last executing test programs: 3.166774512s ago: executing program 2 (id=140): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x3a, 0x6}, 0x2) 3.089832695s ago: executing program 2 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3d50, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.030761889s ago: executing program 2 (id=144): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname(r0, 0x0, &(0x7f0000000100)) 2.967040442s ago: executing program 2 (id=145): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000000180)=""/99, 0x63) 2.966793631s ago: executing program 2 (id=146): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 2.966549012s ago: executing program 2 (id=147): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x4400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 1.696811475s ago: executing program 1 (id=192): syz_emit_ethernet(0x46, &(0x7f0000000dc0)={@local, @multicast, @val, {@ipv6={0x86dd, @udp={0x6, 0x6, "68e389", 0x8, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {[], {0x4e23, 0x4e21, 0x8}}}}}}, 0x0) 1.684408506s ago: executing program 1 (id=193): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) 1.507704805s ago: executing program 3 (id=196): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r3, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="58d8e764d9487be91c14b3489aaf78c3e8b191ea9bb17d23cde598c4b97ebfa415164f99a216f9baa1cb04ffa0ddaaf6a8a5ca01dfbb96de2771ce5b4c59e5dc796627", 0x43}, {&(0x7f0000000280)="8a4c20fde6b17d2e137e87ab0ab3941529888fb2653b93412d7437a565d8d709c6bec15b7017c964eb7630230d24489c9d0fc7b1e48c1337d4557f670bf0157ed86cb92e08ee6a00bda8c13b17716dd24a08f043e7c6b972402c1ffa054831958a982d1a7743306e632eb214ce24305f5dd7749e537a2650e9d7ad55538194c62b968d0ce682a51de7b872e1858486c6943405c36c0d9598f51bca8ce2c09530c90a35afca36b53d3864a2d3319a63", 0xaf}, {&(0x7f0000000340)="ef3a011786849eb33d6f97d60a54a48c4cbea855b8b663a3db4d0f884a7b347f5e843d46c6d2725e5b50976d4134ccaf6816b79c84c727e807ac2289310df99cb0d71985b8409832f4a88129dfbda80c7a93c9e53ccc83eaee9228089fb0f859915b655864cf1f46e0c280dee1d38c2156e7c5c87b331e3d6847de2d29c2f0b7908745f9935506d8bb80a84254432bfaf9c47f71c85581f65ce2c6ffefe170f3de8502dcf5d9", 0xa6}], 0x3}}], 0x1, 0x4c144) 1.430659598s ago: executing program 4 (id=198): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0x7}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 1.134154033s ago: executing program 4 (id=199): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) 922.988694ms ago: executing program 4 (id=201): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") lgetxattr(&(0x7f0000000400)='./file1\x00', &(0x7f00000004c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 681.607836ms ago: executing program 1 (id=204): iopl(0x3) ioperm(0x0, 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000001240)={[{@errors_continue}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@nombcache}, {@noinit_itable}, {@abort}]}, 0x80, 0x550, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x2000007ff) 592.202181ms ago: executing program 0 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x20040084) 591.947781ms ago: executing program 4 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000080850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv6=@udp={0x0, 0x6, "05f447", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "247c90d2250ff7c672367436d0de81c39c1110df53cb4a4c", "ce4ef6d7c938c6f4c8db34e27c6a04a656c72f43c6504b89927fdadf3aae5a8a"}}}}}}}}, 0x0) 499.987576ms ago: executing program 0 (id=207): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a4, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x2141, 0x59) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000003000002"]) 487.075726ms ago: executing program 3 (id=208): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000007"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x8, 0xffffffff) 453.629428ms ago: executing program 3 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}], 0x2, 0x88a2) syz_emit_ethernet(0x6b, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x31, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [], "fa"}}}}}}}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="f8134b4006e5213b3f6ed2ddfb90e21a1633e719185247d99eea3a14c8d1314d73e0de56e04ee14a3075e2e55a70e6b71df17ac8e4ada6d616d3bc2d155c4570244e46714c8977", 0x47}], 0x1) 389.162641ms ago: executing program 1 (id=210): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19620bc, &(0x7f0000000b00)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRES64, @ANYBLOB="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", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 388.551141ms ago: executing program 3 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 388.274461ms ago: executing program 4 (id=212): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000026c3d06b000a00000000000000040004000800010001000000"], 0x24}}, 0x0) 387.885171ms ago: executing program 4 (id=213): ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x84) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 330.691243ms ago: executing program 3 (id=214): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 291.872976ms ago: executing program 0 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000000000005"], 0xac}}, 0x0) 202.39716ms ago: executing program 1 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000002c0)={[{@noswap}]}) 129.612734ms ago: executing program 0 (id=217): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 71.156917ms ago: executing program 1 (id=218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0x19, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 14.85227ms ago: executing program 0 (id=219): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x4, 0x2, 0x4, 0x4}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x1b8}}], 0x2, 0x70) 14.116ms ago: executing program 3 (id=220): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2d, 0x2, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x20000000) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000040)=ANY=[], 0xfb, 0x1221, &(0x7f0000001280)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x1c0) r3 = socket$igmp(0x2, 0x3, 0x2) lremovexattr(&(0x7f00000003c0)='./file2\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003499b8f276dc75584a8d87d907005858367d61f49e1639a48f", 0x20, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f0000000280)={r1, &(0x7f0000000100)='\x00', 0x100, &(0x7f0000000140)={@_ha_fsid={[0xfffffffc, 0x7]}, {0xa, 0xfffe, 0xb72, 0x6}}, 0x3ff, &(0x7f0000000180), &(0x7f00000001c0)=0x9}) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x40440d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 22.642475][ T30] audit: type=1400 audit(1774535013.437:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.647000][ T273] cgroup: Unknown subsys name 'net' [ 22.665497][ T30] audit: type=1400 audit(1774535013.437:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.693449][ T30] audit: type=1400 audit(1774535013.467:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.693906][ T273] cgroup: Unknown subsys name 'devices' [ 22.838339][ T273] cgroup: Unknown subsys name 'hugetlb' [ 22.844088][ T273] cgroup: Unknown subsys name 'rlimit' [ 23.046693][ T30] audit: type=1400 audit(1774535013.847:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.070699][ T30] audit: type=1400 audit(1774535013.847:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.096057][ T30] audit: type=1400 audit(1774535013.847:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.105321][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.129447][ T30] audit: type=1400 audit(1774535013.927:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.156850][ T30] audit: type=1400 audit(1774535013.927:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.185531][ T30] audit: type=1400 audit(1774535013.977:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.212013][ T30] audit: type=1400 audit(1774535013.977:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.212058][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.199425][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.207165][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.214726][ T281] device bridge_slave_0 entered promiscuous mode [ 24.231644][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.239125][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.246980][ T282] device bridge_slave_0 entered promiscuous mode [ 24.255541][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.263096][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.270505][ T281] device bridge_slave_1 entered promiscuous mode [ 24.286580][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.294450][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.302675][ T284] device bridge_slave_0 entered promiscuous mode [ 24.309960][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.317326][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.325011][ T282] device bridge_slave_1 entered promiscuous mode [ 24.352435][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.359705][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.367756][ T284] device bridge_slave_1 entered promiscuous mode [ 24.381027][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.388594][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.396025][ T285] device bridge_slave_0 entered promiscuous mode [ 24.405083][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.412535][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.420263][ T285] device bridge_slave_1 entered promiscuous mode [ 24.451688][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.459298][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.467373][ T283] device bridge_slave_0 entered promiscuous mode [ 24.506944][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.514452][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.522071][ T283] device bridge_slave_1 entered promiscuous mode [ 24.652573][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.659678][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.667135][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.674529][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.704671][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.712091][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.719660][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.726821][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.751020][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.758430][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.766073][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.773147][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.787032][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.794222][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.801879][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.809484][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.820874][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.828136][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.835432][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.842822][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.863650][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.871802][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.879377][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.887345][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.894879][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.902742][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.910311][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.918000][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.925307][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.932738][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.941112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.949228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.967687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.982145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.990509][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.997721][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.005461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.014096][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.021221][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.042946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.051891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.060376][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.067849][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.075420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.084067][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.091681][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.099465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.108001][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.115346][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.122983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.131359][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.138617][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.161089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.168865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.176957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.185368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.193884][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.201275][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.208776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.217576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.226758][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.233942][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.241787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.249716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.257270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.265878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.274361][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.282023][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.289747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.297972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.324263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.332803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.341193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.349493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.358095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.366508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.374693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.383883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.392800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.401666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.410569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.419044][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.426276][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.438033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.446628][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.469855][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.478278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.487012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.495206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.503774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.512703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.521350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.529425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.537890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.545754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.557946][ T281] device veth0_vlan entered promiscuous mode [ 25.566745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.584784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.594092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.602925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.611643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.620593][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.628850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.637051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.644554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.657327][ T282] device veth0_vlan entered promiscuous mode [ 25.664167][ T283] device veth0_vlan entered promiscuous mode [ 25.673234][ T281] device veth1_macvtap entered promiscuous mode [ 25.685024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.693974][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.702185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.710324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.719333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.728351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.739004][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.747000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.754970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.773541][ T284] device veth0_vlan entered promiscuous mode [ 25.783119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.791944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.800289][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.809022][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.816878][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.825276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.834325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.843001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.854515][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.864243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.873310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.883641][ T285] device veth0_vlan entered promiscuous mode [ 25.897779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.908555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.917557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.931191][ T283] device veth1_macvtap entered promiscuous mode [ 25.939879][ T282] device veth1_macvtap entered promiscuous mode [ 25.947629][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 25.957975][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.967305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.976063][ T285] device veth1_macvtap entered promiscuous mode [ 25.984845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.014929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.024989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.035143][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.043831][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.052813][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.061685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.070616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.079179][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.088350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.097565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.106609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.115260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.144351][ T284] device veth1_macvtap entered promiscuous mode [ 26.180944][ T311] loop1: detected capacity change from 0 to 1024 [ 26.199076][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.222941][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.235151][ T317] loop3: detected capacity change from 0 to 512 [ 26.245512][ T314] loop2: detected capacity change from 0 to 4096 [ 26.253350][ T311] EXT4-fs (loop1): Ignoring removed orlov option [ 26.264164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.273534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.286108][ T311] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 26.293346][ T317] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.324535][ T317] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.382703][ T327] SELinux: failed to load policy [ 26.384661][ T317] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 18: comm syz.3.6: lblock 23 mapped to illegal pblock 18 (length 1) [ 26.421553][ T314] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.442173][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.6: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 26.479566][ T329] SELinux: failed to load policy [ 26.525660][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.6: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 26.530374][ T338] loop4: detected capacity change from 0 to 1024 [ 26.564832][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.6: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 26.591102][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.6: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 26.622176][ T338] ======================================================= [ 26.622176][ T338] WARNING: The mand mount option has been deprecated and [ 26.622176][ T338] and is ignored by this kernel. Remove the mand [ 26.622176][ T338] option from the mount to silence this warning. [ 26.622176][ T338] ======================================================= [ 26.633811][ T340] loop0: detected capacity change from 0 to 4096 [ 26.664973][ T337] loop2: detected capacity change from 0 to 512 [ 26.671723][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.6: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 26.681865][ T342] loop1: detected capacity change from 0 to 128 [ 26.699903][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.6: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 26.705670][ T338] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.734035][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.6: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 26.758594][ T342] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 26.768576][ T337] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 26.780182][ T342] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 26.784585][ T330] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 18: comm syz.3.6: lblock 23 mapped to illegal pblock 18 (length 1) [ 26.788933][ T342] FAT-fs (loop1): Filesystem has been set read-only [ 26.809527][ T340] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 26.810853][ T342] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 26.828693][ T338] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,noinit_itable,nogrpid,nodiscard,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 26.858821][ T330] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.6: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 26.882440][ T338] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.900220][ T340] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 80: comm syz.0.12: bad entry in directory: inode out of bounds - offset=12, inode=64, rec_len=12, size=4096 fake=1 [ 26.940091][ T338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10: bg 0: block 112: padding at end of block bitmap is not set [ 26.955164][ T340] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 26.966443][ T337] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.9: iget: bogus i_mode (2) [ 26.980692][ T340] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #12: comm syz.0.12: Deleting old file: nlink 2, error=-117 [ 26.995184][ T338] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 27.008669][ T337] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9: couldn't read orphan inode 15 (err -117) [ 27.030414][ T338] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.030414][ T338] [ 27.045377][ T337] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.098136][ T337] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 13: comm syz.2.9: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 27.126085][ T338] syz.4.10 (338) used greatest stack depth: 22144 bytes left [ 27.170603][ T337] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.9: directory missing '.' [ 27.202872][ T360] loop0: detected capacity change from 0 to 1024 [ 27.228824][ T364] capability: warning: `syz.4.20' uses deprecated v2 capabilities in a way that may be insecure [ 27.254276][ T360] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.294731][ T370] loop1: detected capacity change from 0 to 512 [ 27.304516][ T372] loop4: detected capacity change from 0 to 256 [ 27.315660][ T360] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,abort,nombcache,errors=remount-ro,. Quota mode: writeback. [ 27.346128][ T370] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 27.365852][ T370] EXT4-fs (loop1): 1 truncate cleaned up [ 27.372161][ T370] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000008000,nomblk_io_submit,,errors=continue. Quota mode: none. [ 27.397792][ T378] EXT4-fs (loop2): Ignoring removed bh option [ 27.404033][ T378] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.430145][ T368] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.444338][ T368] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.447133][ T378] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,jqfmt=vfsv0,grpquota,mb_optimize_scan=0x0000000000000001,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 27.465079][ T368] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.22: corrupted xattr block 33 [ 27.523416][ T368] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 27.570144][ T368] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.22: corrupted xattr block 33 [ 27.585148][ T368] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 27.594758][ T368] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.22: corrupted xattr block 33 [ 27.608366][ T368] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 27.621863][ T368] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.22: corrupted xattr block 33 [ 27.634732][ T368] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.22: corrupted xattr block 33 [ 27.636663][ T392] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 27.648643][ T368] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 27.689184][ T392] EXT4-fs (loop4): 1 truncate cleaned up [ 27.737537][ T394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 27.747590][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 27.747605][ T30] audit: type=1400 audit(1774535018.547:136): avc: denied { create } for pid=398 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.776654][ T392] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noload,auto_da_alloc,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 27.815321][ T394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'. [ 27.862659][ T30] audit: type=1400 audit(1774535018.657:137): avc: denied { mount } for pid=404 comm="syz.3.36" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 27.924128][ T30] audit: type=1400 audit(1774535018.707:138): avc: denied { create } for pid=410 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.002865][ T30] audit: type=1400 audit(1774535018.707:139): avc: denied { read } for pid=410 comm="syz.3.38" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.020256][ T409] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 28.044761][ T30] audit: type=1400 audit(1774535018.707:140): avc: denied { open } for pid=410 comm="syz.3.38" path="net:[4026532290]" dev="nsfs" ino=4026532290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.078071][ T417] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.107490][ T390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.118841][ T30] audit: type=1400 audit(1774535018.707:141): avc: denied { create } for pid=410 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 28.147397][ T417] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 28.274945][ T30] audit: type=1400 audit(1774535018.787:142): avc: denied { bpf } for pid=418 comm="syz.0.43" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.317449][ T30] audit: type=1400 audit(1774535018.787:143): avc: denied { map_read map_write } for pid=418 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.364073][ T30] audit: type=1400 audit(1774535018.787:144): avc: denied { perfmon } for pid=418 comm="syz.0.43" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.387982][ T30] audit: type=1400 audit(1774535018.797:145): avc: denied { create } for pid=420 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.836981][ T473] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.869158][ T480] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 28.889366][ T473] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 29.108223][ T512] tmpfs: Unsupported parameter 'mpol' [ 29.239948][ T524] EXT4-fs (loop3): Ignoring removed bh option [ 29.267125][ T524] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,bh,,errors=continue. Quota mode: none. [ 29.313257][ T524] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.379103][ T532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.397279][ T534] usb usb7: usbfs: process 534 (syz.3.90) did not claim interface 0 before use [ 29.409965][ T532] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.443501][ T537] EXT4-fs (loop3): Ignoring removed oldalloc option [ 29.461620][ T537] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.91: invalid indirect mapped block 4294967295 (level 1) [ 29.477890][ T537] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.91: invalid indirect mapped block 4294967295 (level 1) [ 29.493090][ T537] EXT4-fs (loop3): 2 truncates cleaned up [ 29.499661][ T537] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,oldalloc,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 29.537688][ T537] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.91: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 29.638548][ T546] netlink: 76 bytes leftover after parsing attributes in process `syz.3.95'. [ 29.650144][ T546] Zero length message leads to an empty skb [ 29.750456][ T560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 29.816374][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 29.867958][ T574] EXT4-fs (loop3): Ignoring removed oldalloc option [ 29.877286][ T574] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.110: invalid indirect mapped block 4294967295 (level 1) [ 29.900842][ T574] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.110: invalid indirect mapped block 4294967295 (level 1) [ 29.918529][ T574] EXT4-fs (loop3): 2 truncates cleaned up [ 29.924668][ T574] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,oldalloc,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 29.975732][ T574] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.110: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 30.191251][ T605] EXT4-fs (loop3): 1 truncate cleaned up [ 30.197365][ T605] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000000001,nouid32,,errors=continue. Quota mode: none. [ 30.307597][ T623] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 30.323985][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 30.335393][ T641] xt_hashlimit: size too large, truncated to 1048576 [ 30.366322][ T623] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.558731][ T650] EXT4-fs warning (device loop0): read_mmp_block:115: Error -74 while reading MMP block 34 [ 30.660585][ T662] xt_hashlimit: size too large, truncated to 1048576 [ 30.763875][ T668] EXT4-fs (loop0): Ignoring removed bh option [ 30.781706][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,bh,usrquota,stripe=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 30.971227][ T675] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 31.008086][ T675] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 31.057811][ T686] xt_hashlimit: size too large, truncated to 1048576 [ 31.085318][ T682] FAT-fs (loop4): Directory bread(block 64) failed [ 31.105394][ T682] FAT-fs (loop4): Directory bread(block 65) failed [ 31.124131][ T682] FAT-fs (loop4): Directory bread(block 66) failed [ 31.133478][ T682] FAT-fs (loop4): Directory bread(block 67) failed [ 31.150665][ T682] FAT-fs (loop4): Directory bread(block 68) failed [ 31.163401][ T682] FAT-fs (loop4): Directory bread(block 69) failed [ 31.171969][ T682] FAT-fs (loop4): Directory bread(block 70) failed [ 31.179155][ T682] FAT-fs (loop4): Directory bread(block 71) failed [ 31.186572][ T682] FAT-fs (loop4): Directory bread(block 72) failed [ 31.193445][ T682] FAT-fs (loop4): Directory bread(block 73) failed [ 31.281084][ T701] mmap: syz.3.165 (701) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 31.389858][ T715] set_capacity_and_notify: 20 callbacks suppressed [ 31.389878][ T715] loop4: detected capacity change from 0 to 512 [ 31.491541][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 31.503459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.524353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 31.542185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.550792][ T715] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.171: dx entry: limit 0 != root limit 125 [ 31.553174][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.571721][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.580202][ T715] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.171: Corrupt directory, running e2fsck is recommended [ 31.582899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.603077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.612066][ T715] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 31.621425][ T715] EXT4-fs error (device loop4): ext4_iget_extra_inode:4597: inode #15: comm syz.4.171: corrupted in-inode xattr [ 31.634586][ T715] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.171: couldn't read orphan inode 15 (err -117) [ 31.647730][ T715] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,mb_optimize_scan=0x0000000000000000,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 31.700439][ T731] loop1: detected capacity change from 0 to 512 [ 31.748501][ T735] SELinux: failed to load policy [ 31.751414][ T731] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 31.775709][ T731] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.868653][ T756] loop4: detected capacity change from 0 to 256 [ 31.886711][ T758] loop0: detected capacity change from 0 to 1024 [ 31.942359][ T758] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 2: comm syz.0.191: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.956995][ T758] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 48: comm syz.0.191: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.972392][ T758] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.191: Failed to acquire dquot type 0 [ 31.984769][ T758] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 31.995963][ T758] EXT4-fs error (device loop0): ext4_evict_inode:283: inode #11: comm syz.0.191: mark_inode_dirty error [ 32.029390][ T758] EXT4-fs warning (device loop0): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 32.040598][ T758] EXT4-fs (loop0): 1 orphan inode deleted [ 32.046585][ T758] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 32.057329][ T43] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.086749][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 0 [ 32.147518][ T775] loop4: detected capacity change from 0 to 512 [ 32.158446][ T43] EXT4-fs error (device loop0): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.173457][ T775] EXT4-fs (loop4): Ignoring removed nobh option [ 32.180958][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6261: comm kworker/u4:2: Failed to release dquot type 0 [ 32.194175][ T283] EXT4-fs error (device loop0): __ext4_get_inode_loc:4358: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 32.208504][ T283] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 32.219714][ T283] EXT4-fs error (device loop0): ext4_quota_off:6531: inode #3: comm syz-executor: mark_inode_dirty error [ 32.240378][ T775] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 32.251462][ T775] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 32.261278][ T775] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.198: inode has both inline data and extents flags [ 32.276071][ T775] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.198: couldn't read orphan inode 13 (err -117) [ 32.288519][ T775] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x0000000000000007,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 32.367063][ T775] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 32.423418][ T780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 32.766483][ T789] loop4: detected capacity change from 0 to 512 [ 32.821425][ T789] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.895981][ T789] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.913197][ T789] EXT4-fs (loop4): 1 truncate cleaned up [ 32.919780][ T789] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.010104][ T795] loop1: detected capacity change from 0 to 512 [ 33.037203][ T795] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.044145][ T795] EXT4-fs error (device loop1): ext4_quota_enable:6429: comm syz.1.204: Bad quota inum: 2, type: 2 [ 33.063390][ T795] EXT4-fs warning (device loop1): ext4_enable_quotas:6477: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 33.078922][ T795] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 33.086107][ T795] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,noblock_validity,min_batch_time=0x0000000000000514,grpjquota=,stripe=0x0000000000000007,nombcache,noinit_itable,abort,,errors=continue. Quota mode: writeback. [ 33.137725][ T799] loop0: detected capacity change from 0 to 1024 [ 33.204990][ T807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.211'. [ 33.205753][ T811] loop1: detected capacity change from 0 to 128 [ 33.232120][ T799] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 33.251992][ T799] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.283468][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 33.283484][ T30] audit: type=1400 audit(1774535024.077:214): avc: denied { remount } for pid=810 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.310193][ T818] loop3: detected capacity change from 0 to 1024 [ 33.327346][ T818] EXT4-fs (loop3): Ignoring removed bh option [ 33.340749][ T819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 33.367199][ T818] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,nobarrier,max_dir_size_kb=0x00000000000000eb,abort,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 33.397846][ T819] hub 8-0:1.0: USB hub found [ 33.402697][ T819] hub 8-0:1.0: 1 port detected [ 33.422456][ T818] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3885: comm syz.3.214: Allocating blocks 497-513 which overlap fs metadata [ 33.444683][ T818] EXT4-fs (loop3): Remounting filesystem read-only [ 33.455098][ T818] EXT4-fs (loop3): pa ffff8881119a9e70: logic 256, phys. 385, len 8 [ 33.463651][ T818] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 33.499032][ T826] capability: warning: `syz.0.217' uses 32-bit capabilities (legacy support in use) [ 33.509075][ T828] tmpfs: Unknown parameter 'noswap' [ 33.518905][ T818] EXT4-fs (loop3): Remounting filesystem read-only [ 33.563641][ T830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 33.573857][ T30] audit: type=1400 audit(1774535024.367:215): avc: denied { write } for pid=831 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 33.590856][ T830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'. [ 33.630825][ T830] ================================================================== [ 33.639133][ T830] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 33.648133][ T830] Read of size 8 at addr ffff88810fb75dc0 by task syz.1.218/830 [ 33.656069][ T830] [ 33.658441][ T830] CPU: 0 PID: 830 Comm: syz.1.218 Not tainted syzkaller #0 [ 33.665951][ T830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.676683][ T830] Call Trace: [ 33.680096][ T830] [ 33.683145][ T830] __dump_stack+0x21/0x30 [ 33.687961][ T830] dump_stack_lvl+0x110/0x170 [ 33.692692][ T830] ? show_regs_print_info+0x20/0x20 [ 33.697965][ T830] ? load_image+0x3e0/0x3e0 [ 33.702734][ T830] print_address_description+0x7f/0x2c0 [ 33.708342][ T830] ? tc_setup_flow_action+0x870/0x3240 [ 33.714083][ T830] kasan_report+0xf1/0x140 [ 33.718570][ T830] ? tc_setup_flow_action+0x870/0x3240 [ 33.724455][ T830] __asan_report_load8_noabort+0x14/0x20 [ 33.730266][ T830] tc_setup_flow_action+0x870/0x3240 [ 33.735786][ T830] mall_replace_hw_filter+0x2cc/0x8b0 [ 33.741497][ T830] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 33.747782][ T830] ? mall_set_parms+0x520/0x520 [ 33.752781][ T830] ? tcf_exts_destroy+0xb0/0xb0 [ 33.757766][ T830] ? pcpu_alloc+0x1170/0x16e0 [ 33.762577][ T830] ? mall_set_parms+0x1e8/0x520 [ 33.767619][ T830] mall_change+0x544/0x760 [ 33.772269][ T830] ? __kasan_check_write+0x14/0x20 [ 33.777681][ T830] ? mall_get+0xa0/0xa0 [ 33.782069][ T830] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 33.788100][ T830] tc_new_tfilter+0x12e5/0x18e0 [ 33.793105][ T830] ? tcf_gate_entry_destructor+0x20/0x20 [ 33.799006][ T830] ? security_capable+0x87/0xb0 [ 33.804004][ T830] ? ns_capable+0x8c/0xf0 [ 33.808598][ T830] ? netlink_net_capable+0x125/0x160 [ 33.814184][ T830] ? tcf_gate_entry_destructor+0x20/0x20 [ 33.820163][ T830] rtnetlink_rcv_msg+0x871/0xce0 [ 33.825397][ T830] ? rtnetlink_bind+0x80/0x80 [ 33.830631][ T830] ? avc_has_perm_noaudit+0x391/0x490 [ 33.836048][ T830] ? memcpy+0x56/0x70 [ 33.840317][ T830] ? avc_has_perm_noaudit+0x30b/0x490 [ 33.845738][ T830] ? arch_stack_walk+0xee/0x140 [ 33.850633][ T830] ? avc_denied+0x1b0/0x1b0 [ 33.855269][ T830] ? stack_trace_save+0xa6/0xf0 [ 33.860275][ T830] ? avc_has_perm+0x163/0x250 [ 33.865007][ T830] ? avc_has_perm_noaudit+0x490/0x490 [ 33.870540][ T830] ? x64_sys_call+0x4b/0x9a0 [ 33.875275][ T830] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 33.881002][ T830] netlink_rcv_skb+0x1f5/0x440 [ 33.886118][ T830] ? rtnetlink_bind+0x80/0x80 [ 33.891114][ T830] ? netlink_ack+0xb50/0xb50 [ 33.895758][ T830] ? __netlink_lookup+0x387/0x3b0 [ 33.900916][ T830] rtnetlink_rcv+0x1c/0x20 [ 33.905491][ T830] netlink_unicast+0x876/0xa40 [ 33.910320][ T830] netlink_sendmsg+0x879/0xb80 [ 33.915335][ T830] ? netlink_getsockopt+0x530/0x530 [ 33.920588][ T830] ? do_futex+0xde8/0x2800 [ 33.925079][ T830] ? security_socket_sendmsg+0x82/0xa0 [ 33.930667][ T830] ? netlink_getsockopt+0x530/0x530 [ 33.935904][ T830] ____sys_sendmsg+0x5b7/0x8f0 [ 33.940812][ T830] ? __sys_sendmsg_sock+0x40/0x40 [ 33.945880][ T830] ? import_iovec+0x7c/0xb0 [ 33.950807][ T830] ___sys_sendmsg+0x236/0x2e0 [ 33.955626][ T830] ? __sys_sendmsg+0x280/0x280 [ 33.960441][ T830] ? sock_show_fdinfo+0xa0/0xa0 [ 33.965813][ T830] ? __fdget+0x1a1/0x230 [ 33.970212][ T830] __x64_sys_sendmsg+0x206/0x2f0 [ 33.975292][ T830] ? ___sys_sendmsg+0x2e0/0x2e0 [ 33.980206][ T830] ? __kasan_check_write+0x14/0x20 [ 33.985365][ T830] ? switch_fpu_return+0x15d/0x2c0 [ 33.990844][ T830] x64_sys_call+0x4b/0x9a0 [ 33.995308][ T830] do_syscall_64+0x4c/0xa0 [ 33.999830][ T830] ? clear_bhb_loop+0x50/0xa0 [ 34.004721][ T830] ? clear_bhb_loop+0x50/0xa0 [ 34.009593][ T830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.015539][ T830] RIP: 0033:0x7fe4967a4799 [ 34.019989][ T830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.040214][ T830] RSP: 002b:00007fe4951ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.048836][ T830] RAX: ffffffffffffffda RBX: 00007fe496a1dfa0 RCX: 00007fe4967a4799 [ 34.057113][ T830] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 34.065536][ T830] RBP: 00007fe49683ac99 R08: 0000000000000000 R09: 0000000000000000 [ 34.073969][ T830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.082073][ T830] R13: 00007fe496a1e038 R14: 00007fe496a1dfa0 R15: 00007ffe59a1c898 [ 34.090352][ T830] [ 34.093501][ T830] [ 34.095942][ T830] Allocated by task 830: [ 34.100316][ T830] __kasan_kmalloc+0xda/0x110 [ 34.105039][ T830] __kmalloc+0x13d/0x2c0 [ 34.109442][ T830] tcf_idr_create+0x5f/0x790 [ 34.114343][ T830] tcf_idr_create_from_flags+0x61/0x70 [ 34.120113][ T830] tcf_gact_init+0x342/0x570 [ 34.125138][ T830] tcf_action_init_1+0x3ff/0x6b0 [ 34.130468][ T830] tcf_action_init+0x233/0x7a0 [ 34.135991][ T830] tcf_exts_validate+0x24a/0x580 [ 34.141189][ T830] mall_set_parms+0x48/0x520 [ 34.146102][ T830] mall_change+0x478/0x760 [ 34.151029][ T830] tc_new_tfilter+0x12e5/0x18e0 [ 34.156903][ T830] rtnetlink_rcv_msg+0x871/0xce0 [ 34.162363][ T830] netlink_rcv_skb+0x1f5/0x440 [ 34.167361][ T830] rtnetlink_rcv+0x1c/0x20 [ 34.171823][ T830] netlink_unicast+0x876/0xa40 [ 34.177077][ T830] netlink_sendmsg+0x879/0xb80 [ 34.181925][ T830] ____sys_sendmsg+0x5b7/0x8f0 [ 34.188360][ T830] ___sys_sendmsg+0x236/0x2e0 [ 34.193395][ T830] __x64_sys_sendmsg+0x206/0x2f0 [ 34.198792][ T830] x64_sys_call+0x4b/0x9a0 [ 34.203475][ T830] do_syscall_64+0x4c/0xa0 [ 34.208372][ T830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.214403][ T830] [ 34.216762][ T830] The buggy address belongs to the object at ffff88810fb75d00 [ 34.216762][ T830] which belongs to the cache kmalloc-192 of size 192 [ 34.231114][ T830] The buggy address is located 0 bytes to the right of [ 34.231114][ T830] 192-byte region [ffff88810fb75d00, ffff88810fb75dc0) [ 34.245541][ T830] The buggy address belongs to the page: [ 34.251210][ T830] page:ffffea00043edd40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fb75 [ 34.261589][ T830] flags: 0x4000000000000200(slab|zone=1) [ 34.267377][ T830] raw: 4000000000000200 ffffea0004329580 0000000500000005 ffff888100042c00 [ 34.276541][ T830] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 34.285149][ T830] page dumped because: kasan: bad access detected [ 34.291709][ T830] page_owner tracks the page as allocated [ 34.297546][ T830] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 102, ts 6657108163, free_ts 6657086059 [ 34.313730][ T830] post_alloc_hook+0x192/0x1b0 [ 34.318835][ T830] prep_new_page+0x1c/0x110 [ 34.323527][ T830] get_page_from_freelist+0x2d3a/0x2dc0 [ 34.329140][ T830] __alloc_pages+0x1a2/0x460 [ 34.333950][ T830] new_slab+0xa1/0x4d0 [ 34.338053][ T830] ___slab_alloc+0x381/0x810 [ 34.342674][ T830] __slab_alloc+0x49/0x90 [ 34.347215][ T830] kmem_cache_alloc_trace+0x146/0x270 [ 34.352634][ T830] kernfs_fop_open+0x343/0xb30 [ 34.357751][ T830] do_dentry_open+0x834/0x1010 [ 34.363152][ T830] vfs_open+0x73/0x80 [ 34.367413][ T830] path_openat+0x26a6/0x2f20 [ 34.372143][ T830] do_filp_open+0x1e2/0x410 [ 34.376699][ T830] do_sys_openat2+0x15e/0x7f0 [ 34.381511][ T830] __x64_sys_openat+0x136/0x160 [ 34.386411][ T830] x64_sys_call+0x219/0x9a0 [ 34.391056][ T830] page last free stack trace: [ 34.396091][ T830] free_unref_page_prepare+0x542/0x550 [ 34.401670][ T830] free_unref_page+0xae/0x540 [ 34.406472][ T830] __free_pages+0x6c/0x100 [ 34.411402][ T830] free_pages+0x82/0x90 [ 34.415702][ T830] selinux_genfs_get_sid+0x20b/0x250 [ 34.421142][ T830] inode_doinit_with_dentry+0x87a/0xd80 [ 34.427007][ T830] selinux_d_instantiate+0x27/0x40 [ 34.432196][ T830] security_d_instantiate+0x9e/0xf0 [ 34.437622][ T830] d_splice_alias+0x6d/0x390 [ 34.442262][ T830] kernfs_iop_lookup+0x2c2/0x310 [ 34.447569][ T830] path_openat+0xfc9/0x2f20 [ 34.452203][ T830] do_filp_open+0x1e2/0x410 [ 34.456874][ T830] do_sys_openat2+0x15e/0x7f0 [ 34.461887][ T830] __x64_sys_openat+0x136/0x160 [ 34.466780][ T830] x64_sys_call+0x219/0x9a0 [ 34.471354][ T830] do_syscall_64+0x4c/0xa0 [ 34.476230][ T830] [ 34.478659][ T830] Memory state around the buggy address: [ 34.484402][ T830] ffff88810fb75c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.492670][ T830] ffff88810fb75d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 34.501159][ T830] >ffff88810fb75d80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 34.509277][ T830] ^ [ 34.515751][ T830] ffff88810fb75e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.524118][ T830] ffff88810fb75e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.532555][ T830] ================================================================== [ 34.540642][ T830] Disabling lock debugging due to kernel taint [ 34.570502][ T30] audit: type=1400 audit(1774535025.367:216): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 34.606446][ T30] audit: type=1400 audit(1774535025.367:217): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.630209][ T30] audit: type=1400 audit(1774535025.367:218): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.652173][ T30] audit: type=1400 audit(1774535025.367:219): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.673864][ T30] audit: type=1400 audit(1774535025.367:220): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.695192][ T30] audit: type=1400 audit(1774535025.367:221): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.719231][ T30] audit: type=1400 audit(1774535025.367:222): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.788755][ T30] audit: type=1400 audit(1774535025.587:223): avc: denied { create } for pid=836 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1