last executing test programs: 1m45.224583096s ago: executing program 2 (id=2295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x9301}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 1m45.115625339s ago: executing program 2 (id=2300): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x1}}}}]}, 0x40}}, 0x20000000) 1m45.020192183s ago: executing program 2 (id=2301): setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m44.688710783s ago: executing program 2 (id=2313): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1m44.630812555s ago: executing program 2 (id=2316): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 1m44.581642426s ago: executing program 2 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x4e, &(0x7f0000002100)=ANY=[], 0x0) 1m43.786596012s ago: executing program 1 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x3}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r1, r0}, 0xc) 1m43.732191093s ago: executing program 1 (id=2351): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000540)={0x3, 0x10100001ffffff, 0x1, 0x6}) 1m43.460096522s ago: executing program 1 (id=2356): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000002c0)='./bus\x00', 0x3c9c9b, 0x0, 0x4, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x6, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd6, [0x1ff, 0x8]}, 0xad, 0xf1}}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1m43.373613235s ago: executing program 1 (id=2359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x0) 1m43.279301698s ago: executing program 1 (id=2360): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 1m43.2322689s ago: executing program 1 (id=2363): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x802) 1m29.197996137s ago: executing program 32 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0x4e, &(0x7f0000002100)=ANY=[], 0x0) 1m28.190950529s ago: executing program 33 (id=2363): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x802) 54.879466201s ago: executing program 6 (id=3396): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 54.346531818s ago: executing program 6 (id=3404): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13100}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 54.29460992s ago: executing program 6 (id=3408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x0, 0x10, 0xaf7, 0x2}, &(0x7f00000010c0)=0x18) 54.260270401s ago: executing program 4 (id=3411): r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}]}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) 54.247829911s ago: executing program 6 (id=3412): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r1, 0x8e7, 0x204}, 0x8) 54.205156052s ago: executing program 6 (id=3415): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 54.130115615s ago: executing program 6 (id=3419): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x1, 0x0, 0x0, "f01881a1debdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 54.100944416s ago: executing program 4 (id=3422): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x0, 0x10, 0xaf7, 0x2}, &(0x7f00000010c0)=0x18) 54.063474827s ago: executing program 4 (id=3424): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000a40)='mnt\x00', 0x80a, &(0x7f0000000a80), 0x3, 0x79b, &(0x7f0000001200)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000007c0)={0xd, 0x4, 0x6, 0x800}) 53.926513492s ago: executing program 4 (id=3428): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) r1 = epoll_create(0x3fc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x10002017}) 53.861718803s ago: executing program 4 (id=3429): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 53.824094415s ago: executing program 4 (id=3430): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpjquota}]}, 0xfe, 0x524, &(0x7f0000000e00)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 38.637809879s ago: executing program 34 (id=3419): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x1, 0x0, 0x0, "f01881a1debdfbff"}}, 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 38.59403359s ago: executing program 35 (id=3430): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpjquota}]}, 0xfe, 0x524, &(0x7f0000000e00)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.468987633s ago: executing program 8 (id=4643): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close(r0) 1.404551016s ago: executing program 8 (id=4646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc11008008000340"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.27814931s ago: executing program 8 (id=4652): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 822.335525ms ago: executing program 7 (id=4669): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x2) 797.075585ms ago: executing program 5 (id=4671): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x180, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x88) 777.728935ms ago: executing program 7 (id=4672): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) ioperm(0x0, 0x1, 0x1) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioperm(0x0, 0x40, 0x0) 733.946147ms ago: executing program 7 (id=4674): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r0, 0x1000000, 0x0) 733.053897ms ago: executing program 5 (id=4685): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 697.299498ms ago: executing program 5 (id=4677): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x2, 0xffffffa6, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 582.158602ms ago: executing program 7 (id=4679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x20044824) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 556.130953ms ago: executing program 7 (id=4680): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 514.724574ms ago: executing program 7 (id=4682): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffe, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000100)=0x4) 445.018376ms ago: executing program 3 (id=4683): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x2) 444.461046ms ago: executing program 0 (id=4695): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 412.038007ms ago: executing program 5 (id=4684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) 404.022268ms ago: executing program 0 (id=4686): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) ioperm(0x0, 0x1, 0x1) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioperm(0x0, 0x40, 0x0) 378.752809ms ago: executing program 8 (id=4687): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 365.670479ms ago: executing program 3 (id=4688): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a3409776d0a89"], 0xa) 353.060589ms ago: executing program 0 (id=4689): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) 304.931641ms ago: executing program 0 (id=4691): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r0, 0x1000000, 0x0) 304.800911ms ago: executing program 5 (id=4692): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x80000000000004, 0xffffffffffffffff}}) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000000)) 304.727491ms ago: executing program 3 (id=4693): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 218.882104ms ago: executing program 8 (id=4694): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@random={'security.', '&+$\xfc,\x00'}, &(0x7f00000000c0)='bsddf', 0x5, 0x0) 217.684144ms ago: executing program 3 (id=4705): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x180, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x88) 217.231714ms ago: executing program 5 (id=4696): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) 146.587856ms ago: executing program 3 (id=4697): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 133.729687ms ago: executing program 0 (id=4698): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) 109.629757ms ago: executing program 0 (id=4699): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 599.56µs ago: executing program 8 (id=4700): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=4711): unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040)) kernel console output (not intermixed with test programs): vc: denied { connect } for pid=10550 comm="syz.0.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.534352][ T28] audit: type=1400 audit(1780234050.749:16243): avc: denied { ioctl } for pid=10550 comm="syz.0.2825" path="socket:[27390]" dev="sockfs" ino=27390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.591732][ T28] audit: type=1400 audit(1780234050.749:16244): avc: denied { write } for pid=10550 comm="syz.0.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.612222][ T28] audit: type=1400 audit(1780234050.839:16245): avc: denied { write } for pid=10557 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.834404][ T28] audit: type=1400 audit(1780234051.149:16246): avc: denied { write } for pid=10568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.918229][ T28] audit: type=1400 audit(1780234051.239:16247): avc: denied { write } for pid=10585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.034511][T10591] loop5: detected capacity change from 0 to 8192 [ 175.290548][T10610] loop3: detected capacity change from 0 to 1024 [ 175.312284][T10610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.345094][ T28] audit: type=1400 audit(1780234051.659:16248): avc: denied { read } for pid=10609 comm="syz.3.2843" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 175.380208][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.399191][ T28] audit: type=1400 audit(1780234051.659:16249): avc: denied { write } for pid=10609 comm="syz.3.2843" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.616252][T10640] Falling back ldisc for ptm0. [ 175.771218][T10661] netlink: 'syz.6.2866': attribute type 4 has an invalid length. [ 175.779603][T10662] Falling back ldisc for ptm0. [ 175.969734][T10673] loop3: detected capacity change from 0 to 8192 [ 176.383509][T10706] __nla_validate_parse: 8 callbacks suppressed [ 176.383529][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 176.413826][T10709] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 176.496937][T10714] loop4: detected capacity change from 0 to 1024 [ 176.531248][T10714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.567167][ T4185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.622181][T10723] loop6: detected capacity change from 0 to 256 [ 176.638969][T10723] vfat: Unknown parameter '01777777777777777777777' [ 176.668557][T10725] loop4: detected capacity change from 0 to 512 [ 176.699569][T10725] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.718558][T10725] EXT4-fs (loop4): 1 truncate cleaned up [ 176.725645][T10725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.932028][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2904'. [ 176.960521][T10749] bond0: entered promiscuous mode [ 176.985528][T10749] bond_slave_0: entered promiscuous mode [ 176.997121][T10749] bond_slave_1: entered promiscuous mode [ 177.010852][T10757] loop5: detected capacity change from 0 to 256 [ 177.020484][T10749] bond0: left promiscuous mode [ 177.025017][T10757] vfat: Unknown parameter '01777777777777777777777' [ 177.036076][T10749] bond_slave_0: left promiscuous mode [ 177.051381][T10749] bond_slave_1: left promiscuous mode [ 177.270204][ T4185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.361870][T10759] loop0: detected capacity change from 0 to 32768 [ 177.415145][T10784] loop5: detected capacity change from 0 to 4096 [ 177.462058][T10784] loop5: detected capacity change from 0 to 512 [ 177.472494][T10784] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 177.620187][T10802] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 177.651667][T10802] EXT4-fs (loop6): 1 truncate cleaned up [ 177.659901][T10802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.874392][ T9274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.094474][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2935'. [ 178.103731][T10825] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 178.125410][T10824] EXT4-fs: Ignoring removed bh option [ 178.158444][T10824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.194058][T10835] EXT4-fs: Ignoring removed orlov option [ 178.201079][ T4185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.202868][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2942'. [ 178.222715][T10837] bond0: entered promiscuous mode [ 178.230539][T10837] bond_slave_0: entered promiscuous mode [ 178.238015][T10837] bond_slave_1: entered promiscuous mode [ 178.244489][T10835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.262070][T10837] bond0: left promiscuous mode [ 178.267061][T10837] bond_slave_0: left promiscuous mode [ 178.272628][T10837] bond_slave_1: left promiscuous mode [ 178.293209][ T9274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.470154][T10861] EXT4-fs: Ignoring removed bh option [ 178.489883][T10861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.523788][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.963777][T10908] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2984: inode has both inline data and extents flags [ 179.010928][T10913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c01c, mo2=0002] [ 179.039725][T10908] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.039936][T10908] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2984: couldn't read orphan inode 15 (err -117) [ 179.046868][T10913] System zones: [ 179.050083][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 179.071895][ C0] EXT4-fs (loop3): initial error at time 1780234055: ext4_orphan_get:1397: inode 15 [ 179.081522][ C0] EXT4-fs (loop3): last error at time 1780234055: ext4_orphan_get:1397: inode 15 [ 179.092514][T10908] loop3: lost filesystem error report for type 5 error -117 [ 179.093282][T10908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.097158][T10913] 0-1, 3-12 [ 179.144607][T10913] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.178501][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.223518][ T9274] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 179.250923][T10925] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2976'. [ 179.300672][T10929] EXT4-fs: Ignoring removed orlov option [ 179.308753][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2976'. [ 179.319737][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 179.361189][T10929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.406410][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 179.406473][ T28] audit: type=1400 audit(1780234055.719:16278): avc: denied { write } for pid=10928 comm="syz.4.2980" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.442294][ T3511] kernel write not supported for file bpf-prog (pid: 3511 comm: kworker/1:5) [ 179.482973][ T28] audit: type=1400 audit(1780234055.719:16279): avc: denied { write } for pid=10928 comm="syz.4.2980" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.517874][ T28] audit: type=1400 audit(1780234055.759:16280): avc: denied { write } for pid=10928 comm="syz.4.2980" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.542915][ T4185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.581206][T10945] netlink: 'syz.4.2987': attribute type 39 has an invalid length. [ 179.612101][T10948] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2999'. [ 179.641330][T10949] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2990: inode has both inline data and extents flags [ 179.657284][T10949] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.657495][T10949] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2990: couldn't read orphan inode 15 (err -117) [ 179.666714][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 179.666747][ C1] EXT4-fs (loop6): initial error at time 1780234055: ext4_orphan_get:1397: inode 15 [ 179.666788][ C1] EXT4-fs (loop6): last error at time 1780234055: ext4_orphan_get:1397: inode 15 [ 179.724881][T10959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.740541][T10949] loop6: lost filesystem error report for type 5 error -117 [ 179.741774][T10949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.764769][T10954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.778189][ T28] audit: type=1400 audit(1780234056.099:16281): avc: denied { write } for pid=10946 comm="syz.6.2990" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.786462][T10959] EXT4-fs (loop4): 1 truncate cleaned up [ 179.814803][ T28] audit: type=1400 audit(1780234056.129:16282): avc: denied { write } for pid=10953 comm="syz.0.2991" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.825283][T10959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.851657][ T9274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.863599][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.873592][ T28] audit: type=1400 audit(1780234056.189:16283): avc: denied { write } for pid=10958 comm="syz.4.2992" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.914592][ T4185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.006241][T10970] EXT4-fs: Ignoring removed orlov option [ 180.040417][T10970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.064386][ T28] audit: type=1400 audit(1780234056.379:16284): avc: denied { write } for pid=10969 comm="syz.0.2998" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.114897][ T28] audit: type=1400 audit(1780234056.379:16285): avc: denied { write } for pid=10969 comm="syz.0.2998" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.137476][ T28] audit: type=1400 audit(1780234056.379:16286): avc: denied { write } for pid=10969 comm="syz.0.2998" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.167949][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.310480][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3004'. [ 180.337486][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3004'. [ 180.374451][ T28] audit: type=1400 audit(1780234056.689:16287): avc: denied { connect } for pid=10987 comm="syz.4.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.576074][T11004] set_capacity_and_notify: 12 callbacks suppressed [ 180.576090][T11004] loop4: detected capacity change from 0 to 2048 [ 180.622902][T11004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.635646][T11004] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.719137][T11023] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3014: bg 0: block 345: padding at end of block bitmap is not set [ 180.741274][T11023] EXT4-fs (loop4): Remounting filesystem read-only [ 180.751092][ T36] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 180.878429][ T4185] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.048804][T11055] loop3: detected capacity change from 0 to 2048 [ 181.066957][T11055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.079621][T11055] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.152414][T11060] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3038: bg 0: block 345: padding at end of block bitmap is not set [ 181.167382][T11060] EXT4-fs (loop3): Remounting filesystem read-only [ 181.174209][ T36] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 181.248150][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.498943][T11089] loop0: detected capacity change from 0 to 2048 [ 181.540933][T11089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.566305][T11089] ext4 filesystem being mounted at /619/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.704987][T11107] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3051: bg 0: block 345: padding at end of block bitmap is not set [ 181.723738][T11114] __nla_validate_parse: 4 callbacks suppressed [ 181.723758][T11114] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3061'. [ 181.739722][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3061'. [ 181.760696][T11107] EXT4-fs (loop0): Remounting filesystem read-only [ 181.773216][ T36] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 181.805056][T11116] tap0: tun_chr_ioctl cmd 1074025677 [ 181.830637][T11116] tap0: linktype set to 257 [ 181.878145][T11123] bridge0: port 3(batadv1) entered blocking state [ 181.896005][T11123] bridge0: port 3(batadv1) entered disabled state [ 181.902674][T11123] batadv1: entered allmulticast mode [ 181.914754][T11123] batadv1: entered promiscuous mode [ 181.945517][T11134] loop4: detected capacity change from 0 to 512 [ 181.959890][ T9250] udevd[9250]: incorrect ext4 checksum on /dev/loop4 [ 181.977262][T11134] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 181.986881][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.009258][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3077'. [ 182.022099][T11138] netlink: 'syz.5.3077': attribute type 1 has an invalid length. [ 182.205973][T11154] loop5: detected capacity change from 0 to 4096 [ 182.228483][T11154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.294453][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.340190][T11168] bridge0: port 3(batadv1) entered blocking state [ 182.347158][T11168] bridge0: port 3(batadv1) entered disabled state [ 182.353852][T11168] batadv1: entered allmulticast mode [ 182.360109][T11168] batadv1: entered promiscuous mode [ 182.366293][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 182.376044][ T54] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 182.385296][ T54] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 182.411083][T11171] loop5: detected capacity change from 0 to 2048 [ 182.429763][T11171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.442491][T11171] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.477961][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3090'. [ 182.488929][T11136] Set syz1 is full, maxelem 65536 reached [ 182.499795][T11175] netlink: 'syz.0.3090': attribute type 1 has an invalid length. [ 182.534832][T11177] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3087: bg 0: block 345: padding at end of block bitmap is not set [ 182.565715][T11177] EXT4-fs (loop5): Remounting filesystem read-only [ 182.574312][ T54] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 182.717626][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.836544][ T54] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 182.845856][ T54] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 182.904873][T11214] netlink: 'syz.6.3108': attribute type 21 has an invalid length. [ 182.922809][T11214] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3108'. [ 183.042221][T11220] loop6: detected capacity change from 0 to 2048 [ 183.070914][T11220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.094439][T11220] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.223760][T11238] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3109: bg 0: block 345: padding at end of block bitmap is not set [ 183.246273][T11237] loop0: detected capacity change from 0 to 2048 [ 183.272962][T11238] EXT4-fs (loop6): Remounting filesystem read-only [ 183.295016][ T36] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 183.295757][T11220] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #15: comm syz.6.3109: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 183.295757][T11220] [ 183.377495][T11237] loop0: p3 < > p4 < > [ 183.388267][T11237] loop0: partition table partially beyond EOD, truncated [ 183.412194][T11237] loop0: p3 start 4284289 is beyond EOD, truncated [ 183.463518][T11250] loop3: detected capacity change from 0 to 4096 [ 183.492974][T11250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.600525][ T9274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.615333][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.644933][T11262] loop0: detected capacity change from 0 to 2048 [ 183.717151][T11262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 183.740173][T11262] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.3139: inline data xattr refers to an external xattr inode [ 183.762825][T11262] EXT4-fs (loop0): Remounting filesystem read-only [ 184.111759][T11312] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3152'. [ 184.417359][T11344] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.433337][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 184.433355][ T28] audit: type=1400 audit(2000000000.490:16308): avc: denied { write } for pid=11343 comm="syz.3.3167" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.491017][T11349] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3167: bg 0: block 345: padding at end of block bitmap is not set [ 184.539586][T11349] EXT4-fs (loop3): Remounting filesystem read-only [ 184.575775][ T54] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 184.713576][ T28] audit: type=1400 audit(2000000000.770:16309): avc: denied { cpu } for pid=11368 comm="syz.5.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 184.752199][T11365] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.812559][ T28] audit: type=1400 audit(2000000000.020:16310): avc: denied { write } for pid=11364 comm="syz.6.3174" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.838075][ T28] audit: type=1400 audit(2000000000.020:16311): avc: denied { ioctl } for pid=11364 comm="syz.6.3174" path="/170/file1/file1" dev="loop6" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.863189][ T28] audit: type=1400 audit(2000000000.030:16312): avc: denied { getopt } for pid=11376 comm="syz.3.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.883271][ T28] audit: type=1400 audit(2000000000.030:16313): avc: denied { ioctl } for pid=11376 comm="syz.3.3180" path="socket:[30928]" dev="sockfs" ino=30928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.909146][ T30] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 184.923406][ T30] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 184.935867][ T30] EXT4-fs (loop6): This should not happen!! Data will be lost [ 184.935867][ T30] [ 184.946020][ T9274] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 185.120200][T11395] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.183585][ T28] audit: type=1400 audit(2000000000.400:16314): avc: denied { write } for pid=11394 comm="syz.6.3187" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.189018][T11408] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3195'. [ 185.216378][ T28] audit: type=1326 audit(2000000000.440:16315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.4.3168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34a5a2ce59 code=0x7fc00000 [ 185.272791][T11410] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3187: bg 0: block 345: padding at end of block bitmap is not set [ 185.297617][ T28] audit: type=1400 audit(2000000000.520:16316): avc: denied { write } for pid=11406 comm="syz.0.3193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.321640][T11410] EXT4-fs (loop6): Remounting filesystem read-only [ 185.329974][ T12] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 185.439226][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3199'. [ 185.551767][T11426] EXT4-fs (loop6): shut down requested (0) [ 185.558152][ T28] audit: type=1400 audit(2000000000.770:16317): avc: denied { write } for pid=11425 comm="syz.6.3201" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.630741][T11438] syz.6.3206 uses obsolete (PF_INET,SOCK_PACKET) [ 185.640587][T11440] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3207'. [ 185.752866][T11448] set_capacity_and_notify: 5 callbacks suppressed [ 185.752885][T11448] loop6: detected capacity change from 0 to 2048 [ 185.821702][T11458] batman_adv: batadv0: Adding interface: macvtap1 [ 185.830317][T11460] loop3: detected capacity change from 0 to 1024 [ 185.837263][T11458] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.840047][T11460] EXT4-fs: Ignoring removed orlov option [ 185.920683][T11458] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 185.976470][T11468] loop0: detected capacity change from 0 to 512 [ 185.995157][T11468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.017888][T11472] dummy0: entered allmulticast mode [ 186.038396][T11468] EXT4-fs (loop0): 1 truncate cleaned up [ 186.046618][T11472] dummy0: left allmulticast mode [ 186.189724][T11483] loop4: detected capacity change from 0 to 128 [ 186.299688][T11489] IPv6: NLM_F_REPLACE set, but no existing node found! [ 186.370621][T11495] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.428158][T11497] loop3: detected capacity change from 0 to 2048 [ 186.482948][T11497] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.535227][T11506] loop4: detected capacity change from 0 to 764 [ 186.588982][T11513] loop5: detected capacity change from 0 to 512 [ 186.622074][T11514] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3232: bg 0: block 345: padding at end of block bitmap is not set [ 186.680450][T11514] EXT4-fs (loop3): Remounting filesystem read-only [ 186.714099][ T36] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 187.065357][T11563] __nla_validate_parse: 4 callbacks suppressed [ 187.065377][T11563] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3260'. [ 187.288947][T11576] loop5: detected capacity change from 0 to 1024 [ 187.303570][T11576] EXT4-fs: Ignoring removed orlov option [ 187.341402][T11583] loop0: detected capacity change from 0 to 1024 [ 187.384851][T11583] EXT4-fs (loop0): shut down requested (0) [ 187.532723][T11602] loop5: detected capacity change from 0 to 512 [ 187.573206][T11602] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.588671][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'. [ 187.602122][T11602] EXT4-fs (loop5): 1 truncate cleaned up [ 187.954098][T11636] FAT-fs (loop5): Directory bread(block 64) failed [ 187.969237][T11636] FAT-fs (loop5): Directory bread(block 65) failed [ 187.991571][T11636] FAT-fs (loop5): Directory bread(block 66) failed [ 188.016593][T11636] FAT-fs (loop5): Directory bread(block 67) failed [ 188.037129][T11636] FAT-fs (loop5): Directory bread(block 68) failed [ 188.055925][T11636] FAT-fs (loop5): Directory bread(block 69) failed [ 188.064557][T11636] FAT-fs (loop5): Directory bread(block 70) failed [ 188.071618][T11636] FAT-fs (loop5): Directory bread(block 71) failed [ 188.084234][T11636] FAT-fs (loop5): Directory bread(block 72) failed [ 188.091637][T11636] FAT-fs (loop5): Directory bread(block 73) failed [ 188.148867][T11636] syz.5.3285: attempt to access beyond end of device [ 188.148867][T11636] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 188.169499][T11636] syz.5.3285: attempt to access beyond end of device [ 188.169499][T11636] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 188.933065][T11665] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.969387][T11664] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.019096][T11664] EXT4-fs (loop3): 1 truncate cleaned up [ 189.413723][T11716] autofs4:pid:11716:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189373) [ 189.442973][T11716] autofs4:pid:11716:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 189.577579][T11738] netlink: 'syz.6.3335': attribute type 30 has an invalid length. [ 189.598217][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 189.598300][ T28] audit: type=1400 audit(2000000004.820:16363): avc: denied { write } for pid=11730 comm="syz.0.3332" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.665398][T11740] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.676840][ T28] audit: type=1400 audit(2000000004.850:16364): avc: denied { ioctl } for pid=11730 comm="syz.0.3332" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 189.710179][T11740] EXT4-fs (loop3): 1 truncate cleaned up [ 189.746661][ T28] audit: type=1400 audit(2000000004.960:16365): avc: denied { write } for pid=11739 comm="syz.3.3336" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.937727][ T28] audit: type=1326 audit(2000000005.160:16366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11749 comm="syz.6.3340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c6402ce59 code=0x0 [ 190.066964][T11775] program syz.5.3352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.121968][T11784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.148363][T11784] EXT4-fs (loop5): 1 truncate cleaned up [ 190.166310][ T28] audit: type=1400 audit(2000000005.390:16367): avc: denied { write } for pid=11783 comm="syz.5.3356" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.188552][ T28] audit: type=1400 audit(2000000005.390:16368): avc: denied { write } for pid=11783 comm="syz.5.3356" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.211290][ T28] audit: type=1400 audit(2000000005.390:16369): avc: denied { add_name } for pid=11783 comm="syz.5.3356" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.236708][ T28] audit: type=1400 audit(2000000005.390:16370): avc: denied { write } for pid=11783 comm="syz.5.3356" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.262961][ T28] audit: type=1400 audit(2000000005.390:16371): avc: denied { remove_name } for pid=11783 comm="syz.5.3356" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.295767][ T28] audit: type=1400 audit(2000000005.390:16372): avc: denied { rmdir } for pid=11783 comm="syz.5.3356" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.382669][T11796] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.433149][T11796] EXT4-fs (loop5): 1 truncate cleaned up [ 190.446317][T11801] autofs4:pid:11801:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189373) [ 190.475796][T11801] autofs4:pid:11801:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189373) [ 191.042312][T11838] set_capacity_and_notify: 8 callbacks suppressed [ 191.042362][T11838] loop6: detected capacity change from 0 to 1024 [ 191.089799][T11838] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.140385][T11838] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.3378: lblock 0 mapped to illegal pblock 0 (length 5) [ 191.168075][T11844] loop0: detected capacity change from 0 to 2048 [ 191.177471][T11838] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 191.201568][T11844] ext4 filesystem being mounted at /691/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.235027][T11838] EXT4-fs (loop6): This should not happen!! Data will be lost [ 191.235027][T11838] [ 191.337191][T11862] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3381: bg 0: block 345: padding at end of block bitmap is not set [ 191.355358][ T9274] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 191.412625][T11862] EXT4-fs (loop0): Remounting filesystem read-only [ 191.426748][ T54] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 191.495165][T11883] loop3: detected capacity change from 0 to 256 [ 191.676131][T11889] loop3: detected capacity change from 0 to 1024 [ 191.687547][T11891] loop4: detected capacity change from 0 to 512 [ 191.712231][T11889] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.732363][T11896] GUP no longer grows the stack in syz.0.3402 (11896): 200000009000-20000000a000 (200000005000) [ 191.743443][T11896] CPU: 1 UID: 0 PID: 11896 Comm: syz.0.3402 Not tainted syzkaller #0 PREEMPT(lazy) [ 191.743477][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.743568][T11896] Call Trace: [ 191.743579][T11896] [ 191.743589][T11896] __dump_stack+0x1d/0x30 [ 191.743619][T11896] dump_stack_lvl+0x95/0xd0 [ 191.743646][T11896] dump_stack+0x15/0x1b [ 191.743670][T11896] __get_user_pages+0x1b26/0x1f10 [ 191.743763][T11896] ? percpu_counter_add_batch+0xb6/0x130 [ 191.743807][T11896] ? __mt_destroy+0xce/0xe0 [ 191.743853][T11896] __gup_longterm_locked+0x8d7/0xe30 [ 191.743949][T11896] ? __rcu_read_lock+0x36/0x50 [ 191.743969][T11896] ? try_grab_folio_fast+0x208/0x5a0 [ 191.744078][T11896] ? __pte_offset_map+0xef/0x150 [ 191.744106][T11896] gup_fast_fallback+0x1f2/0x1410 [ 191.744149][T11896] get_user_pages_fast+0x5f/0x90 [ 191.744195][T11896] __iov_iter_get_pages_alloc+0x24c/0x640 [ 191.744234][T11896] iov_iter_get_pages2+0x5e/0xa0 [ 191.744261][T11896] __se_sys_vmsplice+0x50b/0x1050 [ 191.744309][T11896] __x64_sys_vmsplice+0x55/0x70 [ 191.744365][T11896] x64_sys_call+0x28e9/0x3020 [ 191.744396][T11896] do_syscall_64+0x12c/0x3b0 [ 191.744433][T11896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.744454][T11896] RIP: 0033:0x7f11aac1ce59 [ 191.744507][T11896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.744530][T11896] RSP: 002b:00007f11a966f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 191.744556][T11896] RAX: ffffffffffffffda RBX: 00007f11aae95fa0 RCX: 00007f11aac1ce59 [ 191.744574][T11896] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 191.744591][T11896] RBP: 00007f11aacb2d6f R08: 0000000000000000 R09: 0000000000000000 [ 191.744636][T11896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.744648][T11896] R13: 00007f11aae96038 R14: 00007f11aae95fa0 R15: 00007ffe41a3a948 [ 191.744667][T11896] [ 191.952679][T11889] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.3400: lblock 0 mapped to illegal pblock 0 (length 5) [ 191.966944][T11891] ext4 filesystem being mounted at /626/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.002104][T11889] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 192.021628][T11889] EXT4-fs (loop3): This should not happen!! Data will be lost [ 192.021628][T11889] [ 192.072562][ T5670] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 192.342947][T11941] loop4: detected capacity change from 0 to 2048 [ 192.389793][T11941] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.3424: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 192.799616][T11974] loop0: detected capacity change from 0 to 512 [ 192.819639][T11974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.831270][T11974] EXT4-fs (loop0): 1 truncate cleaned up [ 192.937147][T11977] usb usb8: usbfs: process 11977 (syz.0.3439) did not claim interface 2 before use [ 193.006851][T11981] loop0: detected capacity change from 0 to 512 [ 193.024410][T11981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.040530][T11981] EXT4-fs (loop0): 1 truncate cleaned up [ 193.061251][T11981] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #15: comm syz.0.3441: corrupted xattr block 33: invalid header [ 193.103277][T11981] EXT4-fs (loop0): Remounting filesystem read-only [ 193.458626][T11996] program syz.0.3457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.648910][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3452'. [ 193.700805][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3454'. [ 193.724208][T12011] bridge_slave_1: left allmulticast mode [ 193.745312][T12011] bridge_slave_1: left promiscuous mode [ 193.752231][T12011] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.773358][T12011] bridge_slave_0: left allmulticast mode [ 193.789008][T12011] bridge_slave_0: left promiscuous mode [ 193.805968][T12011] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.038607][T12030] loop3: detected capacity change from 0 to 512 [ 194.079650][T12030] EXT4-fs mount: 49 callbacks suppressed [ 194.079669][T12030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.131759][T12030] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.219381][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.576866][T12046] loop3: detected capacity change from 0 to 512 [ 194.614623][T12046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.669689][T12046] EXT4-fs (loop3): 1 truncate cleaned up [ 194.676881][T12046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.692601][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 194.692623][ T28] audit: type=1400 audit(2000000009.910:16386): avc: denied { write } for pid=12045 comm="syz.3.3470" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.782066][T12040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.813251][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.002429][T12062] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.010318][ T28] audit: type=1400 audit(2000000010.220:16387): avc: denied { write } for pid=12058 comm="syz.0.3474" path="socket:[33007]" dev="sockfs" ino=33007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.088263][ T28] audit: type=1400 audit(2000000010.280:16388): avc: denied { ioctl } for pid=12063 comm="syz.3.3476" path="socket:[32332]" dev="sockfs" ino=32332 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.599165][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3480'. [ 196.232027][T12084] loop3: detected capacity change from 0 to 128 [ 196.554679][T12093] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.810195][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3493'. [ 196.905798][ T28] audit: type=1400 audit(2000000012.120:16389): avc: denied { read } for pid=12101 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.035157][T12110] loop5: detected capacity change from 0 to 512 [ 197.050666][T12110] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.082380][T12110] EXT4-fs (loop5): 1 truncate cleaned up [ 197.088586][T12110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.104558][ T28] audit: type=1400 audit(2000000012.320:16390): avc: denied { write } for pid=12109 comm="syz.5.3496" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.175777][ T12] batman_adv: batadv1: IGMP Querier appeared [ 197.181829][ T12] batman_adv: batadv1: MLD Querier appeared [ 197.258772][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.353429][T12117] loop0: detected capacity change from 0 to 128 [ 207.916768][ T12] bridge_slave_1: left allmulticast mode [ 207.922504][ T12] bridge_slave_1: left promiscuous mode [ 207.929135][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.940388][ T12] bridge_slave_0: left allmulticast mode [ 207.946484][ T12] bridge_slave_0: left promiscuous mode [ 207.952234][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.067933][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.077929][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.087743][ T12] bond0 (unregistering): Released all slaves [ 208.131142][ T12] IPVS: stopping backup sync thread 10825 ... [ 208.140135][ T12] hsr_slave_0: left promiscuous mode [ 208.146472][ T12] hsr_slave_1: left promiscuous mode [ 208.152274][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.159765][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.167705][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.175382][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.183364][ T12] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 208.190612][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 208.201930][ T12] veth1_macvtap: left promiscuous mode [ 208.207845][ T12] veth0_macvtap: left promiscuous mode [ 208.213726][ T12] veth1_vlan: left promiscuous mode [ 208.219321][ T12] veth0_vlan: left promiscuous mode [ 208.652560][T12181] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3519'. [ 209.093766][T12184] loop5: detected capacity change from 0 to 512 [ 209.103659][T12184] ext4: Unknown parameter 'pcr' [ 209.111935][T12184] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3521'. [ 209.208596][T12195] loop3: detected capacity change from 0 to 512 [ 209.216787][ T12] team0 (unregistering): Port device team_slave_1 removed [ 209.228550][T12195] EXT4-fs: Ignoring removed oldalloc option [ 209.235043][T12195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.246167][ T12] team0 (unregistering): Port device team_slave_0 removed [ 209.254214][T12195] EXT4-fs (loop3): 1 truncate cleaned up [ 209.263709][T12195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.360135][ T28] audit: type=1400 audit(2000000024.580:16391): avc: denied { getopt } for pid=12203 comm="syz.0.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.396038][T12209] loop0: detected capacity change from 0 to 128 [ 209.408448][T12209] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.422865][T12209] ext4 filesystem being mounted at /736/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.464146][ T28] audit: type=1400 audit(2000000024.680:16392): avc: denied { write } for pid=12208 comm="syz.0.3533" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.498535][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.524862][ T28] audit: type=1400 audit(2000000024.740:16393): avc: denied { accept } for pid=12217 comm="syz.5.3536" path="socket:[32667]" dev="sockfs" ino=32667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.701611][T12150] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.708961][T12150] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.720107][T12150] bridge_slave_0: entered allmulticast mode [ 209.732944][T12150] bridge_slave_0: entered promiscuous mode [ 209.755954][T12150] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.765306][T12150] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.777991][T12150] bridge_slave_1: entered allmulticast mode [ 209.789770][T12150] bridge_slave_1: entered promiscuous mode [ 209.823305][T12239] loop5: detected capacity change from 0 to 512 [ 209.824314][T12154] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.831243][T12239] EXT4-fs: Ignoring removed oldalloc option [ 209.851053][T12239] EXT4-fs (loop5): filesystem is read-only [ 209.858266][T12154] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.858293][T12239] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 209.876913][T12154] bridge_slave_0: entered allmulticast mode [ 209.883855][T12154] bridge_slave_0: entered promiscuous mode [ 209.889965][T12239] EXT4-fs (loop5): filesystem is read-only [ 209.896068][T12239] EXT4-fs (loop5): orphan cleanup on readonly fs [ 209.903458][T12154] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.910958][T12154] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.910993][T12239] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3540: bg 0: block 64: padding at end of block bitmap is not set [ 209.918693][T12154] bridge_slave_1: entered allmulticast mode [ 209.937930][T12239] loop5: lost filesystem error report for type 5 error -117 [ 209.938471][T12239] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 209.939710][T12154] bridge_slave_1: entered promiscuous mode [ 209.945847][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 209.945866][ C0] EXT4-fs (loop5): initial error at time 2000000025: ext4_validate_block_bitmap:441 [ 209.976298][ C0] EXT4-fs (loop5): last error at time 2000000025: ext4_validate_block_bitmap:441 [ 209.987512][T12239] loop5: lost filesystem error report for type 5 error -117 [ 209.987814][T12239] EXT4-fs (loop5): 1 orphan inode deleted [ 210.001832][T12239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.014938][T12239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.047254][T12150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.058502][T12154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.069451][T12150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.079676][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.083099][T12154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.136564][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3543'. [ 210.152761][T12150] team0: Port device team_slave_0 added [ 210.160472][T12150] team0: Port device team_slave_1 added [ 210.174435][T12246] team0: Port device team_slave_0 removed [ 210.186010][T12154] team0: Port device team_slave_0 added [ 210.193185][T12154] team0: Port device team_slave_1 added [ 210.258278][T12150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.266650][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.299233][T12150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.310759][T12154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.318181][T12154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.345354][T12154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.381637][T12154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.389292][T12154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.426543][T12154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.443912][T12150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.451737][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.479802][T12150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.509867][T12275] loop0: detected capacity change from 0 to 128 [ 210.573736][T12154] hsr_slave_0: entered promiscuous mode [ 210.580071][T12154] hsr_slave_1: entered promiscuous mode [ 210.592991][T12150] hsr_slave_0: entered promiscuous mode [ 210.600128][T12150] hsr_slave_1: entered promiscuous mode [ 210.606449][T12150] debugfs: 'hsr0' already exists in 'hsr' [ 210.612344][T12150] Cannot create hsr debugfs directory [ 210.663669][T12289] loop0: detected capacity change from 0 to 164 [ 210.688470][T12292] loop3: detected capacity change from 0 to 128 [ 210.712149][T12292] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.729008][T12292] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.739862][ T12] batadv1: left allmulticast mode [ 210.761401][ T12] batadv1: left promiscuous mode [ 210.766923][ T12] bridge0: port 3(batadv1) entered disabled state [ 210.767729][ T5670] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.793914][ T12] bridge_slave_1: left promiscuous mode [ 210.811624][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.819690][ T12] bridge_slave_0: left allmulticast mode [ 210.825465][ T12] bridge_slave_0: left promiscuous mode [ 210.831293][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.855648][ T12] batman_adv: batadv0: Removing interface: macvtap1 [ 210.908711][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.919347][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.930004][ T12] bond0 (unregistering): Released all slaves [ 210.938034][ T12] bond1 (unregistering): Released all slaves [ 210.988357][ T12] IPVS: stopping backup sync thread 10709 ... [ 211.016956][ T12] hsr_slave_0: left promiscuous mode [ 211.024133][ T12] hsr_slave_1: left promiscuous mode [ 211.035926][ T54] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 211.037887][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.053710][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.083631][ T28] audit: type=1400 audit(2000000026.300:16394): avc: denied { create } for pid=12307 comm="syz.0.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 211.123589][ T28] audit: type=1400 audit(2000000026.300:16395): avc: denied { write } for pid=12307 comm="syz.0.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 211.161263][ T12] team0 (unregistering): Port device team_slave_1 removed [ 211.194126][ T28] audit: type=1400 audit(2000000026.410:16396): avc: denied { write } for pid=12301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.221304][ T12] team0 (unregistering): Port device team_slave_0 removed [ 211.242162][ T28] audit: type=1400 audit(2000000026.460:16397): avc: denied { write } for pid=12321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.299775][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3571'. [ 211.337304][ T3025] 8021q: adding VLAN 0 to HW filter on device eth13 [ 211.464011][T12154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.497284][T12154] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.530572][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.531056][ T28] audit: type=1400 audit(2000000026.750:16398): avc: denied { listen } for pid=12362 comm="syz.5.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.537799][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.595942][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.603060][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.625018][ T28] audit: type=1400 audit(2000000026.840:16399): avc: denied { name_connect } for pid=12369 comm="syz.0.3584" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 211.663983][T12150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.699189][ T28] audit: type=1400 audit(2000000026.920:16400): avc: denied { write } for pid=12352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.737973][T12150] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.765224][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.772445][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.795838][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.803064][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.821686][ T12] IPVS: stop unused estimator thread 0... [ 211.855334][ T3025] 8021q: adding VLAN 0 to HW filter on device eth14 [ 211.884282][T12374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.907576][T12374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.024977][T12154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.162661][T12150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.212995][ T3025] 8021q: adding VLAN 0 to HW filter on device eth15 [ 212.301022][T12154] veth0_vlan: entered promiscuous mode [ 212.331316][T12154] veth1_vlan: entered promiscuous mode [ 212.376901][T12154] veth0_macvtap: entered promiscuous mode [ 212.397305][T12154] veth1_macvtap: entered promiscuous mode [ 212.428665][T12154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.472212][T12154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.567541][T12150] veth0_vlan: entered promiscuous mode [ 212.589935][ T3025] 8021q: adding VLAN 0 to HW filter on device eth16 [ 212.626418][T12150] veth1_vlan: entered promiscuous mode [ 212.678509][T12150] veth0_macvtap: entered promiscuous mode [ 212.705573][T12150] veth1_macvtap: entered promiscuous mode [ 212.747137][T12150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.755127][T12489] loop0: detected capacity change from 0 to 512 [ 212.771159][T12150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.784975][T12489] EXT4-fs: Ignoring removed oldalloc option [ 212.794599][T12489] EXT4-fs (loop0): filesystem is read-only [ 212.801132][T12489] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 212.821282][T12489] EXT4-fs (loop0): filesystem is read-only [ 212.828342][T12489] EXT4-fs (loop0): orphan cleanup on readonly fs [ 212.835046][T12489] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3600: bg 0: block 64: padding at end of block bitmap is not set [ 212.851974][T12489] loop0: lost filesystem error report for type 5 error -117 [ 212.852216][T12489] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 212.859585][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 212.859603][ C0] EXT4-fs (loop0): initial error at time 2000000028: ext4_validate_block_bitmap:441 [ 212.859636][ C0] EXT4-fs (loop0): last error at time 2000000028: ext4_validate_block_bitmap:441 [ 212.897765][T12489] loop0: lost filesystem error report for type 5 error -117 [ 212.899139][T12489] EXT4-fs (loop0): 1 orphan inode deleted [ 212.923080][T12489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.946384][T12489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.946816][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.985880][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.997550][T12498] loop7: detected capacity change from 0 to 512 [ 213.008893][T12498] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 213.042135][T12498] EXT4-fs (loop7): 1 truncate cleaned up [ 213.048360][T12502] netlink: 'syz.0.3603': attribute type 39 has an invalid length. [ 213.064469][T12498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.149058][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.310047][T12532] sd 0:0:1:0: device reset [ 213.970262][T12576] loop7: detected capacity change from 0 to 512 [ 213.978131][T12576] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.3633: corrupted in-inode xattr: invalid ea_ino [ 213.991883][T12576] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.992089][T12576] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3633: couldn't read orphan inode 15 (err -117) [ 214.001328][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 214.001354][ C0] EXT4-fs (loop7): initial error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 214.001400][ C0] EXT4-fs (loop7): last error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 214.039885][T12576] loop7: lost filesystem error report for type 5 error -117 [ 214.040567][T12576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.277583][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.442270][T12592] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3640'. [ 214.605635][T12612] tun0: tun_chr_ioctl cmd 1074025677 [ 214.613563][T12612] tun0: linktype set to 270 [ 215.241004][T12623] loop8: detected capacity change from 0 to 512 [ 215.259373][T12623] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 215.281158][T12623] EXT4-fs (loop8): 1 truncate cleaned up [ 215.296202][T12623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.341902][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 215.341918][ T28] audit: type=1400 audit(2000000030.560:16409): avc: denied { write } for pid=12622 comm="syz.8.3651" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.417662][T12642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3660'. [ 215.451517][T12649] xt_hashlimit: size too large, truncated to 1048576 [ 215.534043][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.130848][ T28] audit: type=1400 audit(2000000543.348:16410): avc: denied { read write } for pid=12726 comm="syz.3.3701" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 216.164413][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 216.203408][ T3382] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.228706][ T28] audit: type=1400 audit(2000000543.348:16411): avc: denied { open } for pid=12726 comm="syz.3.3701" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 216.287678][ T28] audit: type=1400 audit(2000000543.438:16412): avc: denied { mount } for pid=12734 comm="syz.8.3704" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 216.402576][T12750] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3711'. [ 216.801889][T12769] loop0: detected capacity change from 0 to 512 [ 216.817702][T12769] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.830944][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3730'. [ 216.846497][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3730'. [ 216.857103][T12769] EXT4-fs (loop0): 1 truncate cleaned up [ 216.863261][T12769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.895066][ T28] audit: type=1400 audit(2000000544.108:16413): avc: denied { write } for pid=12768 comm="syz.0.3718" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.956622][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.011915][T12782] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3721'. [ 217.028619][T12783] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3724'. [ 217.039038][T12787] loop3: detected capacity change from 0 to 512 [ 217.067669][T12787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.086943][T12787] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.118822][ T28] audit: type=1400 audit(2000000544.328:16414): avc: denied { write } for pid=12786 comm="syz.3.3727" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.203502][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.320669][T12818] loop3: detected capacity change from 0 to 1024 [ 217.349872][T12818] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 217.372016][T12818] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 217.382303][T12818] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3742: Failed to acquire dquot type 0 [ 217.394307][T12818] loop3: lost filesystem error report for type 5 error -117 [ 217.395671][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 217.409467][ C0] EXT4-fs (loop3): initial error at time 2000000544: ext4_acquire_dquot:7034 [ 217.418140][T12818] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 160: [ 217.418294][ C0] EXT4-fs (loop3): last error at time 2000000544: ext4_acquire_dquot:7034 [ 217.436369][T12818] freeing already freed block (bit 10); block bitmap corrupt. [ 217.459423][T12818] EXT4-fs (loop3): 1 truncate cleaned up [ 217.471370][T12818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.498824][ T28] audit: type=1326 audit(2000000544.708:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.3.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba08ce59 code=0x7ffc0000 [ 217.568221][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.573037][ T28] audit: type=1326 audit(2000000544.708:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.3.3742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cba08ce59 code=0x7ffc0000 [ 217.619820][T12844] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3755'. [ 217.708992][T12857] loop3: detected capacity change from 0 to 512 [ 217.743522][T12857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 217.763660][T12857] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.555004][T12867] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 218.608232][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 218.671822][T12883] netlink: 'syz.0.3771': attribute type 60 has an invalid length. [ 218.728447][T12888] loop7: detected capacity change from 0 to 256 [ 218.742135][T12894] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3776'. [ 218.833132][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3780'. [ 218.862535][T12909] program syz.7.3783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.097931][T12940] program syz.0.3799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.354456][T12976] loop8: detected capacity change from 0 to 256 [ 219.532005][T12983] SELinux: failed to load policy [ 219.598776][T12990] __nla_validate_parse: 1 callbacks suppressed [ 219.598792][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3823'. [ 219.699367][T12998] loop7: detected capacity change from 0 to 512 [ 219.728622][T12998] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.3826: corrupted in-inode xattr: invalid ea_ino [ 219.750701][T12998] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.752118][T12998] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3826: couldn't read orphan inode 15 (err -117) [ 219.761489][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 219.761513][ C1] EXT4-fs (loop7): initial error at time 2000000546: ext4_iget_extra_inode:5128: inode 15 [ 219.761546][ C1] EXT4-fs (loop7): last error at time 2000000546: ext4_iget_extra_inode:5128: inode 15 [ 219.799996][T12998] loop7: lost filesystem error report for type 5 error -117 [ 219.801814][T12998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.839388][T13003] loop5: detected capacity change from 0 to 164 [ 219.884483][T13003] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 219.902663][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.934144][T13003] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 220.126820][T13021] netlink: 'syz.0.3837': attribute type 12 has an invalid length. [ 220.134930][T13021] netlink: 'syz.0.3837': attribute type 29 has an invalid length. [ 220.152378][T13021] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3837'. [ 220.162506][T13021] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 220.176507][T13023] netlink: 'syz.7.3839': attribute type 15 has an invalid length. [ 220.188264][T13021] netlink: 'syz.0.3837': attribute type 2 has an invalid length. [ 220.196226][T13023] netlink: 'syz.7.3839': attribute type 15 has an invalid length. [ 220.210597][T13021] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3837'. [ 220.348906][T13043] loop8: detected capacity change from 0 to 1024 [ 220.379443][T13052] loop0: detected capacity change from 0 to 256 [ 220.390976][T13043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.412126][T13043] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.425054][T13052] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 220.477132][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 220.477239][ T28] audit: type=1400 audit(2000000547.698:16429): avc: denied { write } for pid=13041 comm="syz.8.3847" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.513679][T13043] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.3847: lblock 3 mapped to illegal pblock 3 (length 3) [ 220.566291][T13043] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 220.598653][T13043] EXT4-fs (loop8): This should not happen!! Data will be lost [ 220.598653][T13043] [ 220.635445][ T54] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 5) [ 220.659776][ T54] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 220.683154][ T54] EXT4-fs (loop8): This should not happen!! Data will be lost [ 220.683154][ T54] [ 220.704616][T13072] loop7: detected capacity change from 0 to 512 [ 220.705164][T12154] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 220.725499][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 220.745408][T13074] netlink: 'syz.5.3860': attribute type 60 has an invalid length. [ 220.763520][T13072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.787174][ T28] audit: type=1400 audit(2000000548.008:16430): avc: denied { setattr } for pid=13071 comm="syz.7.3859" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 220.808493][T13080] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 220.882096][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.920637][T13086] SELinux: failed to load policy [ 221.081662][T13106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3874'. [ 221.132349][T13112] loop5: detected capacity change from 0 to 512 [ 221.176847][T13112] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3885: corrupted in-inode xattr: invalid ea_ino [ 221.197916][T13112] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.198986][T13112] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3885: couldn't read orphan inode 15 (err -117) [ 221.208243][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 221.208263][ C1] EXT4-fs (loop5): initial error at time 2000000548: ext4_iget_extra_inode:5128: inode 15 [ 221.208289][ C1] EXT4-fs (loop5): last error at time 2000000548: ext4_iget_extra_inode:5128: inode 15 [ 221.247127][T13112] loop5: lost filesystem error report for type 5 error -117 [ 221.250518][T13112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.285884][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.339676][T13127] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 221.366375][T13127] SELinux: failed to load policy [ 221.468618][T13139] loop7: detected capacity change from 0 to 512 [ 221.498382][T13139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.522532][T13139] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.538967][ T28] audit: type=1400 audit(2000000548.758:16431): avc: denied { setopt } for pid=13140 comm="syz.8.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 221.568586][ T28] audit: type=1400 audit(2000000548.788:16432): avc: denied { write } for pid=13138 comm="syz.7.3888" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.721891][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.883675][T13173] loop5: detected capacity change from 0 to 1024 [ 221.910588][T13173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 221.945825][T13173] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.970766][ T28] audit: type=1400 audit(2000000549.188:16433): avc: denied { write } for pid=13172 comm="syz.5.3902" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.976916][T13173] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.3902: lblock 3 mapped to illegal pblock 3 (length 3) [ 222.011767][T13173] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 222.032228][T13173] EXT4-fs (loop5): This should not happen!! Data will be lost [ 222.032228][T13173] [ 222.058267][ T54] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 5) [ 222.073206][ T54] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 222.086006][ T54] EXT4-fs (loop5): This should not happen!! Data will be lost [ 222.086006][ T54] [ 222.096407][ T9210] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 222.108373][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 222.160267][T13188] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3910'. [ 222.182353][T13193] loop5: detected capacity change from 0 to 128 [ 222.191239][T13193] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.215003][T13192] batman_adv: batadv0: Adding interface: vlan2 [ 222.221862][T13193] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.231157][T13192] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.279360][ T30] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.285161][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.299397][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.330416][T13192] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 222.453408][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 222.463006][ T3410] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 222.476348][T13219] loop5: detected capacity change from 0 to 512 [ 222.489862][T13219] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3924: inode has both inline data and extents flags [ 222.520405][T13219] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 222.521254][T13219] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3924: couldn't read orphan inode 15 (err -117) [ 222.530748][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 222.530772][ C0] EXT4-fs (loop5): initial error at time 2000000549: ext4_orphan_get:1397: inode 15 [ 222.530806][ C0] EXT4-fs (loop5): last error at time 2000000549: ext4_orphan_get:1397: inode 15 [ 222.568648][T13219] loop5: lost filesystem error report for type 5 error -117 [ 222.571091][T13219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.641629][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.720426][ T28] audit: type=1400 audit(2000000549.938:16434): avc: denied { append } for pid=13243 comm="syz.0.3934" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.780204][T13252] program syz.8.3938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.839894][T13257] loop0: detected capacity change from 0 to 512 [ 222.866386][T13257] EXT4-fs: Ignoring removed bh option [ 222.892473][T13257] EXT4-fs (loop0): 1 truncate cleaned up [ 222.901366][T13267] netlink: 'syz.8.3945': attribute type 3 has an invalid length. [ 222.909733][T13257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.922840][T13267] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3945'. [ 222.935301][T13257] EXT4-fs (loop0): shut down requested (1) [ 222.943816][T13257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 222.952866][T13257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 222.962492][T13257] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 222.986641][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.097401][T13272] loop8: detected capacity change from 0 to 512 [ 223.178562][T13272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.200917][ T28] audit: type=1400 audit(2000000550.418:16435): avc: denied { write } for pid=13277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.279230][ T28] audit: type=1400 audit(2000000550.488:16436): avc: denied { write } for pid=13294 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.335047][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.375978][T13298] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 223.389202][ T28] audit: type=1400 audit(2000000550.608:16437): avc: denied { create } for pid=13297 comm="syz.8.3951" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 223.527630][ T28] audit: type=1400 audit(2000000550.608:16438): avc: denied { associate } for pid=13297 comm="syz.8.3951" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 223.592331][T13298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.766616][T13298] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.792867][T13298] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.3951: corrupted inode contents [ 223.807681][T13298] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz.8.3951: mark_inode_dirty error [ 223.824766][T13298] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.3951: corrupted inode contents [ 223.838559][T13298] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3951: mark_inode_dirty error [ 223.879840][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.916918][T13318] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 224.089535][T13335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.122699][T13335] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.281978][T13354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.420051][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.491617][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.744236][T13411] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3984'. [ 224.883799][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3986'. [ 225.026334][T13440] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.039714][T13440] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.111381][T12150] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.481517][T13461] set_capacity_and_notify: 5 callbacks suppressed [ 225.481535][T13461] loop0: detected capacity change from 0 to 128 [ 225.531841][T13463] netlink: 320 bytes leftover after parsing attributes in process `syz.5.4003'. [ 225.552202][ T1777] kworker/u8:7: attempt to access beyond end of device [ 225.552202][ T1777] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 226.377657][T13499] loop3: detected capacity change from 0 to 512 [ 226.390855][T13503] macvtap1: entered promiscuous mode [ 226.408996][T13503] macvtap1: entered allmulticast mode [ 226.414771][T13503] dummy0: entered allmulticast mode [ 226.420364][T13503] dummy0: entered promiscuous mode [ 226.423028][T13499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.429353][T13503] team0: Device macvtap1 failed to register rx_handler [ 226.451129][T13499] ext4 filesystem being mounted at /647/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.462775][T13503] dummy0: left allmulticast mode [ 226.470714][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 226.470729][ T28] audit: type=1400 audit(2000000553.688:16449): avc: denied { write } for pid=13498 comm="syz.3.4015" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.473518][T13499] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.4015: corrupted inode contents [ 226.528488][T13510] sctp: [Deprecated]: syz.8.4020 (pid 13510) Use of int in max_burst socket option. [ 226.528488][T13510] Use struct sctp_assoc_value instead [ 226.547334][ T3410] dummy0: left promiscuous mode [ 226.559521][T13499] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.4015: mark_inode_dirty error [ 226.624250][T13499] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.4015: corrupted inode contents [ 226.644933][T13499] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.4015: mark_inode_dirty error [ 226.663403][T13520] loop0: detected capacity change from 0 to 256 [ 226.671939][T13520] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.684864][T13521] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4027'. [ 226.696624][T13520] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.755922][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.202935][T13536] netlink: 'syz.3.4033': attribute type 8 has an invalid length. [ 227.216808][ T28] audit: type=1400 audit(2000000554.438:16450): avc: denied { create } for pid=13535 comm="syz.0.4041" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 227.335229][ T28] audit: type=1326 audit(2000000554.548:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.0.4038" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11aac1ce59 code=0x0 [ 227.533899][ T28] audit: type=1400 audit(2000000554.748:16452): avc: denied { create } for pid=13572 comm="syz.3.4049" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.887603][T13605] loop8: detected capacity change from 0 to 2048 [ 227.936195][T13605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.952050][ T28] audit: type=1400 audit(2000000555.168:16453): avc: denied { write } for pid=13604 comm="syz.8.4060" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.087474][T13621] macvtap1: entered promiscuous mode [ 228.093138][T13621] macvtap1: entered allmulticast mode [ 228.099021][T13621] dummy0: entered allmulticast mode [ 228.108178][ T54] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 228.114013][T13621] dummy0: entered promiscuous mode [ 228.125537][ T54] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 228.134239][T13621] team0: Device macvtap1 failed to register rx_handler [ 228.143063][ T54] EXT4-fs (loop8): This should not happen!! Data will be lost [ 228.143063][ T54] [ 228.147883][T13623] loop5: detected capacity change from 0 to 128 [ 228.158410][ T54] EXT4-fs (loop8): Total free blocks count 0 [ 228.169462][T13621] dummy0: left allmulticast mode [ 228.173141][ T54] EXT4-fs (loop8): Free/Dirty block details [ 228.180957][ T54] EXT4-fs (loop8): free_blocks=4096 [ 228.192505][ T54] EXT4-fs (loop8): dirty_blocks=160 [ 228.197866][ T54] EXT4-fs (loop8): Block reservation details [ 228.202696][T13623] EXT4-fs: Ignoring removed bh option [ 228.204105][ T54] EXT4-fs (loop8): i_reserved_data_blocks=10 [ 228.229922][T12154] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 228.245522][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.246099][T13623] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.266808][ T9] dummy0: left promiscuous mode [ 228.269179][T13623] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.299287][ T9210] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.408567][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4074'. [ 228.448069][T13645] loop7: detected capacity change from 0 to 512 [ 228.464178][T13648] netlink: 'syz.8.4079': attribute type 8 has an invalid length. [ 228.477558][T13645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.490778][T13645] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.506516][ T28] audit: type=1400 audit(2000000555.728:16454): avc: denied { write } for pid=13644 comm="syz.7.4076" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.529522][T13645] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.4076: corrupted inode contents [ 228.541795][T13645] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #2: comm syz.7.4076: mark_inode_dirty error [ 228.553426][T13645] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #2: comm syz.7.4076: corrupted inode contents [ 228.567017][T13645] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.4076: mark_inode_dirty error [ 228.592869][ T28] audit: type=1400 audit(2000000555.808:16455): avc: denied { accept } for pid=13656 comm="syz.3.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.634441][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.643810][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4085'. [ 228.654316][T13661] macvlan0: entered promiscuous mode [ 228.660685][T13661] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4085'. [ 228.737931][T13673] SELinux: failed to load policy [ 228.760268][ T28] audit: type=1400 audit(2000000555.978:16456): avc: denied { kexec_image_load } for pid=13674 comm="syz.5.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 228.878592][T13684] loop5: detected capacity change from 0 to 512 [ 228.927148][T13684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.946405][T13684] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.960889][ T28] audit: type=1400 audit(2000000556.178:16457): avc: denied { write } for pid=13683 comm="syz.5.4092" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.065338][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.149458][T13703] SELinux: failed to load policy [ 229.240265][T13713] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4106'. [ 229.270765][T13718] netlink: 'syz.5.4109': attribute type 8 has an invalid length. [ 229.356765][T13728] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4116'. [ 229.358629][ T28] audit: type=1400 audit(2000000556.578:16458): avc: denied { setopt } for pid=13727 comm="syz.7.4116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.410498][T13734] netlink: 'syz.0.4117': attribute type 4 has an invalid length. [ 229.421661][T13734] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4117'. [ 229.673997][T13766] loop5: detected capacity change from 0 to 512 [ 229.724402][T13766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.852723][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.927275][T13787] __nla_validate_parse: 2 callbacks suppressed [ 229.927349][T13787] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4138'. [ 230.121845][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 230.184556][T13812] netlink: 'syz.3.4151': attribute type 4 has an invalid length. [ 230.202756][T13812] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4151'. [ 230.340363][T13829] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4158'. [ 230.574824][T13843] loop5: detected capacity change from 0 to 512 [ 230.601891][T13843] EXT4-fs: Ignoring removed bh option [ 230.619188][T13843] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.4162: corrupted xattr block 95: invalid header [ 230.637296][T13843] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 230.639583][T13843] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4162: bg 0: block 7: invalid block bitmap [ 230.648972][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 230.648996][ C0] EXT4-fs (loop5): initial error at time 2000000557: ext4_expand_extra_isize_ea:2810: inode 11 [ 230.649033][ C0] EXT4-fs (loop5): last error at time 2000000557: ext4_expand_extra_isize_ea:2810: inode 11 [ 230.684307][T13848] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4164'. [ 230.697770][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 230.707244][T13843] loop5: lost filesystem error report for type 5 error -117 [ 230.713462][T13848] bond0: entered promiscuous mode [ 230.726379][T13843] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 230.735417][T13848] bond_slave_0: entered promiscuous mode [ 230.743066][T13843] loop5: lost filesystem error report for type 5 error -117 [ 230.744630][T13843] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.4162: corrupted xattr block 95: invalid header [ 230.765916][T13848] @0Ù: entered promiscuous mode [ 230.773304][T13848] batadv_slave_0: entered promiscuous mode [ 230.779543][T13848] batadv_slave_0: left promiscuous mode [ 230.785334][T13843] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 230.785429][T13848] bond0: left promiscuous mode [ 230.799930][T13843] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 230.809055][T13843] EXT4-fs (loop5): 1 orphan inode deleted [ 230.815447][T13843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.828173][T13848] bond_slave_0: left promiscuous mode [ 230.833865][T13848] @0Ù: left promiscuous mode [ 230.870209][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.997968][T13867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4173'. [ 231.038673][T13874] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 231.134420][ T3410] kernel read not supported for file /newroot/667 (pid: 3410 comm: kworker/1:4) [ 231.255927][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4188'. [ 231.349336][T13908] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4191'. [ 231.614220][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4201'. [ 231.692125][T13937] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 232.508771][ T9] kernel read not supported for file /newroot/159 (pid: 9 comm: kworker/0:0) [ 232.788079][T13977] usb usb7: usbfs: process 13977 (syz.8.4224) did not claim interface 0 before use [ 232.846215][T13980] loop0: detected capacity change from 0 to 512 [ 232.860657][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 232.860671][ T28] audit: type=1400 audit(2000000560.078:16467): avc: denied { bind } for pid=13985 comm="syz.7.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.968694][T13980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.124901][ T28] audit: type=1400 audit(2000000560.338:16468): avc: denied { read } for pid=14005 comm="syz.8.4234" name="file1" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.176172][ T28] audit: type=1400 audit(2000000560.338:16469): avc: denied { watch } for pid=14005 comm="syz.8.4234" path="/128/file1" dev="tmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 233.259354][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.406800][T14024] loop3: detected capacity change from 0 to 512 [ 233.418105][T14024] EXT4-fs: Ignoring removed orlov option [ 233.436746][T14024] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.451017][T14024] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.4243: corrupted in-inode xattr: e_value size too large [ 233.465431][T14024] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.465624][T14024] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4243: couldn't read orphan inode 15 (err -117) [ 233.465701][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 233.493142][ C0] EXT4-fs (loop3): initial error at time 2000000560: ext4_iget_extra_inode:5128: inode 15 [ 233.503138][ C0] EXT4-fs (loop3): last error at time 2000000560: ext4_iget_extra_inode:5128: inode 15 [ 233.515122][T14024] loop3: lost filesystem error report for type 5 error -117 [ 233.517099][T14024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.577887][T14031] loop8: detected capacity change from 0 to 512 [ 233.593708][T14031] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.4247: inode has both inline data and extents flags [ 233.607318][T14031] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.607546][T14031] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.4247: couldn't read orphan inode 15 (err -117) [ 233.616755][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 233.616780][ C0] EXT4-fs (loop8): initial error at time 2000000560: ext4_orphan_get:1397: inode 15 [ 233.616812][ C0] EXT4-fs (loop8): last error at time 2000000560: ext4_orphan_get:1397: inode 15 [ 233.653828][T14031] loop8: lost filesystem error report for type 5 error -117 [ 233.656241][T14031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.679917][T14031] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 233.686062][ T28] audit: type=1400 audit(2000000560.898:16470): avc: denied { write } for pid=14030 comm="syz.8.4247" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.720531][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.749042][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.830546][T14047] loop0: detected capacity change from 0 to 512 [ 233.871423][T14047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.902146][T14054] hugetlbfs: syz.5.4255 (14054): Using mlock ulimits for SHM_HUGETLB is obsolete [ 233.922235][T14047] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.4261: bg 0: bad block bitmap checksum [ 233.925479][ T28] audit: type=1400 audit(2000000561.138:16471): avc: denied { write } for pid=14044 comm="syz.0.4261" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.960817][T14047] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 233.987211][ T28] audit: type=1400 audit(2000000561.208:16472): avc: denied { write } for pid=14044 comm="syz.0.4261" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.053094][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.062533][T14063] loop3: detected capacity change from 0 to 4096 [ 234.076300][T14063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.107125][ T28] audit: type=1400 audit(2000000561.328:16473): avc: denied { write } for pid=14061 comm="syz.3.4259" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.170198][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.281592][T14099] loop5: detected capacity change from 0 to 512 [ 234.319646][T14099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.347191][T14099] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.4276: bg 0: bad block bitmap checksum [ 234.348564][ T28] audit: type=1400 audit(2000000561.558:16474): avc: denied { write } for pid=14097 comm="syz.5.4276" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.383483][T14099] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 234.392832][T14104] loop7: detected capacity change from 0 to 4096 [ 234.399501][ T28] audit: type=1400 audit(2000000561.618:16475): avc: denied { write } for pid=14097 comm="syz.5.4276" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.427302][T14104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.445095][ T28] audit: type=1400 audit(2000000561.658:16476): avc: denied { write } for pid=14103 comm="syz.7.4280" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.451292][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.547115][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.794165][T14144] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 235.248117][T14177] loop5: detected capacity change from 0 to 256 [ 235.304963][T14183] netlink: 'syz.8.4315': attribute type 1 has an invalid length. [ 235.313539][T14183] __nla_validate_parse: 4 callbacks suppressed [ 235.313604][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4315'. [ 235.388647][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4318'. [ 235.727531][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4327'. [ 236.025481][T14231] loop5: detected capacity change from 0 to 1024 [ 236.073584][T14231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.111680][T14231] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.167589][T14231] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 236.207520][T14231] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4337: bg 0: block 112: padding at end of block bitmap is not set [ 236.239154][T14247] loop7: detected capacity change from 0 to 512 [ 236.292950][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.315516][T14247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.356214][T14247] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.431139][T12150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.802013][ T3410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 236.814825][ T3410] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.889351][T14301] fido_id[14301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.926202][T14312] netlink: 'syz.0.4372': attribute type 9 has an invalid length. [ 237.013429][T14322] loop0: detected capacity change from 0 to 1024 [ 237.032943][T14322] EXT4-fs: inline encryption not supported [ 237.045975][T14326] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 237.057508][T14322] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.085197][T14322] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 1: comm syz.0.4376: lblock 1 mapped to illegal pblock 1 (length 1) [ 237.099443][T14326] SELinux: failed to load policy [ 237.102887][T14322] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 237.118959][T14322] EXT4-fs (loop0): Remounting filesystem read-only [ 237.128141][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 237.128159][ C1] EXT4-fs (loop0): initial error at time 2000000564: ext4_map_blocks:833: inode 3: block 1 [ 237.128201][ C1] EXT4-fs (loop0): last error at time 2000000564: ext4_map_blocks:833: inode 3: block 1 [ 237.176910][T14333] loop8: detected capacity change from 0 to 256 [ 237.191334][T14322] EXT4-fs (loop0): 1 orphan inode deleted [ 237.197188][T14333] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.225737][T14333] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.235920][T14322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.279127][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.338259][T14343] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2582 sclass=netlink_xfrm_socket pid=14343 comm=syz.3.4385 [ 237.355627][T14344] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14344 comm=syz.5.4384 [ 237.678631][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4395'. [ 237.794190][T14379] netlink: 59060 bytes leftover after parsing attributes in process `syz.8.4398'. [ 237.815598][T14379] netlink: zone id is out of range [ 237.821441][T14379] netlink: zone id is out of range [ 237.829378][T14379] netlink: zone id is out of range [ 237.842344][T14379] netlink: zone id is out of range [ 237.848590][T14379] netlink: zone id is out of range [ 237.853876][T14379] netlink: zone id is out of range [ 237.859567][T14379] netlink: zone id is out of range [ 237.865152][T14379] netlink: zone id is out of range [ 237.871524][T14379] netlink: zone id is out of range [ 237.882232][T14379] netlink: zone id is out of range [ 237.997884][T14395] loop8: detected capacity change from 0 to 1024 [ 238.046050][T14395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.059956][T14395] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.076941][T14403] loop5: detected capacity change from 0 to 1024 [ 238.089473][T14395] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4407: bg 0: block 112: padding at end of block bitmap is not set [ 238.124255][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 238.124273][ T28] audit: type=1400 audit(2000000565.338:16503): avc: denied { write } for pid=14394 comm="syz.8.4407" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.129724][T14403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 238.172942][T14403] System zones: 0-1, 3-8 [ 238.184118][T14403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.219785][T14403] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.232849][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.255676][ T28] audit: type=1400 audit(2000000565.468:16504): avc: denied { write } for pid=14402 comm="syz.5.4410" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.299003][ T1869] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.317430][ T1869] EXT4-fs (loop5): Remounting filesystem read-only [ 238.320630][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.376369][T14423] loop8: detected capacity change from 0 to 512 [ 238.419529][T14423] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 238.431208][T14423] System zones: 0-2, 18-18, 34-34 [ 238.433877][T14430] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 238.449373][T14423] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 238.470939][T14423] EXT4-fs (loop8): Remounting filesystem read-only [ 238.477604][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 238.477629][ C1] EXT4-fs (loop8): initial error at time 2000000565: ext4_mb_generate_buddy:1317 [ 238.477671][ C1] EXT4-fs (loop8): last error at time 2000000565: ext4_mb_generate_buddy:1317 [ 238.505227][T14423] EXT4-fs (loop8): 1 truncate cleaned up [ 238.514940][T14423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.527594][ T30] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 238.534968][T14423] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.564099][ T30] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 238.575061][ T30] Quota error (device loop8): write_blk: dquota write failed [ 238.576364][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.582878][ T30] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 238.601507][ T30] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 238.612214][ T30] Quota error (device loop8): write_blk: dquota write failed [ 238.619848][ T30] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 238.638790][ T30] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 238.649046][ T30] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 238.659419][ T30] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 238.672116][ T30] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.308069][T14472] loop8: detected capacity change from 0 to 128 [ 239.336803][T14472] EXT4-fs (loop8): filesystem is read-only [ 239.365448][T14472] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 239.432077][T12154] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.758057][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4462'. [ 239.874189][T14536] loop0: detected capacity change from 0 to 1024 [ 239.894140][T14536] EXT4-fs: Ignoring removed orlov option [ 239.933330][T14536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.994092][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4476'. [ 239.995763][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.061544][T14563] loop0: detected capacity change from 0 to 512 [ 240.082337][T14563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.094765][T14563] EXT4-fs (loop0): 1 truncate cleaned up [ 240.124532][T14563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.169162][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4485'. [ 240.208788][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.218435][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.230799][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.247967][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.273584][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.287179][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.294657][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.304435][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.308375][T14583] EXT4-fs: Ignoring removed orlov option [ 240.321933][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.330150][ T35] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 240.357261][ T35] hid-generic 0103:0004:0000.0004: hidraw0: HID v0.05 Device [syz0] on syz1 [ 240.357353][T14583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.456016][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.531757][T14600] netlink: 'syz.3.4496': attribute type 1 has an invalid length. [ 240.550737][T14600] netlink: 'syz.3.4496': attribute type 2 has an invalid length. [ 240.558997][T14606] netlink: 'syz.7.4498': attribute type 14 has an invalid length. [ 240.909552][T14647] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 240.934665][T14647] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 240.956160][T14647] EXT4-fs (loop8): 1 truncate cleaned up [ 240.962332][T14647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.979815][T14647] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 240.995062][T14647] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 241.020579][T12154] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.128638][T14671] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4526'. [ 241.145960][T14673] set_capacity_and_notify: 2 callbacks suppressed [ 241.145979][T14673] loop5: detected capacity change from 0 to 1024 [ 241.159947][T14673] EXT4-fs: Ignoring removed oldalloc option [ 241.173577][T14673] EXT4-fs: Ignoring removed oldalloc option [ 241.180950][T14673] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 241.200200][T14673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.300759][T14683] loop3: detected capacity change from 0 to 512 [ 241.309367][T14683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.330351][T14683] EXT4-fs (loop3): 1 truncate cleaned up [ 241.336751][T14683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.375125][ T9210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.408050][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.510810][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4537'. [ 241.600833][T14719] program syz.5.4546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.322138][T14796] tipc: Started in network mode [ 243.330828][T14796] tipc: Node identity 000000000000003a0040ffffe0000001, cluster identity 4711 [ 243.356484][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 243.356515][ T28] audit: type=1400 audit(2000000570.568:16545): avc: denied { setopt } for pid=14797 comm="syz.3.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.382846][T14796] tipc: Enabling of bearer rejected, failed to enable media [ 243.399780][T14800] loop3: detected capacity change from 0 to 1024 [ 243.416346][T14800] EXT4-fs: Ignoring removed oldalloc option [ 243.430203][T14800] EXT4-fs: Ignoring removed oldalloc option [ 243.455308][T14800] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 243.498523][T14800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.512826][T14812] netlink: 748 bytes leftover after parsing attributes in process `syz.8.4589'. [ 243.531513][T14814] loop0: detected capacity change from 0 to 512 [ 243.538648][T14814] ext2: Unknown parameter 'dont_hash' [ 243.549766][ T28] audit: type=1400 audit(2000000570.768:16546): avc: denied { write } for pid=14799 comm="syz.3.4584" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.611633][T14816] sctp: [Deprecated]: syz.5.4592 (pid 14816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.611633][T14816] Use struct sctp_sack_info instead [ 243.672724][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4596'. [ 243.865803][T14848] loop8: detected capacity change from 0 to 512 [ 243.881534][T14853] loop0: detected capacity change from 0 to 512 [ 243.893451][T14848] EXT4-fs: test_dummy_encryption option not supported [ 243.906985][T14853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 243.952777][T14853] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.4618: bad orphan inode 131083 [ 243.964078][T14853] loop0: lost filesystem error report for type 5 error -117 [ 243.964908][T14853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.986787][ T5670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.000684][ T28] audit: type=1400 audit(2000000571.208:16547): avc: denied { write } for pid=14850 comm="syz.0.4618" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.030712][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.137059][T14873] loop5: detected capacity change from 0 to 1764 [ 244.139103][T14875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4617'. [ 244.214875][T14882] loop7: detected capacity change from 0 to 1024 [ 244.228587][T14882] EXT4-fs: Ignoring removed oldalloc option [ 244.240559][T14882] EXT4-fs: Ignoring removed oldalloc option [ 244.269331][ T28] audit: type=1326 audit(2000000571.488:16548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.4625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ca2ce59 code=0x7ffc0000 [ 244.311017][T14882] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 244.344887][ T28] audit: type=1326 audit(2000000571.488:16549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.4625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ca2ce59 code=0x7ffc0000 [ 244.424785][ T28] audit: type=1326 audit(2000000571.518:16550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.4625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ca2ce59 code=0x7ffc0000 [ 244.450632][ T28] audit: type=1326 audit(2000000571.518:16551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.4625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe57ca2ce59 code=0x7ffc0000 [ 244.476579][ T28] audit: type=1326 audit(2000000571.518:16552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.4625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ca2ce59 code=0x7ffc0000 [ 244.502678][ T28] audit: type=1326 audit(2000000571.518:16553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.4625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ca2ce59 code=0x7ffc0000 [ 244.529797][ T28] audit: type=1326 audit(2000000571.518:16554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.4625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57ca2ce59 code=0x7ffc0000 [ 244.600984][T14904] loop0: detected capacity change from 0 to 4096 [ 244.608156][T14904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.630421][T14904] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 245.008726][T14938] netlink: 4560 bytes leftover after parsing attributes in process `syz.8.4646'. [ 245.031301][T14938] netlink: 4560 bytes leftover after parsing attributes in process `syz.8.4646'. [ 245.055321][T14948] loop0: detected capacity change from 0 to 1024 [ 245.062431][T14948] EXT4-fs: Ignoring removed oldalloc option [ 245.080807][T14948] EXT4-fs: Ignoring removed oldalloc option [ 245.090128][T14948] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 245.124592][T14952] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.144482][T14952] EXT4-fs (loop5): 1 truncate cleaned up [ 245.725081][T15017] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.4678'. [ 245.734438][T15017] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.4678'. [ 245.820214][T15025] netlink: 'syz.7.4680': attribute type 12 has an invalid length. [ 245.880566][T14946] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 246.154676][T15057] EXT4-fs: Ignoring removed oldalloc option [ 246.175410][T15057] EXT4-fs: Ignoring removed oldalloc option [ 246.195798][T15057] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 246.358703][T12154] ================================================================== [ 246.366867][T12154] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 246.374292][T12154] [ 246.376643][T12154] read-write to 0xffff88811b06ab50 of 8 bytes by task 1869 on cpu 1: [ 246.384726][T12154] __xa_clear_mark+0xf5/0x1e0 [ 246.389438][T12154] __folio_end_writeback+0xf4/0x360 [ 246.394672][T12154] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 246.400950][T12154] folio_end_writeback+0x1c/0x70 [ 246.405924][T12154] ext4_finish_bio+0x450/0x760 [ 246.410729][T12154] ext4_release_io_end+0x9f/0x1f0 [ 246.415784][T12154] ext4_end_io_end+0x18d/0x240 [ 246.420588][T12154] ext4_end_io_rsv_work+0x15b/0x1f0 [ 246.425827][T12154] process_scheduled_works+0x4f0/0x9c0 [ 246.431321][T12154] worker_thread+0x58a/0x780 [ 246.435957][T12154] kthread+0x22a/0x280 [ 246.440054][T12154] ret_from_fork+0x146/0x330 [ 246.444682][T12154] ret_from_fork_asm+0x1a/0x30 [ 246.449473][T12154] [ 246.451822][T12154] read to 0xffff88811b06ab50 of 8 bytes by task 12154 on cpu 0: [ 246.459468][T12154] xas_find_marked+0x213/0x620 [ 246.464261][T12154] filemap_get_folios_tag+0xfa/0x430 [ 246.469575][T12154] filemap_fdatawait_keep_errors+0x6c/0x190 [ 246.475502][T12154] sync_inodes_sb+0x424/0x4d0 [ 246.480211][T12154] sync_filesystem+0x102/0x190 [ 246.484996][T12154] generic_shutdown_super+0x4c/0x220 [ 246.490305][T12154] kill_block_super+0x2a/0x70 [ 246.495014][T12154] ext4_kill_sb+0x42/0x80 [ 246.499362][T12154] deactivate_locked_super+0x75/0x1c0 [ 246.504758][T12154] deactivate_super+0x97/0xa0 [ 246.509461][T12154] cleanup_mnt+0x2bb/0x330 [ 246.513904][T12154] __cleanup_mnt+0x19/0x20 [ 246.518355][T12154] task_work_run+0x130/0x1a0 [ 246.522985][T12154] exit_to_user_mode_loop+0x211/0x820 [ 246.528641][T12154] do_syscall_64+0x232/0x3b0 [ 246.534048][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.540060][T12154] [ 246.542396][T12154] value changed: 0xfffffffff0000000 -> 0xfffffffc00000000 [ 246.549539][T12154] [ 246.551892][T12154] Reported by Kernel Concurrency Sanitizer on: [ 246.558863][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 246.568446][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.579309][T12154] ================================================================== [ 246.981816][T15060] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)