][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.730662][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.737748][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.944182][ T7378] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 115.955055][ T28] audit: type=1400 audit(1778528619.759:1908): avc: denied { relabelto } for pid=7377 comm="syz.7.1316" name="syz1" dev="cgroup2" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 116.016924][ T28] audit: type=1400 audit(1778528619.759:1909): avc: denied { associate } for pid=7377 comm="syz.7.1316" name="syz1" dev="cgroup2" ino=261 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 116.067139][ T28] audit: type=1400 audit(1778528619.759:1910): avc: denied { write } for pid=7377 comm="syz.7.1316" name="syz1" dev="cgroup2" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 116.098105][ T28] audit: type=1400 audit(1778528619.759:1911): avc: denied { add_name } for pid=7377 comm="syz.7.1316" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 116.147344][ T28] audit: type=1400 audit(1778528619.759:1912): avc: denied { associate } for pid=7377 comm="syz.7.1316" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 116.178199][ T28] audit: type=1400 audit(1778528619.859:1913): avc: denied { associate } for pid=7388 comm="syz.3.1318" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.246834][ T7393] loop3: detected capacity change from 0 to 1024 [ 116.255468][ T7393] EXT4-fs: Ignoring removed bh option [ 116.312671][ T7393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.364414][ T7393] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.367435][ T28] audit: type=1400 audit(1778528620.159:1914): avc: denied { write } for pid=7391 comm="syz.3.1321" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.486737][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.551215][ T7411] loop1: detected capacity change from 0 to 128 [ 116.587330][ T7411] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.618317][ T7411] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.652264][ T7417] __nla_validate_parse: 1 callbacks suppressed [ 116.652279][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 116.770824][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.811712][ T7431] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1334'. [ 116.823614][ T7433] ip6gre1: entered promiscuous mode [ 116.835157][ T7433] ip6gre1: entered allmulticast mode [ 116.855291][ T7433] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.899257][ T5098] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.906877][ T5098] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.929055][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.993657][ T7458] loop8: detected capacity change from 0 to 1024 [ 117.001817][ T7460] loop6: detected capacity change from 0 to 512 [ 117.009777][ T7458] EXT4-fs: Ignoring removed nobh option [ 117.015934][ T7460] EXT4-fs: Ignoring removed nobh option [ 117.034238][ T7458] EXT4-fs: Ignoring removed orlov option [ 117.045606][ T7458] EXT4-fs: Invalid want_extra_isize 130 [ 117.052717][ T7460] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.082798][ T7460] EXT4-fs (loop6): 1 truncate cleaned up [ 117.093119][ T7460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.147669][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.190319][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.199474][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.208834][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.218032][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.227204][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.236290][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.245425][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.254636][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.263801][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.272907][ T7469] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 117.282677][ T7479] SELinux: failed to load policy [ 117.390830][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.629584][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.639499][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.649166][ T7496] random: crng reseeded on system resumption [ 117.677794][ T7498] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1365'. [ 117.720333][ T7502] netlink: 'syz.7.1367': attribute type 1 has an invalid length. [ 117.734557][ T7502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.763620][ T7502] bond2: (slave geneve2): making interface the new active one [ 117.772623][ T7502] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 117.789898][ T3393] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.127536][ T7513] veth0_to_bridge: entered promiscuous mode [ 118.160596][ T310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.185520][ T310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.195494][ T7525] loop1: detected capacity change from 0 to 512 [ 118.202109][ T310] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.213886][ T7525] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.228290][ T310] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.240413][ T7525] EXT4-fs (loop1): 1 truncate cleaned up [ 118.246502][ T7525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.351835][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.388388][ T7543] loop7: detected capacity change from 0 to 128 [ 118.401462][ T7541] loop1: detected capacity change from 0 to 512 [ 118.408628][ T7544] loop3: detected capacity change from 0 to 512 [ 118.408669][ T7543] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.422727][ T7541] EXT4-fs (loop1): 1 truncate cleaned up [ 118.435818][ T7544] EXT4-fs: Ignoring removed oldalloc option [ 118.440797][ T7543] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.446157][ T7544] ext4: Unknown parameter 'r-6' [ 118.474618][ T7541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.569915][ T7539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.577161][ T7539] IPv6: NLM_F_CREATE should be set when creating new route [ 118.584395][ T7539] IPv6: NLM_F_CREATE should be set when creating new route [ 118.593853][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 118.593866][ T28] audit: type=1400 audit(1778528622.399:1925): avc: denied { write } for pid=7542 comm="syz.7.1384" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.631933][ T7543] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.1384: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 118.650556][ T28] audit: type=1400 audit(1778528622.429:1926): avc: denied { write } for pid=7542 comm="syz.7.1384" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.678169][ T28] audit: type=1400 audit(1778528622.439:1927): avc: denied { write } for pid=7542 comm="syz.7.1384" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.700220][ T7543] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 118.713510][ T28] audit: type=1400 audit(1778528622.439:1928): avc: denied { create } for pid=7542 comm="syz.7.1384" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.761230][ T28] audit: type=1400 audit(1778528622.489:1929): avc: denied { write } for pid=7540 comm="syz.1.1383" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 118.768408][ T7556] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.1384: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 118.784757][ T28] audit: type=1400 audit(1778528622.569:1930): avc: denied { write } for pid=7542 comm="syz.7.1384" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.844045][ T7556] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 118.998004][ T5773] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.023365][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.080397][ T28] audit: type=1400 audit(1778528622.889:1931): avc: denied { bind } for pid=7573 comm="syz.6.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.126425][ T28] audit: type=1400 audit(1778528622.919:1932): avc: denied { listen } for pid=7573 comm="syz.6.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.156815][ T28] audit: type=1400 audit(1778528622.919:1933): avc: denied { accept } for pid=7573 comm="syz.6.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.493232][ T7589] loop8: detected capacity change from 0 to 512 [ 119.564152][ T7589] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 119.573950][ T7589] System zones: 0-2, 18-18, 34-34 [ 119.595603][ T28] audit: type=1400 audit(1778528623.399:1934): avc: denied { write } for pid=7593 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.618320][ T7589] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1400: bg 0: block 248: padding at end of block bitmap is not set [ 119.638946][ T7589] loop8: lost filesystem error report for type 5 error -117 [ 119.647174][ T7589] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.1400: Failed to acquire dquot type 1 [ 119.655365][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 119.655404][ C1] EXT4-fs (loop8): last error at time 1778528623: ext4_validate_block_bitmap:441 [ 119.685812][ T7589] loop8: lost filesystem error report for type 5 error -117 [ 119.717540][ T7589] EXT4-fs (loop8): 1 truncate cleaned up [ 119.738543][ T7589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.754627][ T7589] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.001272][ T7596] loop7: detected capacity change from 0 to 1024 [ 120.024867][ T7596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.065032][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.123390][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.123504][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.142207][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.142300][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.254020][ T6918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.466514][ T7619] loop3: detected capacity change from 0 to 2048 [ 120.489564][ T7619] EXT4-fs: Ignoring removed i_version option [ 120.511801][ T7619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.535338][ T7619] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.551587][ T7619] EXT4-fs (loop3): shut down requested (0) [ 120.552141][ T7623] loop8: detected capacity change from 0 to 1024 [ 120.564540][ T7619] EXT4-fs (loop3): resizing filesystem from 256 to 0 blocks [ 120.579121][ T7619] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 120.592207][ T7623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.615058][ T7623] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.626780][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.698602][ T7633] loop3: detected capacity change from 0 to 512 [ 120.721989][ T7633] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.741913][ T7633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.742405][ T6918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.785159][ T7633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.814648][ T7633] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.828963][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.848482][ T7644] ip6gre1: entered promiscuous mode [ 120.857202][ T7644] ip6gre1: entered allmulticast mode [ 120.908096][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.368776][ T7691] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1441'. [ 121.622319][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1446'. [ 121.634865][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1446'. [ 121.658035][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1446'. [ 121.667883][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1446'. [ 121.700797][ T7712] loop6: detected capacity change from 0 to 512 [ 121.712353][ T7712] EXT4-fs (loop6): 1 truncate cleaned up [ 121.719743][ T7712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.908334][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 122.108280][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.406678][ T7761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.422979][ T7761] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.444496][ T7761] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #18: comm syz.7.1470: corrupted inode contents [ 122.457225][ T7761] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 122.457389][ T7761] EXT4-fs (loop7): Remounting filesystem read-only [ 122.474008][ T7761] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -30) [ 122.500624][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.635787][ T7776] netlink: 'syz.7.1475': attribute type 1 has an invalid length. [ 122.674524][ T7776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.708379][ T7782] bond3: (slave geneve3): making interface the new active one [ 122.731801][ T7782] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 122.782691][ T7784] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.799676][ T7784] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.985663][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.056356][ T7796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1481'. [ 123.209390][ T7806] netlink: 'syz.3.1489': attribute type 8 has an invalid length. [ 123.250902][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 123.279379][ T7811] 9p: Invalid gid '0x00000000ffffffff' [ 123.303296][ T7806] bond0: entered promiscuous mode [ 123.329020][ T7806] bond_slave_0: entered promiscuous mode [ 123.339215][ T7806] bond_slave_1: entered promiscuous mode [ 123.367007][ T7806] gretap0: entered promiscuous mode [ 123.391442][ T7806] bond0: left promiscuous mode [ 123.408082][ T7818] set_capacity_and_notify: 4 callbacks suppressed [ 123.408098][ T7818] loop8: detected capacity change from 0 to 512 [ 123.419209][ T7806] bond_slave_0: left promiscuous mode [ 123.451582][ T7818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.472539][ T7806] bond_slave_1: left promiscuous mode [ 123.504637][ T7806] gretap0: left promiscuous mode [ 123.523509][ T7818] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.600712][ T7818] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #18: comm syz.8.1494: corrupted inode contents [ 123.623016][ T7818] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 123.623120][ T7818] EXT4-fs (loop8): Remounting filesystem read-only [ 123.659393][ T7818] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -30) [ 123.737026][ T6918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.807391][ T7840] netlink: 876 bytes leftover after parsing attributes in process `syz.6.1500'. [ 123.839307][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1500'. [ 123.866339][ T7843] loop8: detected capacity change from 0 to 1024 [ 123.874906][ T997] bridge_slave_1: left allmulticast mode [ 123.881949][ T997] bridge_slave_1: left promiscuous mode [ 123.900830][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.902926][ T7843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.925003][ T997] bridge_slave_0: left allmulticast mode [ 123.936142][ T997] bridge_slave_0: left promiscuous mode [ 123.945710][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.961516][ T7851] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1502'. [ 123.994009][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 123.994033][ T28] audit: type=1400 audit(1778528627.799:1968): avc: denied { write } for pid=7842 comm="syz.8.1497" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.084264][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.102368][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.121382][ T997] bond0 (unregistering): Released all slaves [ 124.143029][ T28] audit: type=1400 audit(1778528627.949:1969): avc: denied { write } for pid=7846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.191528][ T6918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.238363][ T28] audit: type=1400 audit(1778528628.039:1970): avc: denied { write } for pid=7862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.283361][ T997] hsr_slave_0: left promiscuous mode [ 124.311075][ T997] hsr_slave_1: left promiscuous mode [ 124.325827][ T997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.371365][ T28] audit: type=1400 audit(1778528628.179:1971): avc: denied { mount } for pid=7876 comm="syz.7.1507" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 124.489461][ T997] team0 (unregistering): Port device team_slave_1 removed [ 124.501845][ T997] team0 (unregistering): Port device team_slave_0 removed [ 124.542068][ T7884] loop8: detected capacity change from 0 to 512 [ 124.556614][ T7884] EXT4-fs (loop8): 1 truncate cleaned up [ 124.564277][ T7884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.567920][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 124.587982][ T28] audit: type=1400 audit(1778528628.389:1972): avc: denied { write } for pid=7883 comm="syz.8.1510" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.614190][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 124.632551][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 124.711732][ T6918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.776001][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.787266][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.808043][ T7814] bridge_slave_0: entered allmulticast mode [ 124.819098][ T7814] bridge_slave_0: entered promiscuous mode [ 124.828229][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.836832][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.845364][ T7814] bridge_slave_1: entered allmulticast mode [ 124.853101][ T7814] bridge_slave_1: entered promiscuous mode [ 124.891072][ T7814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.907338][ T28] audit: type=1400 audit(1778528628.709:1973): avc: denied { write } for pid=7891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.911398][ T7814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.977283][ T28] audit: type=1400 audit(1778528628.779:1974): avc: denied { write } for pid=7915 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.992177][ T7814] team0: Port device team_slave_0 added [ 125.026060][ T7814] team0: Port device team_slave_1 added [ 125.040384][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 125.068079][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.076141][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.105616][ T7814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.119033][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.133364][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.159790][ T7814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.201893][ T7814] hsr_slave_0: entered promiscuous mode [ 125.208536][ T7814] hsr_slave_1: entered promiscuous mode [ 125.214669][ T7814] debugfs: 'hsr0' already exists in 'hsr' [ 125.221886][ T7814] Cannot create hsr debugfs directory [ 125.396965][ T28] audit: type=1400 audit(1778528629.199:1975): avc: denied { write } for pid=7928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.452483][ T7814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.470208][ T28] audit: type=1400 audit(1778528629.269:1976): avc: denied { write } for pid=7952 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.502138][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 125.527394][ T7814] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.551419][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.558580][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.574307][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.581435][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.949232][ T28] audit: type=1400 audit(1778528629.749:1977): avc: denied { write } for pid=7969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.972430][ T7925] loop6: detected capacity change from 0 to 65536 [ 126.040682][ T7922] netlink: 'syz.6.1518': attribute type 16 has an invalid length. [ 126.048765][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.057443][ T7922] netlink: 'syz.6.1518': attribute type 17 has an invalid length. [ 126.060679][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.074240][ T7961] bridge_slave_0: entered allmulticast mode [ 126.082474][ T7961] bridge_slave_0: entered promiscuous mode [ 126.090952][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.099024][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.107154][ T7961] bridge_slave_1: entered allmulticast mode [ 126.114933][ T7961] bridge_slave_1: entered promiscuous mode [ 126.132210][ T7922] net_ratelimit: 3319 callbacks suppressed [ 126.132225][ T7922] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 126.157696][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 126.179622][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.206906][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.217860][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.295898][ T7961] team0: Port device team_slave_0 added [ 126.314166][ T7961] team0: Port device team_slave_1 added [ 126.373503][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.395175][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.438584][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.469123][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.484225][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.527569][ T8025] loop6: detected capacity change from 0 to 512 [ 126.550297][ T8025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.553881][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.567679][ T8025] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.795881][ T7961] hsr_slave_0: entered promiscuous mode [ 126.802256][ T7961] hsr_slave_1: entered promiscuous mode [ 126.808131][ T7961] debugfs: 'hsr0' already exists in 'hsr' [ 126.816258][ T7961] Cannot create hsr debugfs directory [ 126.824006][ T8038] loop3: detected capacity change from 0 to 512 [ 126.884325][ T8038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.934940][ T8038] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.002270][ T7814] veth0_vlan: entered promiscuous mode [ 127.007761][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.019094][ T7814] veth1_vlan: entered promiscuous mode [ 127.093436][ T7814] veth0_macvtap: entered promiscuous mode [ 127.134841][ T7814] veth1_macvtap: entered promiscuous mode [ 127.163540][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.178159][ T8059] ip6tnl3: entered promiscuous mode [ 127.187463][ T8059] ip6tnl3: entered allmulticast mode [ 127.212665][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.227829][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.281538][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.296947][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.304077][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.322668][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.330661][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.558186][ T8078] loop9: detected capacity change from 0 to 1024 [ 127.602647][ T8078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.680531][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.720431][ T8093] loop6: detected capacity change from 0 to 512 [ 127.733388][ T8093] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 127.764365][ T8093] EXT4-fs (loop6): 1 orphan inode deleted [ 127.779116][ T8093] EXT4-fs (loop6): 1 truncate cleaned up [ 127.786731][ T8093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.827735][ T7814] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.847961][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.912751][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.004110][ T8119] bridge1: entered promiscuous mode [ 128.165157][ T7961] veth0_vlan: entered promiscuous mode [ 128.184822][ T7961] veth1_vlan: entered promiscuous mode [ 128.212128][ T7961] veth0_macvtap: entered promiscuous mode [ 128.224947][ T7961] veth1_macvtap: entered promiscuous mode [ 128.237946][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.248035][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.323441][ T8154] block device autoloading is deprecated and will be removed. [ 128.378343][ T8157] loop6: detected capacity change from 0 to 512 [ 128.391050][ T8157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.403570][ T8157] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.442003][ T4358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.586946][ T8177] loop0: detected capacity change from 0 to 512 [ 128.600512][ T8177] EXT4-fs: Ignoring removed orlov option [ 128.619641][ T8177] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.632598][ T8177] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #16: comm syz.0.1580: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 128.650178][ T8177] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 128.650341][ T8177] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1580: couldn't read orphan inode 16 (err -117) [ 128.659509][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 128.659540][ C1] EXT4-fs (loop0): initial error at time 1778528632: ext4_ext_check_inode:521: inode 16 [ 128.659567][ C1] EXT4-fs (loop0): last error at time 1778528632: ext4_ext_check_inode:521: inode 16 [ 128.700417][ T8177] loop0: lost filesystem error report for type 5 error -117 [ 128.700556][ T8177] EXT4-fs (loop0): 1 orphan inode deleted [ 128.716100][ T8177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.789224][ T7961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.909152][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.044816][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 129.044845][ T28] audit: type=1400 audit(1778528632.849:2000): avc: denied { bind } for pid=8204 comm="syz.9.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.085464][ T28] audit: type=1400 audit(1778528632.879:2001): avc: denied { listen } for pid=8204 comm="syz.9.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.297454][ T8223] ip6tnl1: entered promiscuous mode [ 129.302829][ T8223] ip6tnl1: entered allmulticast mode [ 129.382962][ T28] audit: type=1400 audit(1778528633.189:2002): avc: denied { read } for pid=8226 comm="syz.9.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.727855][ T8261] netlink: 'syz.9.1612': attribute type 9 has an invalid length. [ 129.775927][ T28] audit: type=1400 audit(1778528633.579:2003): avc: denied { ioctl } for pid=8265 comm="syz.9.1615" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.845314][ T28] audit: type=1400 audit(1778528633.639:2004): avc: denied { getopt } for pid=8267 comm="syz.8.1616" lport=47454 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.897678][ T8270] loop0: detected capacity change from 0 to 1024 [ 129.915663][ T8270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.960378][ T28] audit: type=1400 audit(1778528633.759:2005): avc: denied { write } for pid=8269 comm="syz.0.1619" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.985789][ T8278] loop9: detected capacity change from 0 to 8192 [ 129.998441][ T8278] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.088554][ T7961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.184642][ T8283] netlink: 436 bytes leftover after parsing attributes in process `syz.0.1622'. [ 130.185532][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1623'. [ 130.194745][ T8286] netlink: zone id is out of range [ 130.194956][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1622'. [ 130.495422][ T310] bridge_slave_1: left allmulticast mode [ 130.501927][ T310] bridge_slave_1: left promiscuous mode [ 130.514132][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.533724][ T310] bridge_slave_0: left allmulticast mode [ 130.540975][ T310] bridge_slave_0: left promiscuous mode [ 130.547642][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.724424][ T310] bond3 (unregistering): (slave geneve3): Releasing active interface [ 130.738248][ T310] bond2 (unregistering): (slave geneve2): Releasing active interface [ 130.814188][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.826993][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.839268][ T310] bond0 (unregistering): Released all slaves [ 130.849447][ T310] bond1 (unregistering): Released all slaves [ 130.864081][ T310] bond2 (unregistering): Released all slaves [ 130.874323][ T310] bond3 (unregistering): Released all slaves [ 130.939985][ T310] hsr_slave_0: left promiscuous mode [ 130.950901][ T310] hsr_slave_1: left promiscuous mode [ 130.960991][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.968570][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.987827][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.002722][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.019834][ T310] veth1_macvtap: left promiscuous mode [ 131.025511][ T310] veth0_macvtap: left promiscuous mode [ 131.031830][ T310] veth1_vlan: left promiscuous mode [ 131.037692][ T310] veth0_vlan: left promiscuous mode [ 131.117946][ T310] team0 (unregistering): Port device team_slave_1 removed [ 131.134561][ T310] team0 (unregistering): Port device team_slave_0 removed [ 131.536512][ T8331] loop3: detected capacity change from 0 to 32768 [ 131.589789][ T8331] loop3: p1 p3 < > [ 131.733052][ T3803] udevd[3803]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 131.735422][ T3860] udevd[3860]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 131.898408][ T8352] sctp: [Deprecated]: syz.6.1650 (pid 8352) Use of int in max_burst socket option deprecated. [ 131.898408][ T8352] Use struct sctp_assoc_value instead [ 132.076610][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1654'. [ 132.192709][ T8372] xt_hashlimit: size too large, truncated to 1048576 [ 132.319654][ T8388] hsr0: entered promiscuous mode [ 132.332410][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 132.371480][ T8392] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 132.470456][ T28] audit: type=1400 audit(1778528636.279:2006): avc: denied { accept } for pid=8398 comm="syz.9.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.513082][ T28] audit: type=1400 audit(1778528636.319:2007): avc: denied { load_policy } for pid=8396 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 132.513457][ T8397] SELinux: policydb string length 0 does not match expected length 8 [ 132.568355][ T8397] SELinux: failed to load policy [ 132.578793][ T28] audit: type=1400 audit(1778528636.389:2008): avc: denied { recv } for pid=2982 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.1.88 dest=51014 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 132.591271][ T8406] loop3: detected capacity change from 0 to 128 [ 132.642063][ T8406] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.662257][ T8406] ext4 filesystem being mounted at /340/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.725079][ T8413] ref_ctr_offset mismatch. inode: 0xd7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 132.752210][ T8415] loop0: detected capacity change from 0 to 512 [ 132.772007][ T8415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.803826][ T28] audit: type=1400 audit(1778528636.609:2009): avc: denied { write } for pid=8405 comm="syz.3.1669" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.817805][ T8415] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.851654][ T8419] loop6: detected capacity change from 0 to 1024 [ 132.872702][ T8419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.889471][ T8415] EXT4-fs error (device loop0): ext4_get_first_dir_block:3537: inode #12: comm syz.0.1671: Directory hole found for htree leaf block 0 [ 132.939744][ T8426] loop9: detected capacity change from 0 to 512 [ 132.971590][ T8426] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.272422][ T8449] bridge1: entered promiscuous mode [ 133.315065][ T8451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1683'. [ 133.345719][ T8453] lo speed is unknown, defaulting to 1000 [ 133.352758][ T8453] lo speed is unknown, defaulting to 1000 [ 133.367115][ T8453] lo speed is unknown, defaulting to 1000 [ 133.374538][ T8455] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1685'. [ 133.397257][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.425699][ T8460] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 133.438173][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.498468][ T8453] infiniband sz1: set active [ 133.503281][ T3393] lo speed is unknown, defaulting to 1000 [ 133.503343][ T8453] infiniband sz1: added lo [ 133.521684][ T8453] RDS/IB: sz1: added [ 133.526834][ T8453] smc: adding ib device sz1 with port count 1 [ 133.533153][ T8453] smc: ib device sz1 port 1 has no pnetid [ 133.539389][ T3413] lo speed is unknown, defaulting to 1000 [ 133.545574][ T8453] lo speed is unknown, defaulting to 1000 [ 133.583295][ T8453] lo speed is unknown, defaulting to 1000 [ 133.620805][ T8453] lo speed is unknown, defaulting to 1000 [ 133.656289][ T8453] lo speed is unknown, defaulting to 1000 [ 133.693036][ T8453] lo speed is unknown, defaulting to 1000 [ 134.294109][ T8479] loop3: detected capacity change from 0 to 1024 [ 134.300888][ T8481] lo speed is unknown, defaulting to 1000 [ 134.330685][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 134.330698][ T28] audit: type=1400 audit(1778528638.139:2029): avc: denied { write } for pid=8478 comm="syz.3.1691" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.578363][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 134.697956][ T8489] loop8: detected capacity change from 0 to 65536 [ 134.798990][ T8481] netlink: 'syz.8.1695': attribute type 16 has an invalid length. [ 134.820232][ T8481] netlink: 'syz.8.1695': attribute type 17 has an invalid length. [ 134.842808][ T8481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 134.999669][ T8523] lo speed is unknown, defaulting to 1000 [ 135.216065][ T3504] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 135.234270][ T3504] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.468387][ T28] audit: type=1400 audit(1778528639.269:2030): avc: denied { name_connect } for pid=8545 comm="syz.3.1723" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 135.536666][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1721'. [ 135.858177][ T8524] Set syz1 is full, maxelem 65536 reached [ 135.993489][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.009301][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.160579][ T28] audit: type=1400 audit(1778528639.969:2031): avc: denied { unmount } for pid=7814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.239030][ T49] bridge_slave_1: left allmulticast mode [ 136.245308][ T49] bridge_slave_1: left promiscuous mode [ 136.252239][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.264584][ T49] bridge_slave_0: left allmulticast mode [ 136.271573][ T49] bridge_slave_0: left promiscuous mode [ 136.278309][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.346417][ T8584] loop0: detected capacity change from 0 to 512 [ 136.363210][ T8584] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.383886][ T28] audit: type=1400 audit(1778528640.189:2032): avc: denied { write } for pid=8582 comm="syz.0.1739" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.462871][ T8584] ================================================================== [ 136.470982][ T8584] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 136.478989][ T8584] [ 136.481305][ T8584] write to 0xffff88811ade3c14 of 4 bytes by task 8586 on cpu 0: [ 136.488922][ T8584] xas_set_mark+0x12b/0x140 [ 136.493437][ T8584] __folio_start_writeback+0x17b/0x370 [ 136.498904][ T8584] ext4_bio_write_folio+0x5a6/0xa20 [ 136.504115][ T8584] mpage_process_page_bufs+0x4a1/0x620 [ 136.509575][ T8584] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 136.515381][ T8584] ext4_do_writepages+0x6fe/0x2770 [ 136.520505][ T8584] ext4_writepages+0x18f/0x320 [ 136.525265][ T8584] do_writepages+0x1c6/0x310 [ 136.529849][ T8584] file_write_and_wait_range+0x178/0x2f0 [ 136.535479][ T8584] mmb_fsync_noflush+0x48/0x140 [ 136.540319][ T8584] ext4_sync_file+0x1f1/0x6b0 [ 136.544988][ T8584] vfs_fsync_range+0xc5/0xe0 [ 136.549579][ T8584] ext4_buffered_write_iter+0x447/0x4c0 [ 136.555131][ T8584] ext4_file_write_iter+0x380/0xfa0 [ 136.560331][ T8584] iter_file_splice_write+0x6c4/0xa80 [ 136.565707][ T8584] direct_splice_actor+0x156/0x2a0 [ 136.570828][ T8584] splice_direct_to_actor+0x311/0x670 [ 136.576216][ T8584] do_splice_direct+0x119/0x1a0 [ 136.581083][ T8584] do_sendfile+0x382/0x650 [ 136.585498][ T8584] __x64_sys_sendfile64+0x105/0x150 [ 136.590701][ T8584] x64_sys_call+0x2dc4/0x3020 [ 136.595376][ T8584] do_syscall_64+0x12c/0x3b0 [ 136.599963][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.605845][ T8584] [ 136.608156][ T8584] read to 0xffff88811ade3c14 of 4 bytes by task 8584 on cpu 1: [ 136.615694][ T8584] file_write_and_wait_range+0x130/0x2f0 [ 136.621334][ T8584] mmb_fsync_noflush+0x48/0x140 [ 136.626181][ T8584] ext4_sync_file+0x1f1/0x6b0 [ 136.630854][ T8584] vfs_fsync_range+0xc5/0xe0 [ 136.635445][ T8584] ext4_buffered_write_iter+0x447/0x4c0 [ 136.641000][ T8584] ext4_file_write_iter+0x380/0xfa0 [ 136.646210][ T8584] iter_file_splice_write+0x6c4/0xa80 [ 136.651595][ T8584] direct_splice_actor+0x156/0x2a0 [ 136.656733][ T8584] splice_direct_to_actor+0x311/0x670 [ 136.662112][ T8584] do_splice_direct+0x119/0x1a0 [ 136.666973][ T8584] do_sendfile+0x382/0x650 [ 136.671380][ T8584] __x64_sys_sendfile64+0x105/0x150 [ 136.676585][ T8584] x64_sys_call+0x2dc4/0x3020 [ 136.681263][ T8584] do_syscall_64+0x12c/0x3b0 [ 136.685849][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.691733][ T8584] [ 136.694049][ T8584] value changed: 0x0a000021 -> 0x04000021 [ 136.699748][ T8584] [ 136.702060][ T8584] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 136.708204][ T8584] CPU: 1 UID: 0 PID: 8584 Comm: syz.0.1739 Not tainted syzkaller #0 PREEMPT(full) [ 136.717486][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.727993][ T8584] ================================================================== [ 136.753389][ T28] audit: type=1400 audit(1778528640.559:2033): avc: denied { recv } for pid=4358 comm="syz-executor" saddr=10.128.0.163 src=41644 daddr=10.128.1.88 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 136.785221][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.827361][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.871207][ T49] bond0 (unregistering): Released all slaves [ 137.061916][ T49] hsr_slave_0: left promiscuous mode [ 137.072794][ T49] hsr_slave_1: left promiscuous mode [ 137.092660][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.114412][ T28] audit: type=1400 audit(1778528640.919:2034): avc: denied { write } for pid=8587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.119917][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.180267][ T28] audit: type=1400 audit(1778528640.979:2035): avc: denied { write } for pid=8598 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.207270][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.216854][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.238147][ T49] veth1_macvtap: left promiscuous mode [ 137.248827][ T49] veth0_macvtap: left promiscuous mode [ 137.254856][ T49] veth1_vlan: left promiscuous mode [ 137.260439][ T49] veth0_vlan: left promiscuous mode [ 137.353360][ T49] team0 (unregistering): Port device team_slave_1 removed [ 137.363748][ T49] team0 (unregistering): Port device team_slave_0 removed [ 137.464821][ T28] audit: type=1400 audit(1778528641.269:2036): avc: denied { write } for pid=8601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.489394][ T28] audit: type=1400 audit(1778528641.289:2037): avc: denied { write } for pid=8612 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.870998][ T49] bridge_slave_1: left allmulticast mode [ 137.876691][ T49] bridge_slave_1: left promiscuous mode [ 137.883066][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.893371][ T49] bridge_slave_0: left allmulticast mode [ 137.899471][ T49] bridge_slave_0: left promiscuous mode [ 137.905282][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.914569][ T49] bridge_slave_1: left allmulticast mode [ 137.920552][ T49] bridge_slave_1: left promiscuous mode [ 137.926182][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.933975][ T49] bridge_slave_0: left allmulticast mode [ 137.939831][ T49] bridge_slave_0: left promiscuous mode [ 137.945666][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.101548][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.111934][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.122127][ T49] bond0 (unregistering): Released all slaves [ 138.192051][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.202408][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.211908][ T49] bond0 (unregistering): Released all slaves [ 138.294981][ T49] hsr_slave_0: left promiscuous mode [ 138.301039][ T49] hsr_slave_1: left promiscuous mode [ 138.306905][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.315046][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.323049][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.330578][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.339887][ T49] hsr_slave_0: left promiscuous mode [ 138.345540][ T49] hsr_slave_1: left promiscuous mode [ 138.351509][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.359171][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.366632][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.374055][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.387037][ T49] veth1_macvtap: left promiscuous mode [ 138.392588][ T49] veth0_macvtap: left promiscuous mode [ 138.398161][ T49] veth1_vlan: left promiscuous mode [ 138.403479][ T49] veth0_vlan: left promiscuous mode [ 138.409568][ T49] veth1_macvtap: left promiscuous mode [ 138.415208][ T49] veth0_macvtap: left promiscuous mode [ 138.420980][ T49] veth1_vlan: left promiscuous mode [ 138.426472][ T49] veth0_vlan: left promiscuous mode [ 138.533060][ T49] team0 (unregistering): Port device team_slave_1 removed [ 138.542983][ T49] team0 (unregistering): Port device team_slave_0 removed [ 138.606314][ T49] team0 (unregistering): Port device team_slave_1 removed [ 138.617191][ T49] team0 (unregistering): Port device team_slave_0 removed [ 139.143604][ T49] IPVS: stop unused estimator thread 0... [ 139.291292][ T28] audit: type=1400 audit(1778528643.099:2038): avc: denied { write } for pid=8615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.406606][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 139.406621][ T28] audit: type=1400 audit(1778528643.209:2040): avc: denied { write } for pid=8629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.436095][ T28] audit: type=1400 audit(1778528643.239:2041): avc: denied { write } for pid=8640 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.268978][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!