last executing test programs: 1m14.536804679s ago: executing program 2 (id=93): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m14.472664751s ago: executing program 2 (id=97): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_enter(r0, 0x448e, 0x96c9, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 1m14.401596782s ago: executing program 2 (id=99): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r0, r1, 0x0, 0x110003) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0x8, 0x12, "00000000000500"}) 1m14.301800904s ago: executing program 2 (id=101): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m14.238464396s ago: executing program 2 (id=103): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000040000701fcffbeff00000100017c0000040042800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m14.04953956s ago: executing program 2 (id=107): unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000a1) preadv2(r0, 0x0, 0x0, 0xc, 0xc, 0x0) 1m14.007628411s ago: executing program 32 (id=107): unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000a1) preadv2(r0, 0x0, 0x0, 0xc, 0xc, 0x0) 1m4.390652356s ago: executing program 0 (id=315): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000280)=[0xee00]) setregid(r0, r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1m4.339670737s ago: executing program 0 (id=316): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1, 0x14, 0x67, 0x0, 0x6, 0x32, 0x0, @loopback, @multicast1}}}}}, 0x0) 1m4.281775138s ago: executing program 0 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) 1m4.252390609s ago: executing program 0 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00') 1m4.20077036s ago: executing program 0 (id=321): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f00002b5000/0x400000)=nil, 0x400000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1m3.896575096s ago: executing program 0 (id=335): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3fffff) 1m3.896395367s ago: executing program 33 (id=335): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3fffff) 38.479593109s ago: executing program 3 (id=751): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40060) 38.42604962s ago: executing program 3 (id=753): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) syz_clone(0x20822180, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xb694a000) 37.825192503s ago: executing program 3 (id=765): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 37.514561119s ago: executing program 3 (id=777): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00') setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x1) 37.48196893s ago: executing program 3 (id=767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x110}, 0x0) 37.276630304s ago: executing program 3 (id=770): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x2, 0x3, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 37.250671315s ago: executing program 34 (id=770): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x2, 0x3, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.85606137s ago: executing program 1 (id=1476): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x202, 0x8, 0x0, 0x10000, 0x0}) epoll_create1(0x0) unshare(0x2040400) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1.795908431s ago: executing program 1 (id=1477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.744811022s ago: executing program 7 (id=1479): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) 1.610312645s ago: executing program 1 (id=1483): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1210090, &(0x7f0000000400)={[{@user_xattr}, {@delalloc}, {@nojournal_checksum}, {@nobh}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}]}, 0x3, 0x58d, &(0x7f0000000dc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0xe4ff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.342692221s ago: executing program 7 (id=1492): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4090) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) 1.290143372s ago: executing program 7 (id=1493): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) unshare(0x2a020400) mq_notify(r0, 0x0) 1.140599406s ago: executing program 7 (id=1497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc2) 1.069258397s ago: executing program 7 (id=1500): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000c00000004000000b47c000000000000", @ANYRES32, @ANYBLOB="000000000000f5ad381c0b3541eb000500000063", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0003000002000000000000000000"], 0x50) 973.111619ms ago: executing program 4 (id=1501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x1f, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 932.42421ms ago: executing program 1 (id=1502): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="3ec299424000", 0x6}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 769.701443ms ago: executing program 5 (id=1503): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x414}, 0x1c, 0x0}}], 0x1, 0x4000840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 703.533385ms ago: executing program 4 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 703.146645ms ago: executing program 5 (id=1505): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x1, 0x2}) io_uring_enter(r0, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) syz_open_procfs(0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005640), 0x0, 0x0) 685.977165ms ago: executing program 1 (id=1506): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000044c0)=@deltfilter={0x1f2c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1ef4, 0x2, [@TCA_CGROUP_ACT={0x1ef0, 0x1, [@m_csum={0x1e0, 0x1e, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x10000000, 0x7, 0x500}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xf79a, 0xffffffffffffffff, 0x6, 0x3}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0xd6b, 0x10000000, 0x1d0, 0xe7}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x0, 0x8, 0x360}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x3, 0x5, 0x7, 0x7}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x10000000, 0x4, 0x10001}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xfffffff8, 0x20000000, 0x7fffffff, 0xd4b}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xd3, 0xffffffffffffffff, 0x400, 0x3}, 0x13}}]}, {0xd1, 0x6, "f6dd9ce9423a1b441da007de45d5c247e7620975aa86d5c3c046de6677a1aa67ddcc7663b7a6bcc20b1d07d5341cd6a8d9f61f5a581677028ebb99ce0cd29de72cfd50ace619f9f52fd2485859a46d2795c4d4af6b6ede57348ceb8617c16eb1af44f4a1600689cf35589dc58c50735b142c75f509a61cbd16e997bef23f8e1e07feb225951a001f0c871c0b168f1c829e7298455825c85b6f47c71d9ed9eb9d946ed2133682d0fd5b900b1be2220bc0852c95182a6109b89f484292f6756802a87a6e2f8cfa13bc1e1f93eb1c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10004, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x3ab6, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x3, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x7ffffffc, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x8, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0x2c8, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x6, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xe50, 0xb, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x2c, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x2, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x1, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x10000002, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x20007, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x2, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0xff}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x0, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff802, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x8001, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x9, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x1f2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 599.665657ms ago: executing program 4 (id=1507): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000280)="0f", 0x1}, {&(0x7f0000000340)="ad", 0x1}, {&(0x7f00000003c0)="d0", 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 599.509607ms ago: executing program 5 (id=1508): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) sendto(r1, &(0x7f0000000740)="12", 0x1, 0x0, 0x0, 0x0) 595.257037ms ago: executing program 5 (id=1509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0xfffffffa) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r1, 0x540a, 0x2) 567.223758ms ago: executing program 5 (id=1510): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xf3f, 0x7, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041004}, 0x240000c0) 520.774648ms ago: executing program 1 (id=1511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="a609", 0x2}, {&(0x7f00000002c0)='MT', 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000004c0)="eda6", 0x2}, {&(0x7f0000002580)="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", 0xa81}, {&(0x7f0000003580)='R+', 0x2}, {&(0x7f00000005c0)="60c10c", 0x3}, {&(0x7f00000036c0)="493290", 0x3}, {&(0x7f0000000100)="2b7fd12b", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003980)="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", 0x681}], 0x1}}, {{0x0, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000000000)="2000001d", 0x4}], 0x1}}], 0x4, 0x4040084) 456.41783ms ago: executing program 4 (id=1514): unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000200)=[{0x91fab96db41338bf, 0x0, 0x1000}], 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8000000) 386.151171ms ago: executing program 6 (id=1516): perf_event_open(&(0x7f00000000c0)={0x1, 0xfdb7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 366.000502ms ago: executing program 4 (id=1517): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x224, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x97}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c084}, 0x48090) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x221c, 0x7721, 0x16, 0x0, 0x0) 325.442163ms ago: executing program 6 (id=1518): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x1b3, 0x8098, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10081, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000), 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 310.355343ms ago: executing program 4 (id=1519): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000), 0x0) 228.428395ms ago: executing program 6 (id=1520): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8070) 208.308595ms ago: executing program 6 (id=1521): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e6, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH71p0k0/qj1EPFgQEyaNNYKIuYiInqyRw/G/Kilm0aSFWwIqCjeevPqQfHg3+BJwf9AEE+epRAkLehxZXZn4prspt1u1sHs5wNT3ps3y3sz333zmjfzNoC+NRkRn0TEcESsRsRovj/Jt3i1sWXH3d3dXsq2JGq1t/9I6uV3dreXoukzmdPZP2nEVBqRfh5xvkW9mze3ri9WKisbeX6muvbBzObNreevrS1eXbm6cmPu4ouz85fmLs2+cGTneuv85Zeenn/j11uvfbP0y5Xv3svaeyYvaz6PozKZXbW0ddmFo66sZGfKbgAPJPt6DkTEYL3/j8ZAPdUwGh+/U2rjAICeqNVqA/vyAMCxlxjzAaDPFH/339ndXiq2UiYiKMXOQkScaMS/eL7bKBncexI01MPne5MR8X76/US2RY+ewwIAAAD0sx8WIuJyq/m/NJ5qOu5sRDyUrw8Yi4jxiHg4Ih7psv7JffmD8z/p7S6r4BA7CxEvN63tuNsU/9zYQJ47W4/9ULJ6rbJyIf8+TMXQSJafPaSOP7euf9GurHn+L9uy+ou5wLwdtwdH/v2Z5cXqYjfnzD92Po14crBV/JO9+d8kIia6qOPH8bWv2pXdO/70Uu3riGdb9v9k75jk8PVZM/X7wUxxVzjorZ8+e7dd/eJfrqz/nzo8/mNJ83q9zc7rePzcbxvtyh70/j+cXKk3cDjf99FitboxGzGcvHlw/1znbT6uiutRXK8s/lPPtB7/iyBkF/TRiHgsi2VEPBER5zqo89vxv062K9P/y5XFf7mj/t954pWJ139uV//99f/5emOm8j3+/3dv9xugstsJAAAAAAAAwNFI62u7k3R6L52m09ON3/CeiFNpZX2z+tzq+oc3lhtrwMdiKC3e9Bpteh90Nn8vuMjP7ctfzN8Z/nLkZD0/vbReWS775AGgT51uM/5nfh8pu3UAQM+cKLsBAMB/zvgPAP3H+A8A/cf4DwD9x/gPAP3H+A8AfaWb3/WXkJA4romy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/b38HAAD//78JzGY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x90) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0xc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0xf, &(0x7f00000002c0)) 179.489296ms ago: executing program 7 (id=1522): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 50.603038ms ago: executing program 6 (id=1523): mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x89901) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) 29.871799ms ago: executing program 5 (id=1524): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x25c, &(0x7f0000002500)="$eJzs3T9rU1EYB+DXNGlCFzuLwwUXp6JOrkEqiAEhkkEnA9UlFeF2iU75GH4CBz+SH6NTcTliT2zaGkWk8dh7nwfCfeGXP+/JhXsynJP76vbb2cG7ozfpy8cYDKroRixSitiNTmxFdmN57JzW23HeIgCA62Y8ng5L98Df+/QHz6nr4bQXEf2fksnnjTQFAAAAAAAAAADAxq1b/x8n1v8DQJNZ/998dT2c7ix/v11k/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQzklKN9NvHqX7AwCunvkfANrH/A8A7WP+B4D2ef7i5dPhaLQ/rqpBxPFiPplP8jHnj5+M9u9Vp3ZXrzqezydbZ/n9nFcX817sLPMHa/PtuHsn59+zR89Gl/J+HGx++AAAAAAAAAAAAAAAAAAAAPBf2KvOrN3fv9ePX+S5Ovf/AJf273fjVvefDQMAAAAAAAAAAAAAAAAAAACutaP3H2bTw8PXdania8oKtzHrR7lP7y1PxhW9YTws/WUWKaLgGWxg8eMK0Sl3cQIAAAAAAAAAAAAAAAAAgJZZbfot3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlLO6///miohYpKz0cAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAG+xYAAP//Wv2bkg==") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) r0 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c11}], 0x1, 0x1a00, 0x0, 0x3) r1 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 0s ago: executing program 6 (id=1525): unshare(0x6a040000) syz_usb_connect$uac3(0x0, 0x106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 00000000000. [ 50.881183][ T4407] hsr_slave_0: entered promiscuous mode [ 50.893013][ T4407] hsr_slave_1: entered promiscuous mode [ 50.906913][ T4407] debugfs: 'hsr0' already exists in 'hsr' [ 50.914309][ T4407] Cannot create hsr debugfs directory [ 50.983973][ T4439] lo speed is unknown, defaulting to 1000 [ 51.132690][ T4407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.162252][ T4407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.173690][ T4439] lo speed is unknown, defaulting to 1000 [ 51.179779][ T4407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.196502][ T4407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.216324][ T4407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.234124][ T4407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.252848][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.262340][ T4407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.273529][ T4407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.281246][ T4439] lo speed is unknown, defaulting to 1000 [ 51.412098][ T4439] syz.3.348 (4439) used greatest stack depth: 10048 bytes left [ 52.143969][ T4407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.265727][ T4407] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.288872][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.296029][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.306645][ T4563] loop4: detected capacity change from 0 to 8192 [ 52.318574][ T28] kauditd_printk_skb: 321 callbacks suppressed [ 52.318588][ T28] audit: type=1400 audit(1782700162.110:683): avc: denied { write } for pid=4559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.350392][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.357560][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.404821][ T4563] FAT-fs (loop4): error, invalid FAT chain (i_pos 1050, last_block 3) [ 52.450485][ T4563] FAT-fs (loop4): Filesystem has been set read-only [ 52.472607][ T28] audit: type=1400 audit(1782700162.260:684): avc: denied { write } for pid=4575 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.525828][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 52.554021][ T28] audit: type=1400 audit(1782700162.320:685): avc: denied { mounton } for pid=4581 comm="syz.3.378" path="/proc/181/task" dev="proc" ino=9196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 52.610378][ T28] audit: type=1400 audit(1782700162.340:686): avc: denied { associate } for pid=4583 comm="syz.3.378" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.754837][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 52.772628][ T28] audit: type=1400 audit(1782700162.570:687): avc: denied { write } for pid=4585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.798571][ T4608] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 52.811649][ T127] IPVS: starting estimator thread 0... [ 52.847265][ T4618] netlink: 'syz.5.385': attribute type 4 has an invalid length. [ 52.872383][ T4407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.902090][ T4615] IPVS: using max 2256 ests per chain, 112800 per kthread [ 52.928324][ T28] audit: type=1400 audit(1782700162.710:688): avc: denied { write } for pid=4623 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.217247][ T4407] veth0_vlan: entered promiscuous mode [ 53.225500][ T4407] veth1_vlan: entered promiscuous mode [ 53.243848][ T4407] veth0_macvtap: entered promiscuous mode [ 53.254888][ T4407] veth1_macvtap: entered promiscuous mode [ 53.285094][ T4407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.299526][ T4407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.317260][ T28] audit: type=1400 audit(1782700163.100:689): avc: denied { mount } for pid=4655 comm="syz.5.394" name="/" dev="ramfs" ino=9354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.323588][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.353032][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.363383][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.376268][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.492157][ T4661] loop5: detected capacity change from 0 to 1024 [ 53.508802][ T4661] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 53.545444][ T28] audit: type=1400 audit(1782700163.330:690): avc: denied { name_bind } for pid=4664 comm="syz.1.398" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.572307][ T4661] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.397: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.600174][ T4661] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.601649][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 53.617322][ C1] EXT4-fs (loop5): initial error at time 1782700163: ext4_map_blocks:791: inode 3: block 2 [ 53.627412][ C1] EXT4-fs (loop5): last error at time 1782700163: ext4_map_blocks:791: inode 3: block 2 [ 53.637780][ T28] audit: type=1400 audit(1782700163.420:691): avc: denied { mount } for pid=4669 comm="syz.6.336" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.638811][ T4661] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 53.678009][ T4661] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.397: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.693398][ T4661] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.693956][ T4661] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.397: Failed to acquire dquot type 0 [ 53.714948][ T4661] loop5: lost filesystem error report for type 5 error -117 [ 53.715154][ T4661] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 53.735744][ T4661] loop5: lost filesystem error report for type 5 error -117 [ 53.736584][ T4661] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.397: mark_inode_dirty error [ 53.757868][ T4675] loop6: detected capacity change from 0 to 128 [ 53.765607][ T4661] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.769216][ T4661] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 53.808119][ T4675] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.850424][ T4661] EXT4-fs (loop5): 1 orphan inode deleted [ 53.857289][ T4661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.869932][ T12] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.884590][ T4675] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.902607][ T4661] EXT4-fs: Ignoring removed bh option [ 53.910939][ T4661] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 53.934842][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 53.958944][ T4661] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.397: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.974509][ T4407] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.068196][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.121270][ T4703] syzkaller1: entered promiscuous mode [ 54.137455][ T4703] syzkaller1: entered allmulticast mode [ 54.153374][ T4707] netlink: 'syz.5.413': attribute type 16 has an invalid length. [ 54.181053][ T4707] netlink: 'syz.5.413': attribute type 17 has an invalid length. [ 54.218618][ T4715] loop7: detected capacity change from 0 to 7 [ 54.285842][ T4722] loop1: detected capacity change from 0 to 512 [ 54.292713][ T4724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4724 comm=syz.6.421 [ 54.312154][ T4722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.321789][ T4724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.421'. [ 54.373754][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.073492][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.080845][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.134217][ T4707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.145420][ T4707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.178056][ T4707] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 55.214258][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.252620][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.309073][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.424504][ T4788] IPVS: set_ctl: invalid protocol: 33 172.30.0.5:20003 [ 55.602194][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.809839][ T4822] sctp: [Deprecated]: syz.3.448 (pid 4822) Use of int in max_burst socket option deprecated. [ 55.809839][ T4822] Use struct sctp_assoc_value instead [ 55.842240][ T4818] 9pnet: p9_errstr2errno: server reported unknown error [ 56.114710][ T4863] loop5: detected capacity change from 0 to 4096 [ 56.141233][ T4872] loop3: detected capacity change from 0 to 256 [ 56.147539][ T4863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.218880][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.285963][ T4886] loop5: detected capacity change from 0 to 1024 [ 56.307403][ T4886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.354838][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.468'. [ 56.363865][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.468'. [ 56.373189][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.468'. [ 56.383301][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.468'. [ 56.394957][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.445184][ T4896] sg_write: data in/out 410076/64 bytes for SCSI command 0x0-- guessing data in; [ 56.445184][ T4896] program syz.4.470 not setting count and/or reply_len properly [ 56.719919][ T4931] capability: warning: `syz.3.480' uses 32-bit capabilities (legacy support in use) [ 56.748649][ T4931] program syz.3.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.807835][ T4942] geneve1: entered promiscuous mode [ 56.816113][ T4942] geneve1: left promiscuous mode [ 57.196524][ T4964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.494'. [ 57.326371][ T4974] loop3: detected capacity change from 0 to 128 [ 57.348812][ T4974] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.362247][ T4974] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.465997][ T4978] syzkaller0: entered promiscuous mode [ 57.477672][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.490791][ T4978] syzkaller0: entered allmulticast mode [ 57.808445][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 57.808537][ T28] audit: type=1400 audit(1782700167.600:727): avc: denied { create } for pid=5002 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.849706][ T5004] loop6: detected capacity change from 0 to 512 [ 57.892457][ T28] audit: type=1400 audit(1782700167.600:728): avc: denied { watch watch_reads } for pid=4999 comm="syz.4.510" path="/105/file0" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.930399][ T5007] loop1: detected capacity change from 0 to 2048 [ 57.961825][ T28] audit: type=1400 audit(1782700167.640:729): avc: denied { setopt } for pid=5002 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.011102][ T5004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.022693][ T28] audit: type=1400 audit(1782700167.650:730): avc: denied { write } for pid=5002 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.027780][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.073817][ T5004] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.104072][ T28] audit: type=1400 audit(1782700167.660:731): avc: denied { name_bind } for pid=5008 comm="syz.3.514" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 58.115267][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.135209][ T28] audit: type=1400 audit(1782700167.930:732): avc: denied { create } for pid=5005 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.189923][ T28] audit: type=1400 audit(1782700167.950:733): avc: denied { write } for pid=5005 comm="syz.1.513" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.233782][ T28] audit: type=1400 audit(1782700168.010:734): avc: denied { write } for pid=5005 comm="syz.1.513" path="socket:[9807]" dev="sockfs" ino=9807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.293222][ T5025] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.305959][ T28] audit: type=1400 audit(1782700168.010:735): avc: denied { read } for pid=5022 comm="syz.4.518" lport=50895 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 58.323056][ T5025] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.330592][ T28] audit: type=1400 audit(1782700168.070:736): avc: denied { setopt } for pid=5022 comm="syz.4.518" lport=50895 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 58.452546][ T5036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 58.467775][ T49] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.482890][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 58.495559][ T49] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.495559][ T49] [ 58.506208][ T3758] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.520098][ T49] EXT4-fs (loop1): Total free blocks count 0 [ 58.527787][ T49] EXT4-fs (loop1): Free/Dirty block details [ 58.542549][ T49] EXT4-fs (loop1): free_blocks=2415919104 [ 58.559630][ T49] EXT4-fs (loop1): dirty_blocks=2352 [ 58.594084][ T49] EXT4-fs (loop1): Block reservation details [ 58.597671][ T5042] set_capacity_and_notify: 1 callbacks suppressed [ 58.597715][ T5042] loop5: detected capacity change from 0 to 128 [ 58.619470][ T49] EXT4-fs (loop1): i_reserved_data_blocks=160 [ 58.659707][ T5042] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.673963][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 680 with error 28 [ 58.688862][ T5042] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.751501][ T5051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.528'. [ 58.830721][ T3758] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.885274][ T3296] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 59.387815][ T5081] loop4: detected capacity change from 0 to 128 [ 59.446597][ T5088] netlink: 80 bytes leftover after parsing attributes in process `syz.1.543'. [ 59.455903][ T5088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.543'. [ 59.465180][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.543'. [ 59.653746][ T5119] lo speed is unknown, defaulting to 1000 [ 60.491517][ T5137] program syz.4.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.538595][ T5144] all: renamed from lo (while UP) [ 60.546754][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.561406][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.593153][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.567'. [ 60.603854][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.567'. [ 60.616677][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.567'. [ 60.629711][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.634280][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.567'. [ 60.638523][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.656482][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.665426][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.596898][ T5121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.889836][ T5181] loop6: detected capacity change from 0 to 256 [ 62.963375][ T5183] hsr0: entered promiscuous mode [ 62.979926][ T5183] hsr0: left promiscuous mode [ 62.985203][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.6.582'. [ 63.042541][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 63.042559][ T28] audit: type=1400 audit(1782700172.840:746): avc: denied { bind } for pid=5190 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.124611][ T28] audit: type=1400 audit(1782700172.860:747): avc: denied { create } for pid=5190 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.144830][ T5201] xt_NFQUEUE: number of total queues is 0 [ 63.151073][ T5199] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 63.160032][ T28] audit: type=1400 audit(1782700172.870:748): avc: denied { write } for pid=5190 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.287531][ T28] audit: type=1400 audit(1782700173.080:749): avc: denied { write } for pid=5202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.344582][ T28] audit: type=1400 audit(1782700173.120:750): avc: denied { getopt } for pid=5213 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.419463][ T28] audit: type=1400 audit(1782700173.130:751): avc: denied { write } for pid=5217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.629287][ T28] audit: type=1400 audit(1782700173.420:752): avc: denied { read write } for pid=5231 comm="syz.1.596" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 63.710078][ T28] audit: type=1400 audit(1782700173.420:753): avc: denied { open } for pid=5231 comm="syz.1.596" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 63.777690][ T28] audit: type=1400 audit(1782700173.570:754): avc: denied { create } for pid=5237 comm="syz.6.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.837752][ T28] audit: type=1400 audit(1782700173.600:755): avc: denied { setopt } for pid=5237 comm="syz.6.599" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.869024][ T5240] __nla_validate_parse: 1 callbacks suppressed [ 63.869074][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 64.077058][ T5254] loop6: detected capacity change from 0 to 512 [ 64.092969][ T5256] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 64.109484][ T5254] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 64.154403][ T5254] EXT4-fs (loop6): 1 truncate cleaned up [ 64.167856][ T5254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.646223][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.785633][ T5266] lo speed is unknown, defaulting to 1000 [ 64.982451][ T5282] loop1: detected capacity change from 0 to 128 [ 65.037348][ T5282] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 65.066074][ T5282] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.103315][ T5282] ext2 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.231033][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.299074][ T5297] netlink: 24 bytes leftover after parsing attributes in process `syz.6.624'. [ 65.400703][ T5307] loop6: detected capacity change from 0 to 128 [ 65.408886][ T5306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 65.480638][ T5316] process 'syz.4.630' launched './file0' with NULL argv: empty string added [ 65.552481][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.631'. [ 66.134141][ T5364] loop6: detected capacity change from 0 to 512 [ 66.148453][ T5364] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 66.156757][ T5364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 66.164847][ T5364] EXT4-fs (loop6): orphan cleanup on readonly fs [ 66.171314][ T5364] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.641: iget: bad i_size value: 12154761577498 [ 66.184195][ T5364] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 66.187095][ T5364] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.641: couldn't read orphan inode 13 (err -117) [ 66.196310][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 66.196334][ C1] EXT4-fs (loop6): initial error at time 1782700175: ext4_orphan_get:1399: inode 13 [ 66.196364][ C1] EXT4-fs (loop6): last error at time 1782700175: ext4_orphan_get:1399: inode 13 [ 66.241274][ T5364] loop6: lost filesystem error report for type 5 error -117 [ 66.251665][ T5364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.275034][ T5364] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.641: dx entry: limit 65535 != root limit 120 [ 66.325128][ T5364] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.641: Corrupt directory, running e2fsck is recommended [ 66.354965][ T5379] loop3: detected capacity change from 0 to 128 [ 66.784469][ T5398] loop1: detected capacity change from 0 to 512 [ 66.785248][ T5364] syz.6.641 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 66.826466][ T5398] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.838100][ T5398] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 66.853600][ T5364] CPU: 0 UID: 0 PID: 5364 Comm: syz.6.641 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.853627][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.853646][ T5364] Call Trace: [ 66.853653][ T5364] [ 66.853661][ T5364] __dump_stack+0x1d/0x30 [ 66.853757][ T5364] dump_stack_lvl+0x95/0xd0 [ 66.853829][ T5364] dump_stack+0x15/0x1b [ 66.853851][ T5364] dump_header+0x80/0x240 [ 66.853873][ T5364] oom_kill_process+0x295/0x350 [ 66.853925][ T5364] out_of_memory+0x981/0xbc0 [ 66.854006][ T5364] try_charge_memcg+0x621/0xa00 [ 66.854048][ T5364] __memcg_kmem_charge_page+0x199/0x3a0 [ 66.854094][ T5364] __alloc_frozen_pages_noprof+0x18a/0x350 [ 66.854213][ T5364] alloc_pages_mpol+0xa9/0x1d0 [ 66.854255][ T5364] alloc_pages_noprof+0x8f/0x140 [ 66.854293][ T5364] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 66.854345][ T5364] __kvmalloc_node_noprof+0x3a0/0x590 [ 66.854380][ T5364] ? futex_hash_allocate+0x192/0x920 [ 66.854407][ T5364] ? futex_hash_allocate+0x192/0x920 [ 66.854502][ T5364] ? futex_hash_allocate+0x192/0x920 [ 66.854525][ T5364] futex_hash_allocate+0x192/0x920 [ 66.854549][ T5364] ? cap_task_prctl+0x13f/0x6b0 [ 66.854592][ T5364] futex_hash_prctl+0xd8/0xf0 [ 66.854652][ T5364] __se_sys_prctl+0x4f4/0x13b0 [ 66.854689][ T5364] __x64_sys_prctl+0x67/0x80 [ 66.854721][ T5364] x64_sys_call+0x2533/0x3020 [ 66.854776][ T5364] do_syscall_64+0x136/0x3c0 [ 66.854813][ T5364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.854835][ T5364] RIP: 0033:0x7fba6706ce59 [ 66.854910][ T5364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.855001][ T5364] RSP: 002b:00007fba65abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 66.855027][ T5364] RAX: ffffffffffffffda RBX: 00007fba672e5fa0 RCX: 00007fba6706ce59 [ 66.855046][ T5364] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 66.855064][ T5364] RBP: 00007fba67102e6f R08: 0000000000000000 R09: 0000000000000000 [ 66.855079][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.855107][ T5364] R13: 00007fba672e6038 R14: 00007fba672e5fa0 R15: 00007fff2e7067a8 [ 66.855178][ T5364] [ 66.860888][ T5398] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 66.866929][ T5364] memory: usage 299660kB, limit 307200kB, failcnt 170 [ 66.913481][ T5398] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 66.933170][ T5364] memory+swap: usage 282676kB, limit 9007199254740988kB, failcnt 0 [ 66.933251][ T5364] kmem: usage 282040kB, limit 9007199254740988kB, failcnt 0 [ 66.933268][ T5364] Memory cgroup stats for /syz6: [ 66.933594][ T5364] cache 4096 [ 66.974611][ T5409] loop4: detected capacity change from 0 to 512 [ 66.977583][ T5398] System zones: [ 66.983427][ T5364] rss 0 [ 66.998949][ T5398] 0-2 [ 67.000604][ T5364] shmem 0 [ 67.000617][ T5364] mapped_file 0 [ 67.000627][ T5364] dirty 0 [ 67.000636][ T5364] writeback 0 [ 67.000646][ T5364] workingset_refault_anon 35 [ 67.000669][ T5364] workingset_refault_file 0 [ 67.000680][ T5364] swap 446464 [ 67.000690][ T5364] swapcached 593920 [ 67.000697][ T5364] pgpgin 5241 [ 67.000704][ T5364] pgpgout 5239 [ 67.000714][ T5364] pgfault 8031 [ 67.000723][ T5364] pgmajfault 28 [ 67.000733][ T5364] inactive_anon 0 [ 67.000743][ T5364] active_anon 4096 [ 67.000811][ T5364] inactive_file 0 [ 67.000822][ T5364] active_file 4096 [ 67.000831][ T5364] unevictable 0 [ 67.000890][ T5364] hierarchical_memory_limit 314572800 [ 67.000902][ T5364] hierarchical_memsw_limit 9223372036854771712 [ 67.000915][ T5364] total_cache 4096 [ 67.000923][ T5364] total_rss 0 [ 67.000931][ T5364] total_shmem 0 [ 67.000941][ T5364] total_mapped_file 0 [ 67.000951][ T5364] total_dirty 0 [ 67.000961][ T5364] total_writeback 0 [ 67.000972][ T5364] total_workingset_refault_anon 35 [ 67.000984][ T5364] total_workingset_refault_file 0 [ 67.000995][ T5364] total_swap 446464 [ 67.001079][ T5364] total_swapcached 593920 [ 67.001087][ T5364] total_pgpgin 5241 [ 67.001094][ T5364] total_pgpgout 5239 [ 67.001101][ T5364] total_pgfault 8031 [ 67.001111][ T5364] total_pgmajfault 28 [ 67.001122][ T5364] total_inactive_anon 0 [ 67.001132][ T5364] total_active_anon 4096 [ 67.001143][ T5364] total_inactive_file 0 [ 67.001153][ T5364] total_active_file 4096 [ 67.001164][ T5364] total_unevictable 0 [ 67.001175][ T5364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 67.018915][ T5398] , 18-18 [ 67.036718][ T5364] ,cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.641,pid=5363,uid=0 [ 67.036806][ T5364] Memory cgroup out of memory: Killed process 5363 (syz.6.641) total-vm:94036kB, anon-rss:1232kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 67.048034][ T5409] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 67.048309][ T5409] EXT4-fs (loop4): 1 truncate cleaned up [ 67.048941][ T5409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.425383][ T5398] , 34-35 [ 67.430504][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.500879][ T5398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.585536][ T5364] syz.6.641 (5364) used greatest stack depth: 9272 bytes left [ 67.603779][ T5420] x_tables: duplicate underflow at hook 2 [ 67.610414][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.620002][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.036689][ T5440] loop4: detected capacity change from 0 to 128 [ 68.059012][ T5440] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.076989][ T5440] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.104347][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 68.104365][ T28] audit: type=1400 audit(1782700177.890:779): avc: denied { setattr } for pid=5439 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.132507][ T28] audit: type=1400 audit(1782700177.890:780): avc: denied { write } for pid=5439 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.155167][ T28] audit: type=1400 audit(1782700177.890:781): avc: denied { write } for pid=5439 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.177280][ T28] audit: type=1400 audit(1782700177.890:782): avc: denied { write } for pid=5439 comm="syz.4.666" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.917933][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.035529][ T28] audit: type=1400 audit(1782700178.830:783): avc: denied { bind } for pid=5460 comm="syz.6.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.043625][ T5451] netlink: 'syz.1.672': attribute type 16 has an invalid length. [ 69.096794][ T5451] netlink: 'syz.1.672': attribute type 17 has an invalid length. [ 69.112102][ T28] audit: type=1400 audit(1782700178.910:784): avc: denied { mount } for pid=5464 comm="syz.3.678" name="/" dev="hugetlbfs" ino=11217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 69.157746][ T28] audit: type=1400 audit(1782700178.950:785): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 69.836516][ T28] audit: type=1400 audit(1782700179.630:786): avc: denied { connect } for pid=5483 comm="syz.5.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.083337][ T5451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.105922][ T5451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.198556][ T5499] syzkaller1: entered promiscuous mode [ 70.213262][ T5499] syzkaller1: entered allmulticast mode [ 70.233159][ T5505] loop1: detected capacity change from 0 to 512 [ 70.242238][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.256371][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.268223][ T5505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.289763][ T5510] loop6: detected capacity change from 0 to 128 [ 70.327041][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.351035][ T5510] bio_check_eod: 163 callbacks suppressed [ 70.351118][ T5510] syz.6.693: attempt to access beyond end of device [ 70.351118][ T5510] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 70.393012][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.402983][ T5505] ext4 filesystem being mounted at /136/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.501469][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.556294][ T28] audit: type=1400 audit(1782700180.350:787): avc: denied { write } for pid=5516 comm="syz.3.697" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.623592][ T28] audit: type=1326 audit(1782700180.420:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.1.695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa599ce59 code=0x7ffc0000 [ 70.925414][ T5555] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 71.052709][ T5567] loop3: detected capacity change from 0 to 1024 [ 71.073679][ T5567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.095974][ T5567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.106826][ T5570] lo speed is unknown, defaulting to 1000 [ 71.128814][ T5567] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.182840][ T5555] infiniband syz1: set down [ 71.187502][ T5555] infiniband syz1: added bond0 [ 71.201272][ T5567] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.717: bg 0: block 112: padding at end of block bitmap is not set [ 71.230348][ T5555] RDS/IB: syz1: added [ 71.242705][ T5555] smc: adding ib device syz1 with port count 1 [ 71.260245][ T5567] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.717: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.267928][ T5555] smc: ib device syz1 port 1 has no pnetid [ 71.281478][ T5567] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.717: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 71.304029][ T5567] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.717: lblock 0 mapped to illegal pblock 0 (length 1) [ 71.358903][ T5567] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.717: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 71.433680][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.566692][ T5589] loop5: detected capacity change from 0 to 512 [ 71.599344][ T5589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.669532][ T5589] EXT4-fs (loop5): 1 truncate cleaned up [ 71.686048][ T5589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.762655][ T5594] loop4: detected capacity change from 0 to 512 [ 71.773761][ T5594] EXT4-fs: Ignoring removed nobh option [ 71.781519][ T5594] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.788766][ T5594] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #11: block 1: comm syz.4.725: lblock 0 mapped to illegal pblock 1 (length 1) [ 71.803316][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.821180][ T5594] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.821641][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 71.837283][ C1] EXT4-fs (loop4): initial error at time 1782700181: ext4_map_blocks:791: inode 11: block 1 [ 71.847442][ C1] EXT4-fs (loop4): last error at time 1782700181: ext4_map_blocks:791: inode 11: block 1 [ 71.861414][ T5594] EXT4-fs (loop4): Remounting filesystem read-only [ 71.874634][ T5594] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.888188][ T5594] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 71.898530][ T5594] EXT4-fs (loop4): 1 orphan inode deleted [ 71.905191][ T5594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.033604][ T5596] lo speed is unknown, defaulting to 1000 [ 72.169891][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.274025][ T5620] loop4: detected capacity change from 0 to 128 [ 72.293130][ T5620] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.317702][ T5620] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.414741][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.373093][ T5627] lo speed is unknown, defaulting to 1000 [ 73.388720][ T5636] loop6: detected capacity change from 0 to 1024 [ 73.393680][ T5637] loop4: detected capacity change from 0 to 512 [ 73.399106][ T5636] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 73.450299][ T5637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.463463][ T5636] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.742: lblock 2 mapped to illegal pblock 2 (length 1) [ 73.478954][ T5636] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.479122][ T5636] __quota_error: 19 callbacks suppressed [ 73.479137][ T5636] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 73.488251][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 73.488283][ C1] EXT4-fs (loop6): initial error at time 1782700183: ext4_map_blocks:791: inode 3: block 2 [ 73.488328][ C1] EXT4-fs (loop6): last error at time 1782700183: ext4_map_blocks:791: inode 3: block 2 [ 73.540581][ T5637] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.590541][ T5636] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.742: lblock 0 mapped to illegal pblock 48 (length 1) [ 73.623157][ T5636] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.623288][ T5636] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 73.641288][ T5636] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.742: Failed to acquire dquot type 0 [ 73.652889][ T5636] loop6: lost filesystem error report for type 5 error -117 [ 73.653012][ T5636] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.681400][ T5636] loop6: lost filesystem error report for type 5 error -117 [ 73.681531][ T5636] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.742: mark_inode_dirty error [ 73.712416][ T5636] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.712530][ T5636] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 73.733760][ T5636] EXT4-fs (loop6): 1 orphan inode deleted [ 73.740129][ T5636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.752409][ T12] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.768262][ T12] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.768374][ T12] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 73.793494][ T5636] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 73.802243][ T5636] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.742: Invalid inode table block 1 in block_group 0 [ 73.815323][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 73.827829][ T5636] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.838815][ T5636] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #2: comm syz.6.742: mark_inode_dirty error [ 73.853155][ T5636] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.742: Invalid inode table block 1 in block_group 0 [ 73.890271][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.902414][ T4407] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 73.915327][ T28] audit: type=1400 audit(1782700183.700:808): avc: denied { write } for pid=5632 comm="syz.4.740" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.937668][ T4407] loop6: lost filesystem error report for type 5 error -117 [ 73.937839][ T4407] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.954934][ T4407] loop6: lost filesystem error report for type 5 error -117 [ 73.955059][ T4407] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 73.974025][ T4407] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.995282][ T28] audit: type=1400 audit(1782700183.790:809): avc: denied { write } for pid=5632 comm="syz.4.740" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.085210][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.117919][ T5647] rdma_rxe: rxe_newlink: failed to add lo [ 74.309029][ T5654] loop6: detected capacity change from 0 to 512 [ 74.348241][ T5654] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.358389][ T5654] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 74.376495][ T5654] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 74.391893][ T5654] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 74.400768][ T5654] System zones: 0-2, 18-18, 34-35 [ 74.421362][ T5654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.471171][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.477648][ T5590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.649779][ T28] audit: type=1400 audit(1782700184.440:810): avc: denied { create } for pid=5670 comm="syz.5.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.698310][ T28] audit: type=1400 audit(1782700184.450:811): avc: denied { cpu } for pid=5671 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.926528][ T28] audit: type=1400 audit(1782700184.720:812): avc: denied { ioctl } for pid=5684 comm="syz.1.760" path="socket:[12044]" dev="sockfs" ino=12044 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.239674][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 75.267060][ T5703] team1: entered promiscuous mode [ 75.276682][ T5703] team1: entered allmulticast mode [ 75.285417][ T5703] 8021q: adding VLAN 0 to HW filter on device team1 [ 75.637920][ T5707] lo speed is unknown, defaulting to 1000 [ 75.780417][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.932158][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.009800][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.113326][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.184293][ T5718] lo speed is unknown, defaulting to 1000 [ 76.265556][ T39] bridge_slave_1: left allmulticast mode [ 76.281296][ T39] bridge_slave_1: left promiscuous mode [ 76.299930][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.351426][ T39] bridge_slave_0: left allmulticast mode [ 76.370363][ T39] bridge_slave_0: left promiscuous mode [ 76.391575][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.448656][ T28] audit: type=1400 audit(1782700186.240:813): avc: denied { write } for pid=5763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.517365][ T28] audit: type=1400 audit(1782700186.310:814): avc: denied { write } for pid=5780 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.584564][ T5787] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 76.627359][ T39] gretap0 (unregistering): left promiscuous mode [ 76.669318][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.684439][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.704320][ T39] bond0 (unregistering): Released all slaves [ 76.722285][ T39] bond1 (unregistering): Released all slaves [ 76.735287][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 77.232429][ T39] dummy0: left promiscuous mode [ 77.251097][ T39] hsr_slave_0: left promiscuous mode [ 77.271406][ T39] hsr_slave_1: left promiscuous mode [ 77.279809][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.285092][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 77.288211][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.304566][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.308256][ T5871] loop4: detected capacity change from 0 to 512 [ 77.312454][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.316886][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 77.341793][ T39] veth1_macvtap: left promiscuous mode [ 77.350115][ T39] veth0_macvtap: left promiscuous mode [ 77.358179][ T39] veth1_vlan: left promiscuous mode [ 77.369528][ T39] veth0_vlan: left promiscuous mode [ 77.379449][ T5871] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.396226][ T5871] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.429363][ T5871] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 77.444512][ T5871] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 77.453829][ T5871] System zones: 0-2, 18-18, 34-35 [ 77.488166][ T5871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.649988][ T39] team0 (unregistering): Port device team_slave_1 removed [ 77.650220][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.668246][ T39] team0 (unregistering): Port device team_slave_0 removed [ 77.734127][ T5895] loop4: detected capacity change from 0 to 512 [ 77.747367][ T5895] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.755542][ T5840] smc: removing ib device sz1 [ 77.760551][ T5895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 77.768746][ T5895] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.770971][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 77.778197][ T5895] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.797: iget: bad i_size value: 12154761577498 [ 77.794638][ T5895] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 77.795236][ T5895] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.797: couldn't read orphan inode 13 (err -117) [ 77.804427][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 77.804457][ C0] EXT4-fs (loop4): initial error at time 1782700187: ext4_orphan_get:1399: inode 13 [ 77.804491][ C0] EXT4-fs (loop4): last error at time 1782700187: ext4_orphan_get:1399: inode 13 [ 77.840252][ T3396] lo speed is unknown, defaulting to 1000 [ 77.842659][ T5895] loop4: lost filesystem error report for type 5 error -117 [ 77.862430][ T3396] sz1: Port: 1 Link DOWN [ 77.866405][ T5895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.899534][ T5895] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.797: dx entry: limit 65535 != root limit 120 [ 77.911869][ T5895] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.797: Corrupt directory, running e2fsck is recommended [ 78.274073][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.295198][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.309225][ T5718] bridge_slave_0: entered allmulticast mode [ 78.325549][ T5718] bridge_slave_0: entered promiscuous mode [ 78.348950][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.360389][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.383841][ T5718] bridge_slave_1: entered allmulticast mode [ 78.401717][ T5718] bridge_slave_1: entered promiscuous mode [ 78.420698][ T5718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.431451][ T5718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.462309][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 78.471734][ T5718] team0: Port device team_slave_0 added [ 78.483615][ T5718] team0: Port device team_slave_1 added [ 78.525499][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.532798][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.566560][ T5935] loop1: detected capacity change from 0 to 512 [ 78.574958][ T5935] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 78.593974][ T5718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.605334][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.612400][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.639477][ T5718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.658285][ T39] IPVS: stop unused estimator thread 0... [ 78.685599][ T5718] hsr_slave_0: entered promiscuous mode [ 78.692192][ T5718] hsr_slave_1: entered promiscuous mode [ 78.706375][ T5718] debugfs: 'hsr0' already exists in 'hsr' [ 78.713096][ T5718] Cannot create hsr debugfs directory [ 78.939623][ T5718] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 78.961720][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 78.961812][ T28] audit: type=1400 audit(1782700188.750:821): avc: denied { write } for pid=5940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.994878][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.010708][ T5718] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.032789][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.041118][ T5718] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.055629][ T28] audit: type=1400 audit(1782700188.850:822): avc: denied { write } for pid=5952 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.086243][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.095559][ T5718] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.110179][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.131007][ T5928] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 79.138950][ T5928] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.150678][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 79.225186][ T5718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.242151][ T5718] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.249832][ T5895] syz.4.797 (5895) used greatest stack depth: 8984 bytes left [ 79.261166][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.268363][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.288586][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.295780][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.303900][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.316926][ T5964] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 79.356994][ T28] audit: type=1400 audit(1782700189.140:823): avc: denied { shutdown } for pid=5966 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.364342][ T5964] rdma_rxe: rxe_newlink: failed to add bond0 [ 79.409359][ T5970] tls_set_device_offload: netdev not found [ 79.446091][ T28] audit: type=1400 audit(1782700189.150:824): avc: denied { create } for pid=5962 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.484855][ T28] audit: type=1400 audit(1782700189.160:825): avc: denied { write } for pid=5962 comm="syz.5.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.575746][ T28] audit: type=1400 audit(1782700189.370:826): avc: denied { write } for pid=5985 comm="syz.4.814" name="anycast6" dev="proc" ino=4026532627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.653186][ T5997] netlink: 'syz.5.819': attribute type 12 has an invalid length. [ 79.661062][ T5997] netlink: 'syz.5.819': attribute type 29 has an invalid length. [ 79.669113][ T5997] netlink: 148 bytes leftover after parsing attributes in process `syz.5.819'. [ 79.690000][ T5997] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 79.707061][ T5997] netlink: 'syz.5.819': attribute type 12 has an invalid length. [ 79.717582][ T5997] netlink: 'syz.5.819': attribute type 29 has an invalid length. [ 79.749032][ T5997] netlink: 148 bytes leftover after parsing attributes in process `syz.5.819'. [ 79.764437][ T5997] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 79.774977][ T5718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.801056][ T6009] IPVS: rr: FWM 3 0x00000003 - no destination available [ 79.857129][ T28] audit: type=1400 audit(1782700189.650:827): avc: denied { setopt } for pid=6016 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.915163][ T28] audit: type=1400 audit(1782700189.700:828): avc: denied { bind } for pid=6016 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.066418][ T5718] veth0_vlan: entered promiscuous mode [ 80.078545][ T5718] veth1_vlan: entered promiscuous mode [ 80.102897][ T5718] veth0_macvtap: entered promiscuous mode [ 80.110674][ T5718] veth1_macvtap: entered promiscuous mode [ 80.124471][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.137312][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.149183][ T5832] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.173117][ T5832] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.195677][ T5832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.223563][ T6036] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.829'. [ 80.242746][ T6036] netlink: zone id is out of range [ 80.244578][ T5832] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.257095][ T6036] netlink: get zone limit has 8 unknown bytes [ 80.285190][ T28] audit: type=1400 audit(1782700190.060:829): avc: denied { listen } for pid=6037 comm="syz.6.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.359115][ T28] audit: type=1400 audit(1782700190.060:830): avc: denied { accept } for pid=6037 comm="syz.6.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.511514][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.839'. [ 80.536693][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 80.564664][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.839'. [ 80.589731][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 80.650156][ T6072] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 80.651134][ T39] bond0: (slave bond_slave_0): interface is now down [ 80.706635][ T39] bond0: (slave bond_slave_1): interface is now down [ 80.734347][ T39] bond0: now running without any active interface! [ 80.742053][ T6072] rdma_rxe: rxe_newlink: failed to add bond0 [ 80.795204][ T6080] loop5: detected capacity change from 0 to 7 [ 80.877035][ T6090] loop4: detected capacity change from 0 to 1024 [ 80.905482][ T6090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.938276][ T6090] EXT4-fs (loop4): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 80.986168][ T6090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.997889][ T6097] loop7: detected capacity change from 0 to 1024 [ 81.005392][ T6090] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.034905][ T6090] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.850: bg 0: block 112: padding at end of block bitmap is not set [ 81.053276][ T6097] EXT4-fs: inline encryption not supported [ 81.069905][ T6090] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 81.082589][ T6090] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.082589][ T6090] [ 81.111066][ T6097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.134915][ T6090] syz.4.850 (6090) used greatest stack depth: 8848 bytes left [ 81.152359][ T3295] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 81.188296][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.226036][ T5718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.384547][ T6119] loop1: detected capacity change from 0 to 512 [ 81.450791][ T6119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.484508][ T6119] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.225610][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.827499][ T6195] gtp0: entered allmulticast mode [ 83.290621][ T6202] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 83.321560][ T6206] netlink: 'syz.1.892': attribute type 14 has an invalid length. [ 83.329647][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 83.347932][ T6206] netlink: 'syz.1.892': attribute type 14 has an invalid length. [ 83.349102][ T5820] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.356967][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 83.373464][ T5820] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.382032][ T5820] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.396272][ T5820] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.565398][ T6232] loop4: detected capacity change from 0 to 512 [ 83.580693][ T6230] loop1: detected capacity change from 0 to 4096 [ 83.585791][ T6232] EXT4-fs: Ignoring removed nobh option [ 83.603327][ T6230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.622565][ T6230] EXT4-fs (loop1): shut down requested (1) [ 83.627042][ T6232] ------------[ cut here ]------------ [ 83.634006][ T6232] EA inode 11 i_nlink=1026 [ 83.634039][ T6232] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.4.908/6232 [ 83.649341][ T6232] Modules linked in: [ 83.653385][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.4.908 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.662666][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.672962][ T6232] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 83.679887][ T6232] Code: 36 d2 96 ff 49 8d 7e 40 4c 8d 2d 0b 8d 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 41 1a d9 03 90 90 90 90 90 90 90 [ 83.699683][ T6232] RSP: 0018:ffffc90000ea37f8 EFLAGS: 00010246 [ 83.705849][ T6232] RAX: ffff8881043dadb0 RBX: ffff88810052e6e8 RCX: ffffffff81c2a506 [ 83.713950][ T6232] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3200 [ 83.722000][ T6232] RBP: 000000000000000b R08: 000188810052e69b R09: 0000000000000000 [ 83.730024][ T6232] R10: ffffc90000ea3728 R11: 0001c90000ea3728 R12: ffff88810052e698 [ 83.738102][ T6232] R13: ffffffff871d3200 R14: ffff88810052e650 R15: 0000000000000001 [ 83.746239][ T6232] FS: 00007f742ba5f6c0(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000 [ 83.755257][ T6232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.761925][ T6232] CR2: 00007f6fe7646000 CR3: 000000011cb4c000 CR4: 00000000003506f0 [ 83.769944][ T6232] Call Trace: [ 83.773304][ T6232] [ 83.776306][ T6232] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 83.782299][ T6232] ext4_xattr_delete_inode+0x6b5/0x790 [ 83.787868][ T6232] ext4_evict_inode+0xb18/0xdf0 [ 83.792789][ T6232] ? __pfx_ext4_evict_inode+0x10/0x10 [ 83.798232][ T6232] evict+0x2a5/0x510 [ 83.802266][ T6232] iput+0x430/0x5a0 [ 83.806116][ T6232] ext4_process_orphan+0x1a4/0x1c0 [ 83.811321][ T6232] ext4_orphan_cleanup+0x6a6/0xa10 [ 83.816556][ T6232] ? ext4_register_li_request+0x14c/0x440 [ 83.822366][ T6232] ext4_fill_super+0x33ab/0x3760 [ 83.827470][ T6232] ? set_blocksize+0x14c/0x270 [ 83.832330][ T6232] ? __pfx_ext4_fill_super+0x10/0x10 [ 83.837656][ T6232] get_tree_bdev_flags+0x291/0x300 [ 83.842848][ T6232] ? __pfx_ext4_fill_super+0x10/0x10 [ 83.848197][ T6232] get_tree_bdev+0x1f/0x30 [ 83.852745][ T6232] ext4_get_tree+0x1c/0x30 [ 83.857270][ T6232] vfs_get_tree+0x57/0x1d0 [ 83.861782][ T6232] do_new_mount+0x288/0x8d0 [ 83.866444][ T6232] path_mount+0x4ad/0xb90 [ 83.870802][ T6232] __se_sys_mount+0x28c/0x2e0 [ 83.875579][ T6232] __x64_sys_mount+0x67/0x80 [ 83.880205][ T6232] x64_sys_call+0x2d61/0x3020 [ 83.884951][ T6232] do_syscall_64+0x136/0x3c0 [ 83.889636][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.895650][ T6232] RIP: 0033:0x7f742d00e0ca [ 83.900083][ T6232] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.919825][ T6232] RSP: 002b:00007f742ba5ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.928361][ T6232] RAX: ffffffffffffffda RBX: 00007f742ba5eee0 RCX: 00007f742d00e0ca [ 83.936425][ T6232] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f742ba5eea0 [ 83.944486][ T6232] RBP: 0000200000000180 R08: 00007f742ba5eee0 R09: 0000000000800718 [ 83.952549][ T6232] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 83.960631][ T6232] R13: 00007f742ba5eea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 83.968658][ T6232] [ 83.971723][ T6232] ---[ end trace 0000000000000000 ]--- [ 83.977822][ T6232] EXT4-fs (loop4): 1 orphan inode deleted [ 83.984426][ T6232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.985643][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.093184][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 84.107034][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.135106][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 84.135122][ T28] audit: type=1400 audit(1782700193.930:863): avc: denied { attach_queue } for pid=6241 comm="syz.7.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.178486][ T6245] netlink: 136 bytes leftover after parsing attributes in process `syz.5.914'. [ 84.188708][ T6245] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 84.597931][ T6299] syzkaller1: entered promiscuous mode [ 84.610744][ T6299] syzkaller1: entered allmulticast mode [ 85.324631][ T6399] loop4: detected capacity change from 0 to 256 [ 85.353771][ T6393] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 85.460359][ T6411] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 85.484837][ T6411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.533531][ T6411] bond1: (slave geneve2): making interface the new active one [ 85.575852][ T6411] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 85.588963][ T6406] loop6: detected capacity change from 0 to 1024 [ 85.597931][ T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.597982][ T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.598025][ T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.598169][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600420][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 85.663690][ T6406] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.741149][ T6406] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 3: comm syz.6.934: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.780355][ T28] audit: type=1400 audit(1782700195.570:864): avc: denied { mount } for pid=6427 comm="syz.1.942" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.819742][ T6406] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.821628][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 85.837274][ C1] EXT4-fs (loop6): initial error at time 1782700195: ext4_map_blocks:833: inode 3: block 3 [ 85.847352][ C1] EXT4-fs (loop6): last error at time 1782700195: ext4_map_blocks:833: inode 3: block 3 [ 85.848413][ T6406] Quota error (device loop6): write_blk: dquota write failed [ 85.867947][ T6406] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 85.878164][ T28] audit: type=1400 audit(1782700195.660:865): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.923060][ T6406] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 85.935612][ T6406] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.934: Failed to acquire dquot type 0 [ 85.948107][ T6406] loop6: lost filesystem error report for type 5 error -117 [ 85.949891][ T6406] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.934: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.973192][ T6406] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.975154][ T6406] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 85.997335][ T6406] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.934: Failed to acquire dquot type 0 [ 86.009256][ T6406] loop6: lost filesystem error report for type 5 error -117 [ 86.010972][ T6406] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.934: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.035830][ T6406] loop6: lost filesystem error report for type 5 error -117 [ 86.038690][ T6406] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.934: lblock 3 mapped to illegal pblock 3 (length 1) [ 86.061677][ T6406] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 86.063184][ T6406] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 86.086346][ T6406] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.934: Failed to acquire dquot type 0 [ 86.099983][ T6406] loop6: lost filesystem error report for type 5 error -117 [ 86.100990][ T6406] EXT4-fs (loop6): 1 orphan inode deleted [ 86.123250][ T6406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.339758][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.597083][ T6447] loop1: detected capacity change from 0 to 1024 [ 86.606021][ T6447] EXT4-fs: inline encryption not supported [ 86.635800][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.648214][ T28] audit: type=1400 audit(1782700196.430:866): avc: denied { nlmsg_read } for pid=6448 comm="syz.4.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.675248][ T28] audit: type=1400 audit(1782700196.470:867): avc: denied { write } for pid=6446 comm="syz.1.950" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.756420][ T6461] loop4: detected capacity change from 0 to 512 [ 86.764673][ T6461] EXT4-fs: Ignoring removed bh option [ 86.784899][ T6461] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.955: corrupted in-inode xattr: e_value size too large [ 86.806197][ T6461] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.806382][ T6461] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.955: couldn't read orphan inode 15 (err -117) [ 86.815648][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 86.815669][ C0] EXT4-fs (loop4): initial error at time 1782700196: ext4_iget_extra_inode:5180: inode 15 [ 86.815695][ C0] EXT4-fs (loop4): last error at time 1782700196: ext4_iget_extra_inode:5180: inode 15 [ 86.853621][ T6461] loop4: lost filesystem error report for type 5 error -117 [ 86.854267][ T6461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.895498][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.910532][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.031260][ T6479] loop6: detected capacity change from 0 to 512 [ 87.057751][ T6479] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.962: corrupted xattr block 95: invalid header [ 87.082029][ T6479] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.082283][ T6479] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 87.104512][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 87.104543][ C0] EXT4-fs (loop6): initial error at time 1782700196: ext4_expand_extra_isize_ea:2810: inode 11 [ 87.104576][ C0] EXT4-fs (loop6): last error at time 1782700196: ext4_expand_extra_isize_ea:2810: inode 11 [ 87.134991][ T6479] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.962: bg 0: block 7: invalid block bitmap [ 87.147363][ T6479] loop6: lost filesystem error report for type 5 error -117 [ 87.148786][ T6479] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 87.175898][ T6479] loop6: lost filesystem error report for type 5 error -117 [ 87.176096][ T6479] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.962: corrupted xattr block 95: invalid header [ 87.202109][ T6479] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.202320][ T6479] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 87.228845][ T6479] EXT4-fs (loop6): 1 orphan inode deleted [ 87.236479][ T6479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.281559][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.294019][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 87.450259][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 87.514587][ T6513] loop4: detected capacity change from 0 to 512 [ 87.534675][ T6513] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.979: iget: bad i_size value: 38620345925642 [ 87.568771][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 87.578401][ T6513] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.579767][ T6513] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.979: couldn't read orphan inode 15 (err -117) [ 87.589012][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 87.589039][ C0] EXT4-fs (loop4): initial error at time 1782700197: ext4_orphan_get:1399: inode 15 [ 87.589076][ C0] EXT4-fs (loop4): last error at time 1782700197: ext4_orphan_get:1399: inode 15 [ 87.626228][ T6513] loop4: lost filesystem error report for type 5 error -117 [ 87.628261][ T6513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.668356][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.228240][ T6547] syzkaller1: entered promiscuous mode [ 88.240759][ T6547] syzkaller1: entered allmulticast mode [ 88.403246][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.995'. [ 88.878874][ T6573] lo speed is unknown, defaulting to 1000 [ 88.887400][ T6573] lo speed is unknown, defaulting to 1000 [ 88.895783][ T6573] lo speed is unknown, defaulting to 1000 [ 88.939287][ T6577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6577 comm=syz.4.1006 [ 88.983372][ T6573] infiniband syz0: set down [ 88.988000][ T4757] lo speed is unknown, defaulting to 1000 [ 88.994852][ T6573] infiniband syz0: added lo [ 89.009616][ T6573] RDS/IB: syz0: added [ 89.015285][ T6573] smc: adding ib device syz0 with port count 1 [ 89.021546][ T6573] smc: ib device syz0 port 1 has no pnetid [ 89.028686][ T6573] lo speed is unknown, defaulting to 1000 [ 89.036509][ T3376] lo speed is unknown, defaulting to 1000 [ 89.088540][ T6573] lo speed is unknown, defaulting to 1000 [ 89.129838][ T6573] lo speed is unknown, defaulting to 1000 [ 89.194319][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 89.194334][ T28] audit: type=1400 audit(1782700198.990:880): avc: denied { sqpoll } for pid=6583 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.216362][ T6573] lo speed is unknown, defaulting to 1000 [ 89.252002][ T6590] loop4: detected capacity change from 0 to 256 [ 89.308577][ T6573] lo speed is unknown, defaulting to 1000 [ 89.400118][ T6599] loop4: detected capacity change from 0 to 512 [ 89.409857][ T6599] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.425684][ T6599] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1015: corrupted in-inode xattr: invalid ea_ino [ 89.441882][ T6599] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.442106][ T6599] EXT4-fs (loop4): Remounting filesystem read-only [ 89.457847][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 89.457871][ C0] EXT4-fs (loop4): initial error at time 1782700199: ext4_iget_extra_inode:5180: inode 15 [ 89.457913][ C0] EXT4-fs (loop4): last error at time 1782700199: ext4_iget_extra_inode:5180: inode 15 [ 89.494686][ T6599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.523755][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.741717][ T3757] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.777041][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8881211d9800: rx timeout, send abort [ 89.785508][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8881211d9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.788877][ T6621] loop5: detected capacity change from 0 to 4096 [ 89.833980][ T6621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.900609][ T28] audit: type=1400 audit(1782700199.690:881): avc: denied { write } for pid=6620 comm="syz.5.1023" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.164817][ T28] audit: type=1400 audit(1782700199.960:882): avc: denied { write } for pid=6632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.244477][ T28] audit: type=1400 audit(1782700200.040:883): avc: denied { write } for pid=6652 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.422964][ T6666] loop4: detected capacity change from 0 to 1024 [ 90.473237][ T28] audit: type=1400 audit(1782700200.270:884): avc: denied { write } for pid=6657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.522708][ T28] audit: type=1400 audit(1782700200.310:885): avc: denied { write } for pid=6672 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.664619][ T28] audit: type=1400 audit(1782700200.450:886): avc: denied { write } for pid=6675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.707357][ T28] audit: type=1400 audit(1782700200.500:887): avc: denied { write } for pid=6686 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.803993][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.978892][ T28] audit: type=1400 audit(1782700200.770:888): avc: denied { write } for pid=6689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.057595][ T28] audit: type=1400 audit(1782700200.850:889): avc: denied { write } for pid=6710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.928220][ T6746] loop5: detected capacity change from 0 to 1024 [ 91.960141][ T6746] EXT4-fs: Ignoring removed i_version option [ 92.002975][ T6746] EXT4-fs: Ignoring removed bh option [ 92.067992][ T6746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.147621][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.816577][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 92.867475][ T6802] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 92.888227][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 92.934269][ T6802] gretap0: entered promiscuous mode [ 93.144834][ T6828] loop1: detected capacity change from 0 to 1024 [ 93.151702][ T6828] EXT4-fs: Ignoring removed bh option [ 93.157208][ T6828] EXT4-fs: Ignoring removed oldalloc option [ 93.178752][ T6828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.250213][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.373058][ T6840] rdma_rxe: rxe_newlink: failed to add lo [ 93.512865][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 93.535980][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1088'. [ 94.226644][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 94.226730][ T28] audit: type=1400 audit(1782700204.020:901): avc: denied { create } for pid=6893 comm="syz.4.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.477757][ T28] audit: type=1400 audit(1782700204.270:902): avc: denied { mounton } for pid=6903 comm="syz.4.1114" path="/259/bus" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.806927][ T28] audit: type=1400 audit(1782700204.600:903): avc: denied { listen } for pid=6914 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.834303][ T28] audit: type=1400 audit(1782700204.600:904): avc: denied { accept } for pid=6914 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.058180][ T6819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.093892][ T6946] loop7: detected capacity change from 0 to 256 [ 96.141055][ T6946] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.155292][ T28] audit: type=1400 audit(1782700205.930:905): avc: denied { getopt } for pid=6945 comm="syz.1.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.207644][ T6946] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 96.215822][ T28] audit: type=1400 audit(1782700206.000:906): avc: denied { mmap_zero } for pid=6943 comm="syz.7.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 96.235503][ T6946] FAT-fs (loop7): Filesystem has been set read-only [ 96.445520][ T6985] syzkaller1: entered allmulticast mode [ 96.532227][ T6998] loop4: detected capacity change from 0 to 128 [ 96.546844][ T6998] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 96.564497][ T6998] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.652072][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.734037][ T7004] loop1: detected capacity change from 0 to 8192 [ 96.784296][ T7004] loop1: p1 < > p2 p4 < p5 > [ 96.792290][ T7004] loop1: partition table partially beyond EOD, truncated [ 96.805474][ T7004] loop1: p1 start 4294901760 is beyond EOD, truncated [ 96.825840][ T7004] loop1: p2 size 983040 extends beyond EOD, truncated [ 96.847214][ T7004] loop1: p5 size 983040 extends beyond EOD, truncated [ 96.899145][ T7019] loop6: detected capacity change from 0 to 1024 [ 96.919107][ T7019] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.946055][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.953364][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.965782][ T7019] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 96.975139][ T7022] loop1: detected capacity change from 0 to 512 [ 96.989148][ T7019] EXT4-fs (loop6): orphan cleanup on readonly fs [ 97.002505][ T7022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.017211][ T7019] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.1163: Invalid inode table block 0 in block_group 0 [ 97.020653][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 97.040289][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 97.051018][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 97.074834][ T7022] EXT4-fs (loop1): 1 truncate cleaned up [ 97.084282][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.085912][ T7019] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.093306][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 97.093329][ C1] EXT4-fs (loop6): initial error at time 1782700206: __ext4_get_inode_loc:4886 [ 97.093358][ C1] EXT4-fs (loop6): last error at time 1782700206: __ext4_get_inode_loc:4886 [ 97.104217][ T7022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.115053][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.140453][ T7019] EXT4-fs error (device loop6): ext4_quota_write:7430: inode #3: comm syz.6.1163: mark_inode_dirty error [ 97.159324][ T7019] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.162143][ T7019] Quota error (device loop6): write_blk: dquota write failed [ 97.162589][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'. [ 97.207957][ T7028] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1166'. [ 97.240971][ T7019] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 97.260912][ T7030] loop5: detected capacity change from 0 to 512 [ 97.267740][ T7019] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1163: Failed to acquire dquot type 0 [ 97.284119][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.284280][ T7019] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.1163: Invalid inode table block 0 in block_group 0 [ 97.305987][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.306854][ T7019] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.327889][ T7030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.333648][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.344934][ T7030] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.359291][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.360972][ T7019] EXT4-fs error (device loop6): ext4_ext_truncate:4557: inode #15: comm syz.6.1163: mark_inode_dirty error [ 97.370588][ T28] audit: type=1400 audit(1782700207.160:907): avc: denied { write } for pid=7029 comm="syz.5.1167" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.406098][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.430120][ T7019] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.430312][ T7019] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.1163: Invalid inode table block 0 in block_group 0 [ 97.453687][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.455202][ T7019] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.473088][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.474721][ T7019] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 97.491162][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.491469][ T7019] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.1163: Invalid inode table block 0 in block_group 0 [ 97.513221][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.513359][ T7019] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 97.530673][ T7019] loop6: lost filesystem error report for type 5 error -117 [ 97.530842][ T7019] EXT4-fs error (device loop6): ext4_truncate:4691: inode #15: comm syz.6.1163: mark_inode_dirty error [ 97.532283][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.538294][ T7019] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.562279][ T7019] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 97.601176][ T7019] EXT4-fs (loop6): 1 truncate cleaned up [ 97.609015][ T30] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.623128][ T30] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.638020][ T7019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.654697][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.667987][ T30] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.710557][ T30] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.778447][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.785983][ T28] audit: type=1400 audit(1782700207.580:908): avc: denied { read } for pid=7050 comm="syz.4.1174" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.828663][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.941644][ T7060] netlink: 'syz.1.1178': attribute type 10 has an invalid length. [ 97.950465][ T7060] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.958359][ T7060] bond0: (slave team0): Enslaving as an active interface with a down link [ 98.598575][ T7066] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 98.677096][ T7066] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1189'. [ 98.686992][ T30] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.696677][ T30] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.705575][ T30] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.714145][ T30] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.724308][ T30] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.736812][ T30] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.745788][ T30] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.782735][ T30] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.198029][ T7110] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1200'. [ 99.259518][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1204'. [ 99.454613][ T7127] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1209'. [ 99.596395][ T7143] veth0: entered promiscuous mode [ 99.602205][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 99.612885][ T7143] veth0 (unregistering): left promiscuous mode [ 99.614963][ T7139] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1214'. [ 99.663398][ T7149] loop7: detected capacity change from 0 to 512 [ 99.670286][ T7149] EXT4-fs: Ignoring removed bh option [ 99.677866][ T7149] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1220: corrupted in-inode xattr: e_value size too large [ 99.692123][ T7147] loop6: detected capacity change from 0 to 512 [ 99.699846][ T7149] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.700069][ T7149] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1220: couldn't read orphan inode 15 (err -117) [ 99.709373][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 99.709398][ C0] EXT4-fs (loop7): initial error at time 1782700209: ext4_iget_extra_inode:5180: inode 15 [ 99.709438][ C0] EXT4-fs (loop7): last error at time 1782700209: ext4_iget_extra_inode:5180: inode 15 [ 99.751376][ T7147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.765359][ T7149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.784618][ T7147] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.810241][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 99.810273][ T28] audit: type=1400 audit(1782700209.600:921): avc: denied { write } for pid=7148 comm="syz.7.1220" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.822407][ T6524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.882625][ T28] audit: type=1400 audit(1782700209.600:922): avc: denied { write } for pid=7148 comm="syz.7.1220" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.904333][ T28] audit: type=1400 audit(1782700209.600:923): avc: denied { write } for pid=7148 comm="syz.7.1220" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.926139][ T28] audit: type=1400 audit(1782700209.640:924): avc: denied { write } for pid=7148 comm="syz.7.1220" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.948062][ T28] audit: type=1400 audit(1782700209.640:925): avc: denied { write } for pid=7148 comm="syz.7.1220" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.961595][ T5718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.975876][ T28] audit: type=1400 audit(1782700209.670:926): avc: denied { write } for pid=7146 comm="syz.6.1219" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.018776][ T28] audit: type=1400 audit(1782700209.670:927): avc: denied { read write } for pid=7146 comm="syz.6.1219" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.079088][ T28] audit: type=1400 audit(1782700209.670:928): avc: denied { open } for pid=7146 comm="syz.6.1219" path="/145/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.103784][ T28] audit: type=1400 audit(1782700209.770:929): avc: denied { write } for pid=7146 comm="syz.6.1219" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.127087][ T28] audit: type=1400 audit(1782700209.770:930): avc: denied { create } for pid=7146 comm="syz.6.1219" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 100.162206][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.220362][ T7170] loop4: detected capacity change from 0 to 512 [ 100.265578][ T7170] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1226: corrupted in-inode xattr: e_value out of bounds [ 100.304302][ T7170] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.304607][ T7170] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1226: couldn't read orphan inode 15 (err -117) [ 100.313896][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 100.313917][ C0] EXT4-fs (loop4): initial error at time 1782700210: ext4_iget_extra_inode:5180: inode 15 [ 100.313974][ C0] EXT4-fs (loop4): last error at time 1782700210: ext4_iget_extra_inode:5180: inode 15 [ 100.362757][ T7170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.413770][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.909301][ T7196] loop4: detected capacity change from 0 to 1024 [ 100.926233][ T7196] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.955121][ T7196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.977800][ T7196] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.989717][ T7196] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.1238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 101.011442][ T7196] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.011784][ T7196] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1238: couldn't read orphan inode 11 (err -117) [ 101.032815][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 101.032840][ C0] EXT4-fs (loop4): initial error at time 1782700210: ext4_ext_check_inode:521: inode 11 [ 101.032866][ C0] EXT4-fs (loop4): last error at time 1782700210: ext4_ext_check_inode:521: inode 11 [ 101.060736][ T7196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.271428][ T7211] loop1: detected capacity change from 0 to 8192 [ 101.378590][ T7224] sg_write: data in/out 483412/136 bytes for SCSI command 0x0-- guessing data in; [ 101.378590][ T7224] program syz.7.1249 not setting count and/or reply_len properly [ 101.413969][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.469811][ T7231] loop1: detected capacity change from 0 to 256 [ 101.483845][ T7231] vfat: Bad value for 'shortname' [ 101.526337][ T7237] autofs4:pid:7237:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3648.8192), cmd(0xc0189371) [ 101.549424][ T7237] autofs4:pid:7237:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 102.274630][ T7255] loop1: detected capacity change from 0 to 128 [ 102.335251][ T7257] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1264'. [ 102.364765][ T7257] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1264'. [ 102.425746][ T7266] loop4: detected capacity change from 0 to 256 [ 102.441797][ T7266] FAT-fs (loop4): Directory bread(block 1285) failed [ 102.460198][ T7266] FAT-fs (loop4): Directory bread(block 1286) failed [ 102.468947][ T7266] FAT-fs (loop4): Directory bread(block 1287) failed [ 102.488012][ T7266] FAT-fs (loop4): Directory bread(block 1288) failed [ 102.520114][ T7266] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 102.588319][ T7275] loop1: detected capacity change from 0 to 512 [ 102.616783][ T7275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.795892][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.821581][ T7285] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1277'. [ 103.059508][ T7310] loop7: detected capacity change from 0 to 512 [ 103.078418][ T7310] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 103.092282][ T7310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 103.100877][ T7310] System zones: 1-12 [ 103.106288][ T7310] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.1289: bad orphan inode 131072 [ 103.117724][ T7310] fserror_report: 4 callbacks suppressed [ 103.117760][ T7310] loop7: lost filesystem error report for type 5 error -117 [ 103.126200][ T7310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.189289][ T5718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.596421][ T7333] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 103.742391][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1301'. [ 103.897310][ T7342] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 104.128723][ T7362] loop1: detected capacity change from 0 to 512 [ 104.179633][ T7362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.229165][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.251112][ T7368] netlink: 6392 bytes leftover after parsing attributes in process `syz.6.1312'. [ 104.276709][ T7368] netlink: 6392 bytes leftover after parsing attributes in process `syz.6.1312'. [ 104.399348][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1315'. [ 104.480061][ T7379] ipip0: entered promiscuous mode [ 104.493202][ T7379] ipip0: entered allmulticast mode [ 104.634674][ T7388] loop7: detected capacity change from 0 to 256 [ 104.656807][ T7388] FAT-fs (loop7): Directory bread(block 1285) failed [ 104.680719][ T7388] FAT-fs (loop7): Directory bread(block 1286) failed [ 104.704041][ T7388] FAT-fs (loop7): Directory bread(block 1287) failed [ 104.725354][ T7388] FAT-fs (loop7): Directory bread(block 1288) failed [ 104.750891][ T7388] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 104.818075][ T7400] Invalid argument reading file caps for ./file0 [ 104.871806][ T7403] loop4: detected capacity change from 0 to 128 [ 104.886425][ T7403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 104.896554][ T7403] System zones: 1-3, 19-19, 35-36 [ 104.902857][ T7403] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.915725][ T7403] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.965984][ T3295] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.999717][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 104.999734][ T28] audit: type=1400 audit(1782700214.790:943): avc: denied { listen } for pid=7407 comm="syz.4.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.024383][ T28] audit: type=1400 audit(1782700215.820:944): avc: denied { getopt } for pid=7433 comm="syz.4.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.219714][ T7451] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1349'. [ 106.516007][ T7478] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1362'. [ 106.707454][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1366'. [ 106.834849][ T7499] loop6: detected capacity change from 0 to 512 [ 106.852135][ T7499] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 106.872862][ T28] audit: type=1400 audit(1782700216.670:945): avc: denied { connect } for pid=7500 comm="syz.1.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.905250][ T7499] EXT4-fs (loop6): 1 truncate cleaned up [ 106.916115][ T7499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.945065][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.415462][ T7534] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 107.447280][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.467693][ T7541] loop5: detected capacity change from 0 to 512 [ 107.496889][ T7541] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1391: invalid indirect mapped block 256 (level 2) [ 107.528312][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.528700][ T7541] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.541625][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 107.557391][ C1] EXT4-fs (loop5): initial error at time 1782700217: ext4_free_branches:1023: inode 11 [ 107.559193][ T7534] bond2: (slave gre3): The slave device specified does not support setting the MAC address [ 107.567106][ C1] EXT4-fs (loop5): last error at time 1782700217: ext4_free_branches:1023: inode 11 [ 107.579976][ T7541] EXT4-fs (loop5): 2 truncates cleaned up [ 107.595486][ T7534] bond2: (slave gre3): Error -95 calling set_mac_address [ 107.615981][ T7541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.664051][ T28] audit: type=1400 audit(1782700217.460:946): avc: denied { write } for pid=7540 comm="syz.5.1391" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.689518][ T7552] loop6: detected capacity change from 0 to 512 [ 107.722902][ T7553] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1391: bg 0: block 5: invalid block bitmap [ 107.748064][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.757659][ T7553] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 107.770197][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.782236][ T7552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.795088][ T7553] EXT4-fs (loop5): This should not happen!! Data will be lost [ 107.795088][ T7553] [ 107.807123][ T7553] EXT4-fs (loop5): Total free blocks count 0 [ 107.813325][ T28] audit: type=1400 audit(1782700217.600:947): avc: denied { write } for pid=7551 comm="syz.6.1396" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.835773][ T28] audit: type=1400 audit(1782700217.630:948): avc: denied { write } for pid=7540 comm="syz.5.1391" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.857512][ T28] audit: type=1400 audit(1782700217.630:949): avc: denied { write } for pid=7540 comm="syz.5.1391" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.872294][ T7553] EXT4-fs (loop5): Free/Dirty block details [ 107.879786][ T28] audit: type=1400 audit(1782700217.630:950): avc: denied { rename } for pid=7540 comm="syz.5.1391" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.907432][ T28] audit: type=1400 audit(1782700217.630:951): avc: denied { unlink } for pid=7540 comm="syz.5.1391" name="file3" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.917782][ T7553] EXT4-fs (loop5): free_blocks=0 [ 107.948590][ T7553] EXT4-fs (loop5): dirty_blocks=588 [ 107.954114][ T7553] EXT4-fs (loop5): Block reservation details [ 107.956304][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.960147][ T7553] EXT4-fs (loop5): i_reserved_data_blocks=588 [ 107.976811][ T7541] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 584 with error 28 [ 108.069705][ T3758] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 108.331275][ T7587] loop7: detected capacity change from 0 to 1024 [ 108.338363][ T7587] EXT4-fs: Ignoring removed nobh option [ 108.344717][ T7587] EXT4-fs: Ignoring removed i_version option [ 108.373158][ T7587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.392250][ T28] audit: type=1400 audit(1782700218.190:952): avc: denied { write } for pid=7586 comm="syz.7.1410" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.479760][ T7587] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 108.486191][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1414'. [ 108.494657][ T7587] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.516199][ T7587] EXT4-fs (loop7): This should not happen!! Data will be lost [ 108.516199][ T7587] [ 108.526126][ T7587] EXT4-fs (loop7): Total free blocks count 0 [ 108.532432][ T7587] EXT4-fs (loop7): Free/Dirty block details [ 108.538486][ T7587] EXT4-fs (loop7): free_blocks=20480 [ 108.544256][ T7587] EXT4-fs (loop7): dirty_blocks=2608 [ 108.549605][ T7587] EXT4-fs (loop7): Block reservation details [ 108.555809][ T7587] EXT4-fs (loop7): i_reserved_data_blocks=163 [ 108.739493][ T30] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.762733][ T5718] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 108.789982][ T7610] loop1: detected capacity change from 0 to 1024 [ 108.805901][ T7610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.818331][ T7610] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.880352][ T7610] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.1418: Freeing blocks not in datazone - block = 0, count = 16 [ 108.903093][ T7616] loop7: detected capacity change from 0 to 1024 [ 108.912573][ T7616] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.920524][ T5840] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 112: padding at end of block bitmap is not set [ 108.935732][ T7616] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.935956][ T5840] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.959728][ T5840] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.959728][ T5840] [ 108.965161][ T7616] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.969754][ T5840] EXT4-fs (loop1): Total free blocks count 0 [ 108.985846][ T5840] EXT4-fs (loop1): Free/Dirty block details [ 108.991815][ T5840] EXT4-fs (loop1): free_blocks=16 [ 108.997027][ T5840] EXT4-fs (loop1): dirty_blocks=16 [ 109.002682][ T5840] EXT4-fs (loop1): Block reservation details [ 109.008933][ T5840] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 109.015408][ T3296] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 109.019699][ T7616] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #11: comm syz.7.1419: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 109.027879][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.054580][ T7616] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 109.058525][ T7616] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1419: couldn't read orphan inode 11 (err -117) [ 109.067796][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 109.067824][ C0] EXT4-fs (loop7): initial error at time 1782700218: ext4_ext_check_inode:521: inode 11 [ 109.067862][ C0] EXT4-fs (loop7): last error at time 1782700218: ext4_ext_check_inode:521: inode 11 [ 109.105766][ T7616] loop7: lost filesystem error report for type 5 error -117 [ 109.106759][ T7616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.295070][ T5718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.384596][ T7645] loop6: detected capacity change from 0 to 4096 [ 109.391294][ T7645] EXT4-fs: inline encryption not supported [ 109.397688][ T7645] EXT4-fs: test_dummy_encryption option not supported [ 109.963020][ T7680] lo: entered allmulticast mode [ 109.985052][ T7680] dvmrp8: entered allmulticast mode [ 110.182313][ T7696] lo speed is unknown, defaulting to 1000 [ 110.222955][ T7700] loop1: detected capacity change from 0 to 4096 [ 110.234909][ T7700] EXT4-fs: inline encryption not supported [ 110.251279][ T7700] EXT4-fs: test_dummy_encryption option not supported [ 110.430106][ T7708] loop6: detected capacity change from 0 to 1024 [ 110.446156][ T7708] EXT4-fs: Ignoring removed nobh option [ 110.488361][ T7708] EXT4-fs: Ignoring removed i_version option [ 110.512476][ T7708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.530788][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 110.530803][ T28] audit: type=1400 audit(1782700220.320:957): avc: denied { write } for pid=7707 comm="syz.6.1459" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.631062][ T7708] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 110.653441][ T7708] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1408 with error 28 [ 110.672617][ T7708] EXT4-fs (loop6): This should not happen!! Data will be lost [ 110.672617][ T7708] [ 110.682465][ T7708] EXT4-fs (loop6): Total free blocks count 0 [ 110.688514][ T7708] EXT4-fs (loop6): Free/Dirty block details [ 110.694794][ T7708] EXT4-fs (loop6): free_blocks=20480 [ 110.700247][ T7708] EXT4-fs (loop6): dirty_blocks=1424 [ 110.705762][ T7708] EXT4-fs (loop6): Block reservation details [ 110.712160][ T7708] EXT4-fs (loop6): i_reserved_data_blocks=89 [ 110.975859][ T7737] loop7: detected capacity change from 0 to 1024 [ 111.036383][ T7737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.055666][ T30] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1352 with error 28 [ 111.087428][ T7737] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.100568][ T28] audit: type=1400 audit(1782700220.890:958): avc: denied { write } for pid=7736 comm="syz.7.1470" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.131193][ T4407] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 111.194120][ T7748] sit0: entered promiscuous mode [ 111.199320][ T7748] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 111.207186][ T7748] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1476'. [ 111.207757][ T7746] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1470: Freeing blocks not in datazone - block = 0, count = 16 [ 111.363606][ T5827] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 112: padding at end of block bitmap is not set [ 111.390778][ T5827] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 111.420204][ T5827] EXT4-fs (loop7): This should not happen!! Data will be lost [ 111.420204][ T5827] [ 111.441955][ T5827] EXT4-fs (loop7): Total free blocks count 0 [ 111.464991][ T5827] EXT4-fs (loop7): Free/Dirty block details [ 111.478178][ T7764] EXT4-fs: Ignoring removed nobh option [ 111.483466][ T5827] EXT4-fs (loop7): free_blocks=16 [ 111.495293][ T7770] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.505911][ T7764] EXT4-fs: Ignoring removed i_version option [ 111.512470][ T5827] EXT4-fs (loop7): dirty_blocks=16 [ 111.519505][ T5827] EXT4-fs (loop7): Block reservation details [ 111.529078][ T5827] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 111.547672][ T7764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.550024][ T5718] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 111.583391][ T5718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.591755][ T28] audit: type=1400 audit(1782700221.380:959): avc: denied { write } for pid=7763 comm="syz.1.1483" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.663708][ T7764] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 111.721292][ T7764] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 568 with error 28 [ 111.767101][ T7764] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.767101][ T7764] [ 111.789244][ T7764] EXT4-fs (loop1): Total free blocks count 0 [ 111.796676][ T7764] EXT4-fs (loop1): Free/Dirty block details [ 111.819109][ T7764] EXT4-fs (loop1): free_blocks=20480 [ 111.834667][ T7764] EXT4-fs (loop1): dirty_blocks=576 [ 111.840065][ T7764] EXT4-fs (loop1): Block reservation details [ 111.849038][ T7764] EXT4-fs (loop1): i_reserved_data_blocks=36 [ 111.893202][ T7800] set_capacity_and_notify: 1 callbacks suppressed [ 111.893222][ T7800] loop5: detected capacity change from 0 to 512 [ 111.896407][ T7801] netlink: 'syz.7.1497': attribute type 1 has an invalid length. [ 111.912828][ T7800] EXT4-fs: Ignoring removed orlov option [ 111.933798][ T7800] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.946344][ T7801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.989913][ T7800] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #17: comm syz.5.1498: corrupted in-inode xattr: invalid ea_ino [ 112.020041][ T7800] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 112.032621][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 112.044401][ T7800] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1498: couldn't read orphan inode 17 (err -117) [ 112.051212][ C0] EXT4-fs (loop5): initial error at time 1782700221: ext4_iget_extra_inode:5180: inode 17 [ 112.079569][ C0] EXT4-fs (loop5): last error at time 1782700221: ext4_iget_extra_inode:5180: inode 17 [ 112.113817][ T5840] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 512 with error 28 [ 112.134601][ T7800] loop5: lost filesystem error report for type 5 error -117 [ 112.135418][ T7800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.160525][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 112.176806][ T3296] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 112.197453][ T28] audit: type=1400 audit(1782700221.990:960): avc: denied { write } for pid=7798 comm="syz.5.1498" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.199399][ T7800] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 112.235839][ T28] audit: type=1400 audit(1782700221.990:961): avc: denied { write } for pid=7798 comm="syz.5.1498" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.274762][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.597438][ T7841] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1513'. [ 112.637232][ T7846] netlink: 'syz.6.1515': attribute type 1 has an invalid length. [ 112.846222][ T7859] loop6: detected capacity change from 0 to 512 [ 112.871855][ T7859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.892383][ T28] audit: type=1400 audit(1782700222.680:962): avc: denied { write } for pid=7858 comm="syz.6.1521" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.994215][ T4407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.047907][ T7870] loop5: detected capacity change from 0 to 512 [ 113.120904][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.120904][ T7874] loop5: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 113.139421][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.139421][ T7874] loop5: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 113.166461][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.166461][ T7874] loop5: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 113.180059][ T7872] lo speed is unknown, defaulting to 1000 [ 113.181901][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.181901][ T7874] loop5: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 113.201098][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.201098][ T7874] loop5: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 113.215767][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.215767][ T7874] loop5: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 113.238979][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.238979][ T7874] loop5: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 113.272050][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.272050][ T7874] loop5: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 113.291672][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.291672][ T7874] loop5: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 113.306160][ T7874] syz.5.1524: attempt to access beyond end of device [ 113.306160][ T7874] loop5: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 113.322656][ T7874] ================================================================== [ 113.330807][ T7874] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 113.338157][ T7874] [ 113.340511][ T7874] read-write to 0xffff88811ad436c0 of 8 bytes by task 7870 on cpu 1: [ 113.348606][ T7874] xas_clear_mark+0x91/0x180 [ 113.353332][ T7874] __folio_start_writeback+0x257/0x350 [ 113.358823][ T7874] __mpage_writepages+0xd92/0x1370 [ 113.363993][ T7874] fat_writepages+0x26/0x30 [ 113.368538][ T7874] do_writepages+0x1b9/0x300 [ 113.373155][ T7874] filemap_write_and_wait_range+0x166/0x370 [ 113.379092][ T7874] direct_write_fallback+0x73/0x100 [ 113.384320][ T7874] __generic_file_write_iter+0xfd/0x120 [ 113.389890][ T7874] generic_file_write_iter+0x77/0x1f0 [ 113.395288][ T7874] do_iter_readv_writev+0x4f6/0x5a0 [ 113.400510][ T7874] vfs_writev+0x2d1/0x8b0 [ 113.404893][ T7874] __se_sys_pwritev2+0xfc/0x1c0 [ 113.409769][ T7874] __x64_sys_pwritev2+0x67/0x80 [ 113.414675][ T7874] x64_sys_call+0xe07/0x3020 [ 113.419296][ T7874] do_syscall_64+0x136/0x3c0 [ 113.423940][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.429877][ T7874] [ 113.432219][ T7874] read to 0xffff88811ad436c0 of 8 bytes by task 7874 on cpu 0: [ 113.439791][ T7874] xas_find_marked+0x211/0x650 [ 113.444593][ T7874] filemap_get_folios_tag+0xf7/0x400 [ 113.449917][ T7874] writeback_iter+0x48f/0x7c0 [ 113.454620][ T7874] __mpage_writepages+0x76c/0x1370 [ 113.459766][ T7874] fat_writepages+0x26/0x30 [ 113.464341][ T7874] do_writepages+0x1b9/0x300 [ 113.468988][ T7874] filemap_write_and_wait_range+0x166/0x370 [ 113.474921][ T7874] generic_file_read_iter+0xf4/0x320 [ 113.480250][ T7874] do_iter_readv_writev+0x4f6/0x5a0 [ 113.485476][ T7874] vfs_readv+0x1e8/0x6d0 [ 113.489767][ T7874] __se_sys_preadv2+0xfc/0x1c0 [ 113.494562][ T7874] __x64_sys_preadv2+0x67/0x80 [ 113.499354][ T7874] x64_sys_call+0x2b3b/0x3020 [ 113.504087][ T7874] do_syscall_64+0x136/0x3c0 [ 113.508716][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.514639][ T7874] [ 113.517063][ T7874] value changed: 0x07ffffffe0000000 -> 0x07fffff800000000 [ 113.524184][ T7874] [ 113.526527][ T7874] Reported by Kernel Concurrency Sanitizer on: [ 113.532698][ T7874] CPU: 0 UID: 0 PID: 7874 Comm: syz.5.1524 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 113.543580][ T7874] Tainted: [W]=WARN [ 113.547400][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.557478][ T7874] ==================================================================