last executing test programs: 1m7.934295447s ago: executing program 2 (id=766): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000980)="f871", 0x2}], 0x1, 0xa, 0x0, 0x0) 1m7.687568191s ago: executing program 2 (id=775): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m6.822213528s ago: executing program 2 (id=793): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="9bdd1b3ed6373d4a08d45ed6b43187fe14011e9ff8d3bbeee2c486f22486c2e4e9b5e7678a49fa604e59eabc6612ca58ac2602f457691c9e65b7e0ab53f207162cb3c1f71905", 0x46}, {0x0}, {0x0}], 0x3}, 0x400040c0) 1m5.902967979s ago: executing program 2 (id=815): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) setuid(0xee01) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @auto="c19e91c204bff48d"}}) 1m5.874625971s ago: executing program 2 (id=817): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) open(0x0, 0x64842, 0x2) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 1m4.715808345s ago: executing program 2 (id=834): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x6f48}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1m4.62275004s ago: executing program 32 (id=834): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x6f48}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 50.375025067s ago: executing program 1 (id=1269): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x8000001}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60040d0}, 0x40000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) 50.31177202s ago: executing program 1 (id=1272): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 50.253149324s ago: executing program 1 (id=1274): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0) 50.1430726s ago: executing program 1 (id=1279): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000080)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/../file0\x00', 0x100, 0x10, &(0x7f00000002c0)) 50.090421403s ago: executing program 1 (id=1280): r0 = syz_io_uring_setup(0x3471, &(0x7f00000003c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) unshare(0x22020600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8524a9af801bb0f, 0x0, r0, 0x0, 0x0, 0x4, 0x240940, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 49.95101497s ago: executing program 1 (id=1286): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 49.917179562s ago: executing program 33 (id=1286): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 27.486890122s ago: executing program 5 (id=1880): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000000)) 27.269907724s ago: executing program 5 (id=1881): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x3, 0x171}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 27.195681398s ago: executing program 5 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 27.171985349s ago: executing program 5 (id=1883): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 27.065742185s ago: executing program 5 (id=1884): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x40088c5, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @loopback, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) 26.854225927s ago: executing program 5 (id=1886): r0 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x6b}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 26.763414932s ago: executing program 34 (id=1886): r0 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x6b}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 23.726655249s ago: executing program 0 (id=1958): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)='\r', 0x1, 0x6d91fb6102d8d9cc, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) 23.726372799s ago: executing program 0 (id=1959): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2], 0x0, 0x2, 0x1}}, 0x40) 23.567564738s ago: executing program 0 (id=1963): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23.222808947s ago: executing program 0 (id=1967): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 23.042420607s ago: executing program 0 (id=1974): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@phonet={0x23, 0x7f, 0x1, 0xa}}) io_uring_enter(r0, 0x291c, 0x0, 0x0, 0x0, 0x0) 22.704339136s ago: executing program 4 (id=1982): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040)) 22.411037012s ago: executing program 0 (id=1986): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 22.401099593s ago: executing program 35 (id=1986): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 22.397424732s ago: executing program 4 (id=1989): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 22.255798061s ago: executing program 4 (id=1992): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='LKG'], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 22.150680527s ago: executing program 4 (id=1995): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 21.711479831s ago: executing program 4 (id=2002): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 21.335020702s ago: executing program 4 (id=2009): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x128b, &(0x7f0000003b40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x3188808, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) 21.276045415s ago: executing program 36 (id=2009): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x128b, &(0x7f0000003b40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x3188808, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) 1.441375371s ago: executing program 3 (id=2521): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/1463], 0x1, 0x11f4, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.136096417s ago: executing program 3 (id=2525): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x2, 0x2, 0x2a}, 0x2c) 970.133787ms ago: executing program 3 (id=2532): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0xd6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 857.560493ms ago: executing program 3 (id=2535): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0xfffffff9, 0x10100, 0xfffffffd}, &(0x7f0000000400)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 770.753298ms ago: executing program 3 (id=2537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0x80000000, 0x4) syz_emit_ethernet(0x83, &(0x7f0000010100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x4d, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}, {"329cef926a6bf8b9d155b969ad95686aa8b2d97df8affbef111c3e651ce59e46a6326b1599a80668a15351a42ee67f84b0ab609627023f5198"}}}}}}}, 0x0) 730.89784ms ago: executing program 3 (id=2540): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002e00)=""/257, 0x101}, {0x0}], 0x2}, 0xfff}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 662.057434ms ago: executing program 6 (id=2544): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="03", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="4d5722d585a8", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 632.634985ms ago: executing program 6 (id=2545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 632.103266ms ago: executing program 7 (id=2546): r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, 0x0, 0xfffffffc}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e22, 0x6fe3, @mcast2, 0x393}, 0x0, {[0xbb7, 0x6, 0x7, 0x9, 0xbd, 0x7ff, 0xbb23, 0x400]}}, 0x5c) 579.007008ms ago: executing program 6 (id=2547): r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r0, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r1, 0x1f82, 0x0, 0x0, 0x0, 0x0) 578.757418ms ago: executing program 9 (id=2548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 567.665299ms ago: executing program 7 (id=2550): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x10, 0x6, 0x10001) 557.342ms ago: executing program 6 (id=2551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 459.049045ms ago: executing program 8 (id=2552): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 458.819295ms ago: executing program 6 (id=2553): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x1, 0x3, 0xfc7, 0x10, r0}) 427.758757ms ago: executing program 8 (id=2554): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/81, 0x51}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) 407.149738ms ago: executing program 6 (id=2555): r0 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 389.401869ms ago: executing program 9 (id=2556): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x0, 0xd, 0x7, 0xffffffff, 0x20, "01000000000e65300000001e00000200"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) 388.434399ms ago: executing program 7 (id=2557): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$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") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 288.869374ms ago: executing program 8 (id=2558): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x18e03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0xc044) 270.969235ms ago: executing program 9 (id=2559): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 175.248721ms ago: executing program 7 (id=2560): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0xffff, 0x7}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x17, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x6, 0x810000, 0xe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x2, 0x5, 0x5, 0xfffd, 0x6, 0x25a2, 0x9, 0x1000, [{0xf, 0xe, 0xffffffa0, 0x10001}, {0x3, 0xcd2, 0x7, 0x7}, {0xb102, 0x40, 0x1ff, 0x90c1}, {0xf, 0x2000, 0x4, 0x7634293a}, {0x800, 0x9, 0x5, 0x4}]}}]}}]}, 0x94}}, 0x404c004) 127.131493ms ago: executing program 8 (id=2561): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 126.935773ms ago: executing program 9 (id=2562): r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03701ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc060023ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[]) 126.109544ms ago: executing program 7 (id=2563): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x3514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) wait4(r0, 0x0, 0x2, 0x0) 109.309964ms ago: executing program 9 (id=2564): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 50.425098ms ago: executing program 8 (id=2565): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 23.000749ms ago: executing program 7 (id=2566): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 5.8312ms ago: executing program 8 (id=2567): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000008c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x108) 0s ago: executing program 9 (id=2568): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x6, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, r0, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x24040890) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") kernel console output (not intermixed with test programs): dge_slave_1: left allmulticast mode [ 82.382738][ T52] bridge_slave_1: left promiscuous mode [ 82.388593][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.400273][ T52] bridge_slave_0: left allmulticast mode [ 82.406089][ T52] bridge_slave_0: left promiscuous mode [ 82.411829][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.529073][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.538830][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.548279][ T52] bond0 (unregistering): Released all slaves [ 82.556626][ T52] bond1 (unregistering): Released all slaves [ 82.622933][ T6795] loop3: detected capacity change from 0 to 512 [ 82.632827][ T52] hsr_slave_0: left promiscuous mode [ 82.648132][ T52] hsr_slave_1: left promiscuous mode [ 82.653811][ T6795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.673906][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.693910][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.706772][ T6795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.737590][ T6795] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.786610][ T52] team0 (unregistering): Port device team_slave_1 removed [ 82.808505][ T52] team0 (unregistering): Port device team_slave_0 removed [ 82.966589][ T6820] loop0: detected capacity change from 0 to 512 [ 82.977650][ T6820] EXT4-fs: Ignoring removed oldalloc option [ 82.997328][ T6820] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.031139][ T6820] EXT4-fs (loop0): 1 truncate cleaned up [ 83.053058][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 83.053135][ T29] audit: type=1400 audit(1768903191.270:763): avc: denied { create } for pid=6819 comm="syz.0.1301" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 83.150638][ T6830] loop5: detected capacity change from 0 to 256 [ 83.174848][ T6753] chnl_net:caif_netlink_parms(): no params data found [ 83.190654][ T6830] FAT-fs (loop5): Directory bread(block 64) failed [ 83.210834][ T6830] FAT-fs (loop5): Directory bread(block 65) failed [ 83.233338][ T6830] FAT-fs (loop5): Directory bread(block 66) failed [ 83.240032][ T6830] FAT-fs (loop5): Directory bread(block 67) failed [ 83.249039][ T6830] FAT-fs (loop5): Directory bread(block 68) failed [ 83.262154][ T6830] FAT-fs (loop5): Directory bread(block 69) failed [ 83.268852][ T6830] FAT-fs (loop5): Directory bread(block 70) failed [ 83.275999][ T6830] FAT-fs (loop5): Directory bread(block 71) failed [ 83.282589][ T6830] FAT-fs (loop5): Directory bread(block 72) failed [ 83.289235][ T6830] FAT-fs (loop5): Directory bread(block 73) failed [ 83.341055][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.348287][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.356428][ T6753] bridge_slave_0: entered allmulticast mode [ 83.366837][ T6753] bridge_slave_0: entered promiscuous mode [ 83.374086][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.381314][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.389429][ T29] audit: type=1400 audit(1768903191.590:764): avc: denied { open } for pid=6844 comm="syz.0.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.408627][ T29] audit: type=1400 audit(1768903191.590:765): avc: denied { kernel } for pid=6844 comm="syz.0.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.425687][ T6753] bridge_slave_1: entered allmulticast mode [ 83.428015][ T29] audit: type=1400 audit(1768903191.600:766): avc: denied { tracepoint } for pid=6844 comm="syz.0.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.465226][ T6753] bridge_slave_1: entered promiscuous mode [ 83.474278][ T29] audit: type=1400 audit(1768903191.630:767): avc: denied { watch watch_reads } for pid=6845 comm="syz.5.1306" path="/proc/207" dev="proc" ino=15884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.497312][ T29] audit: type=1326 audit(1768903191.680:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecdf9acb9 code=0x7ffc0000 [ 83.520674][ T29] audit: type=1326 audit(1768903191.680:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecdf9acb9 code=0x7ffc0000 [ 83.544078][ T29] audit: type=1326 audit(1768903191.680:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecdf9acb9 code=0x7ffc0000 [ 83.567525][ T29] audit: type=1326 audit(1768903191.680:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ecdf9acb9 code=0x7ffc0000 [ 83.591462][ T29] audit: type=1326 audit(1768903191.680:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ecdf9acb9 code=0x7ffc0000 [ 83.599227][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.660358][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.691054][ T6856] loop5: detected capacity change from 0 to 256 [ 83.754370][ T6867] loop4: detected capacity change from 0 to 1024 [ 83.762023][ T6753] team0: Port device team_slave_0 added [ 83.769112][ T6867] EXT4-fs: Ignoring removed orlov option [ 83.774911][ T6867] EXT4-fs: inline encryption not supported [ 83.790850][ T6753] team0: Port device team_slave_1 added [ 83.834383][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.841439][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.867441][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.879082][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.886107][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.912135][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.944096][ T6753] hsr_slave_0: entered promiscuous mode [ 83.957208][ T6753] hsr_slave_1: entered promiscuous mode [ 83.964745][ T6753] debugfs: 'hsr0' already exists in 'hsr' [ 83.970521][ T6753] Cannot create hsr debugfs directory [ 84.015325][ T6888] bridge0: entered allmulticast mode [ 84.092131][ T6896] ªªªªªª: renamed from vlan0 (while UP) [ 84.139791][ T6905] all (unregistering): Released all slaves [ 84.198878][ T6914] loop3: detected capacity change from 0 to 1024 [ 84.205825][ T6914] EXT4-fs: Ignoring removed orlov option [ 84.211521][ T6914] EXT4-fs: inline encryption not supported [ 84.367628][ T6753] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.387223][ T6753] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.400160][ T6753] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.419775][ T6753] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.516560][ T6939] bridge0: entered allmulticast mode [ 84.626787][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.646403][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.659192][ T1697] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.666361][ T1697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.700556][ T1697] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.707740][ T1697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.746734][ T6753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.766346][ T6964] EXT4-fs: Ignoring removed bh option [ 84.838729][ T6964] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.854137][ T6964] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 84.866643][ T6964] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.866643][ T6964] [ 84.876441][ T6964] EXT4-fs (loop5): Total free blocks count 0 [ 84.882469][ T6964] EXT4-fs (loop5): Free/Dirty block details [ 84.888464][ T6964] EXT4-fs (loop5): free_blocks=2415919104 [ 84.894209][ T6964] EXT4-fs (loop5): dirty_blocks=16 [ 84.899376][ T6964] EXT4-fs (loop5): Block reservation details [ 84.905402][ T6964] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 84.918702][ T6973] all (unregistering): Released all slaves [ 84.937908][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.028958][ T6986] netlink: 'syz.3.1348': attribute type 6 has an invalid length. [ 85.168560][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 85.186574][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 85.219042][ T6753] veth0_vlan: entered promiscuous mode [ 85.231267][ T6753] veth1_vlan: entered promiscuous mode [ 85.266567][ T6753] veth0_macvtap: entered promiscuous mode [ 85.286634][ T6753] veth1_macvtap: entered promiscuous mode [ 85.298586][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.314182][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.337710][ T851] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.351181][ T7017] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿ' [ 85.365350][ T851] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.374882][ T851] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.390691][ T851] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.485525][ T7020] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.1354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 85.560408][ T7032] FAT-fs (loop3): Directory bread(block 64) failed [ 85.571735][ T7030] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1357: Allocating blocks 385-513 which overlap fs metadata [ 85.604717][ T7032] FAT-fs (loop3): Directory bread(block 65) failed [ 85.611427][ T7032] FAT-fs (loop3): Directory bread(block 66) failed [ 85.617257][ T7036] netlink: 'syz.6.1360': attribute type 6 has an invalid length. [ 85.618194][ T7032] FAT-fs (loop3): Directory bread(block 67) failed [ 85.632532][ T7032] FAT-fs (loop3): Directory bread(block 68) failed [ 85.639192][ T7032] FAT-fs (loop3): Directory bread(block 69) failed [ 85.645869][ T7032] FAT-fs (loop3): Directory bread(block 70) failed [ 85.648209][ T7030] EXT4-fs (loop4): pa ffff888107a27770: logic 16, phys. 129, len 24 [ 85.652457][ T7032] FAT-fs (loop3): Directory bread(block 71) failed [ 85.660684][ T7030] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 85.668637][ T7032] FAT-fs (loop3): Directory bread(block 72) failed [ 85.683726][ T7032] FAT-fs (loop3): Directory bread(block 73) failed [ 85.704935][ T7030] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 85.717184][ T7030] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.717184][ T7030] [ 85.726880][ T7030] EXT4-fs (loop4): Total free blocks count 0 [ 85.732898][ T7030] EXT4-fs (loop4): Free/Dirty block details [ 85.738896][ T7030] EXT4-fs (loop4): free_blocks=128 [ 85.744167][ T7030] EXT4-fs (loop4): dirty_blocks=0 [ 85.749312][ T7030] EXT4-fs (loop4): Block reservation details [ 85.755387][ T7030] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 85.882204][ T7052] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿ' [ 86.042476][ T7064] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.1370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 86.076158][ T7069] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.087100][ T7069] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.104663][ T7069] JBD2: no valid journal superblock found [ 86.110732][ T7069] EXT4-fs (loop4): Could not load journal inode [ 86.210180][ T7079] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.261370][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1378'. [ 86.280999][ T7079] EXT4-fs (loop4): shut down requested (2) [ 86.310566][ T7090] EXT4-fs: inline encryption not supported [ 86.337180][ T7090] EXT4-fs: Ignoring removed nobh option [ 86.342815][ T7090] EXT4-fs: Ignoring removed bh option [ 86.452645][ T7100] EXT4-fs: Ignoring removed bh option [ 86.515496][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1384'. [ 86.574377][ T7100] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.612390][ T7100] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 86.624746][ T7100] EXT4-fs (loop6): This should not happen!! Data will be lost [ 86.624746][ T7100] [ 86.634401][ T7100] EXT4-fs (loop6): Total free blocks count 0 [ 86.640511][ T7100] EXT4-fs (loop6): Free/Dirty block details [ 86.646458][ T7100] EXT4-fs (loop6): free_blocks=2415919104 [ 86.652420][ T7100] EXT4-fs (loop6): dirty_blocks=16 [ 86.657657][ T7100] EXT4-fs (loop6): Block reservation details [ 86.663867][ T7100] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 86.696228][ T7111] set_capacity_and_notify: 15 callbacks suppressed [ 86.696291][ T7111] loop3: detected capacity change from 0 to 512 [ 86.746042][ T7111] EXT4-fs: Ignoring removed bh option [ 86.768473][ T7111] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.982935][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'. [ 87.138814][ T7149] loop4: detected capacity change from 0 to 512 [ 87.151368][ T7149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.196055][ T7149] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.450092][ T7168] loop0: detected capacity change from 0 to 128 [ 87.533525][ T7177] loop0: detected capacity change from 0 to 128 [ 87.926227][ T7193] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1423'. [ 88.068072][ T1730] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.178533][ T7210] loop4: detected capacity change from 0 to 1024 [ 88.186665][ T7210] EXT4-fs: inline encryption not supported [ 88.192655][ T7210] EXT4-fs: Ignoring removed nobh option [ 88.198283][ T7210] EXT4-fs: Ignoring removed bh option [ 88.285102][ T1730] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.349001][ T1730] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.385147][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 88.422945][ T1730] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.539720][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.546913][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.554813][ T7207] bridge_slave_0: entered allmulticast mode [ 88.561517][ T7207] bridge_slave_0: entered promiscuous mode [ 88.575860][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.582975][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.601392][ T7207] bridge_slave_1: entered allmulticast mode [ 88.608031][ T7207] bridge_slave_1: entered promiscuous mode [ 88.631290][ T1730] bridge_slave_1: left allmulticast mode [ 88.637012][ T1730] bridge_slave_1: left promiscuous mode [ 88.642766][ T1730] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.696785][ T1730] bridge_slave_0: left allmulticast mode [ 88.702503][ T1730] bridge_slave_0: left promiscuous mode [ 88.708331][ T1730] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.849001][ T7254] loop5: detected capacity change from 0 to 8192 [ 88.868819][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 88.868850][ T29] audit: type=1400 audit(1768903197.090:804): avc: denied { mounton } for pid=7253 comm="syz.5.1437" path="/122/file2/bus" dev="loop5" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 88.915565][ T5481] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 88.923492][ T5481] FAT-fs (loop5): Filesystem has been set read-only [ 88.937327][ T1730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.978033][ T1730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.005740][ T1730] bond0 (unregistering): Released all slaves [ 89.055584][ T7263] loop3: detected capacity change from 0 to 512 [ 89.067993][ T7263] EXT4-fs: Ignoring removed nobh option [ 89.136956][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.153837][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.163806][ T7263] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.202239][ T1730] hsr_slave_0: left promiscuous mode [ 89.230384][ T1730] hsr_slave_1: left promiscuous mode [ 89.236447][ T1730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.244093][ T1730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.252020][ T1730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.259455][ T1730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.277651][ T7272] loop5: detected capacity change from 0 to 1024 [ 89.311986][ T7272] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.326449][ T1730] veth1_macvtap: left promiscuous mode [ 89.332003][ T1730] veth0_macvtap: left promiscuous mode [ 89.339559][ T29] audit: type=1400 audit(1768903197.560:805): avc: denied { map } for pid=7271 comm="syz.5.1443" path="/125/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.340986][ T7272] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.1443: lblock 0 mapped to illegal pblock 0 (length 1) [ 89.362812][ T1730] veth1_vlan: left promiscuous mode [ 89.388402][ T7272] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 89.400711][ T7272] EXT4-fs (loop5): This should not happen!! Data will be lost [ 89.400711][ T7272] [ 89.433126][ T1730] veth0_vlan: left promiscuous mode [ 89.465803][ T29] audit: type=1400 audit(1768903197.560:806): avc: denied { execute } for pid=7271 comm="syz.5.1443" path="/125/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.497057][ T7288] loop5: detected capacity change from 0 to 128 [ 89.583018][ T7294] syz.4.1448 (7294) used greatest stack depth: 9104 bytes left [ 89.717362][ T29] audit: type=1326 audit(1768903197.940:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7304 comm="syz.5.1451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8769facb9 code=0x0 [ 89.751629][ T1730] team0 (unregistering): Port device team_slave_1 removed [ 89.762013][ T1730] team0 (unregistering): Port device team_slave_0 removed [ 89.843838][ T7207] team0: Port device team_slave_0 added [ 89.858384][ T7207] team0: Port device team_slave_1 added [ 89.890255][ T7311] loop4: detected capacity change from 0 to 1024 [ 89.897578][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.904638][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.930629][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.941999][ T7311] EXT4-fs: Ignoring removed bh option [ 89.947518][ T7311] EXT4-fs: inline encryption not supported [ 89.953767][ T7311] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.967183][ T7311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 89.984902][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.991912][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.017937][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.031053][ T7311] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.1453: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.053356][ T7207] hsr_slave_0: entered promiscuous mode [ 90.061492][ T7207] hsr_slave_1: entered promiscuous mode [ 90.067479][ T7207] debugfs: 'hsr0' already exists in 'hsr' [ 90.072691][ T7311] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 90.073226][ T7207] Cannot create hsr debugfs directory [ 90.130301][ T7311] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.1453: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.175392][ T7311] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 90.184275][ T7311] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1453: Failed to acquire dquot type 0 [ 90.209810][ T7311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.219853][ T7311] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.1453: mark_inode_dirty error [ 90.231563][ T7311] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 90.254556][ T7311] EXT4-fs (loop4): 1 orphan inode deleted [ 90.275097][ T1730] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.290368][ T7333] EXT4-fs: Ignoring removed orlov option [ 90.296222][ T7333] EXT4-fs: Ignoring removed i_version option [ 90.302293][ T7333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.318250][ T1730] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 90.326843][ T1730] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 90.341001][ T7311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1453: Invalid inode table block 1 in block_group 0 [ 90.341989][ T7333] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.361661][ T7333] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 90.374638][ T7333] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.380121][ T7311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.384939][ T7333] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 90.431510][ T7333] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 90.446215][ T7333] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 90.461821][ T3325] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 90.487837][ T7333] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1456: bg 0: block 40: padding at end of block bitmap is not set [ 90.510705][ T3325] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.520897][ T7207] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 90.528131][ T7333] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 90.539281][ T7207] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.546116][ T3325] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 90.557968][ T7333] EXT4-fs (loop3): 1 truncate cleaned up [ 90.566483][ T7207] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.575901][ T7207] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.688399][ T7360] IPv6: Can't replace route, no match found [ 90.709516][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.731659][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.757887][ T1697] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.765033][ T1697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.796985][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.804238][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.858620][ T29] audit: type=1326 audit(1768903199.080:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb99a0acb9 code=0x7ffc0000 [ 90.882193][ T29] audit: type=1326 audit(1768903199.080:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.3.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb99a0acb9 code=0x7ffc0000 [ 91.012315][ T7386] EXT4-fs: inline encryption not supported [ 91.074334][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.084079][ T7386] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.154808][ T7404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.164561][ T7386] EXT4-fs error (device loop5): ext4_empty_dir:3075: inode #12: comm syz.5.1467: invalid size [ 91.226800][ T7404] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.413130][ T7207] veth0_vlan: entered promiscuous mode [ 91.431051][ T7207] veth1_vlan: entered promiscuous mode [ 91.487626][ T7207] veth0_macvtap: entered promiscuous mode [ 91.504058][ T7207] veth1_macvtap: entered promiscuous mode [ 91.534875][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.551373][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.579273][ T2687] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.597719][ T2687] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.616141][ T2687] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.632846][ T851] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.656960][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 91.705729][ T7456] EXT4-fs: Ignoring removed bh option [ 91.733714][ T7458] tun0: tun_chr_ioctl cmd 1074025675 [ 91.739098][ T7458] tun0: persist enabled [ 91.744085][ T7458] tun0: tun_chr_ioctl cmd 1074025675 [ 91.749517][ T7458] tun0: persist enabled [ 91.768578][ T7462] set_capacity_and_notify: 5 callbacks suppressed [ 91.768702][ T7462] loop6: detected capacity change from 0 to 512 [ 91.813055][ T7462] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.830938][ T7468] loop0: detected capacity change from 0 to 512 [ 91.837740][ T7468] EXT4-fs: inline encryption not supported [ 91.864380][ T7468] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.878918][ T7468] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz.0.1482: invalid size [ 92.025371][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1489'. [ 92.037537][ T7486] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 92.046151][ T7486] macsec1: entered allmulticast mode [ 92.051481][ T7486] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 92.073936][ T7486] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 92.081148][ T7486] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 92.106152][ T7490] loop5: detected capacity change from 0 to 128 [ 92.157558][ T7495] dummy0: entered promiscuous mode [ 92.163553][ T7495] dummy0: left promiscuous mode [ 92.247793][ T7501] loop6: detected capacity change from 0 to 2048 [ 92.307663][ T3313] Alternate GPT is invalid, using primary GPT. [ 92.313982][ T3313] loop6: p2 p3 p7 [ 92.344827][ T7501] Alternate GPT is invalid, using primary GPT. [ 92.351282][ T7501] loop6: p2 p3 p7 [ 92.412668][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 92.426118][ T6271] udevd[6271]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 92.473546][ T6271] udevd[6271]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 92.486972][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 92.497260][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 92.576863][ T7522] loop6: detected capacity change from 0 to 128 [ 92.590839][ T7526] dummy0: entered promiscuous mode [ 92.596770][ T7526] dummy0: left promiscuous mode [ 92.744421][ T7537] SELinux: failed to load policy [ 92.848926][ T7550] loop4: detected capacity change from 0 to 512 [ 92.871193][ T7550] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.476581][ T7573] IPv6: Can't replace route, no match found [ 93.624826][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 93.752883][ T7582] netlink: 'syz.6.1530': attribute type 11 has an invalid length. [ 93.760786][ T7582] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1530'. [ 93.795258][ T7582] netlink: 'syz.6.1530': attribute type 11 has an invalid length. [ 93.803152][ T7582] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1530'. [ 93.959188][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 93.959207][ T29] audit: type=1326 audit(1768903202.180:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.012374][ T29] audit: type=1326 audit(1768903202.180:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.035838][ T29] audit: type=1326 audit(1768903202.180:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.059286][ T29] audit: type=1326 audit(1768903202.190:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.082789][ T29] audit: type=1326 audit(1768903202.190:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.106176][ T29] audit: type=1326 audit(1768903202.190:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.129602][ T29] audit: type=1326 audit(1768903202.220:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.190204][ T29] audit: type=1326 audit(1768903202.410:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7590 comm="syz.6.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 94.249685][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'. [ 94.465045][ T7619] loop6: detected capacity change from 0 to 1024 [ 94.511623][ T7619] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.540549][ T7619] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 1: comm syz.6.1543: lblock 1 mapped to illegal pblock 1 (length 5) [ 94.567233][ T7619] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 94.579592][ T7619] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.579592][ T7619] [ 94.648158][ T7630] bond0: entered promiscuous mode [ 94.653268][ T7630] bond_slave_0: entered promiscuous mode [ 94.659167][ T7630] bond_slave_1: entered promiscuous mode [ 94.676224][ T7630] batadv0: entered promiscuous mode [ 94.695237][ T1697] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 94.713063][ T1697] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 94.725437][ T1697] EXT4-fs (loop6): This should not happen!! Data will be lost [ 94.725437][ T1697] [ 94.726303][ T7630] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 94.754829][ T7630] bond0: left promiscuous mode [ 94.759647][ T7630] bond_slave_0: left promiscuous mode [ 94.765228][ T7630] bond_slave_1: left promiscuous mode [ 94.792293][ T7632] loop6: detected capacity change from 0 to 128 [ 94.799211][ T7630] batadv0: left promiscuous mode [ 94.821624][ T29] audit: type=1400 audit(1768903203.040:864): avc: denied { mounton } for pid=7631 comm="syz.6.1549" path="/" dev="loop6" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 94.865212][ T29] audit: type=1400 audit(1768903203.090:865): avc: denied { mount } for pid=7631 comm="syz.6.1549" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 94.905614][ T7207] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 94.914195][ T7207] FAT-fs (loop6): Filesystem has been set read-only [ 94.992964][ T7638] netlink: 'syz.5.1552': attribute type 11 has an invalid length. [ 95.000936][ T7638] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1552'. [ 95.010577][ T7638] netlink: 'syz.5.1552': attribute type 11 has an invalid length. [ 95.018485][ T7638] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1552'. [ 95.027734][ T7634] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 95.379925][ T7664] SELinux: failed to load policy [ 95.417729][ T7676] bridge0: port 3(macvtap1) entered blocking state [ 95.424374][ T7676] bridge0: port 3(macvtap1) entered disabled state [ 95.444577][ T7676] macvtap1: entered allmulticast mode [ 95.450025][ T7676] bridge0: entered allmulticast mode [ 95.456175][ T7676] macvtap1: left allmulticast mode [ 95.461396][ T7676] bridge0: left allmulticast mode [ 95.726468][ T7712] loop4: detected capacity change from 0 to 1024 [ 95.854013][ T7732] loop4: detected capacity change from 0 to 1024 [ 95.878026][ T7732] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.949287][ T7732] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 1: comm syz.4.1587: lblock 1 mapped to illegal pblock 1 (length 5) [ 95.998440][ T7732] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 96.010822][ T7732] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.010822][ T7732] [ 96.095052][ T1697] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 96.153776][ T1697] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 96.166223][ T1697] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.166223][ T1697] [ 96.228624][ T3492] kernel read not supported for file /virtual_nci (pid: 3492 comm: kworker/1:6) [ 96.516476][ T7806] SELinux: failed to load policy [ 96.689761][ T7831] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 96.783200][ T7837] loop6: detected capacity change from 0 to 1024 [ 96.880499][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1621'. [ 97.137973][ T7881] loop5: detected capacity change from 0 to 128 [ 97.252116][ T7888] loop3: detected capacity change from 0 to 1024 [ 97.412311][ T7906] loop6: detected capacity change from 0 to 8192 [ 97.574360][ T7916] netlink: 792 bytes leftover after parsing attributes in process `syz.6.1647'. [ 97.583639][ T7916] netlink: 792 bytes leftover after parsing attributes in process `syz.6.1647'. [ 97.592779][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1647'. [ 97.840250][ T7941] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1659'. [ 98.033312][ T7951] loop6: detected capacity change from 0 to 512 [ 98.051742][ T7951] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 98.223643][ T7967] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1671'. [ 98.497489][ T7982] loop3: detected capacity change from 0 to 512 [ 98.520281][ T7982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.536481][ T7982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 98.551951][ T7982] System zones: 1-12 [ 98.559546][ T7982] EXT4-fs (loop3): 1 truncate cleaned up [ 98.645338][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1681'. [ 98.645531][ T7994] syz_tun: entered allmulticast mode [ 98.678521][ T7989] team0: Port device team_slave_1 removed [ 98.704535][ T7992] syz_tun: left allmulticast mode [ 98.971840][ T8028] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1699'. [ 99.015015][ T8028] net_ratelimit: 1022 callbacks suppressed [ 99.015030][ T8028] netlink: zone id is out of range [ 99.026158][ T8028] netlink: zone id is out of range [ 99.050052][ T8028] netlink: zone id is out of range [ 99.064918][ T8028] netlink: zone id is out of range [ 99.121038][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 99.121055][ T29] audit: type=1400 audit(1768903207.340:919): avc: denied { mount } for pid=8036 comm="syz.5.1703" name="/" dev="rpc_pipefs" ino=20239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 99.169986][ T8028] netlink: set zone limit has 8 unknown bytes [ 99.183118][ T8040] loop5: detected capacity change from 0 to 1024 [ 99.217647][ T8040] EXT4-fs mount: 63 callbacks suppressed [ 99.217692][ T8040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.285089][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.450904][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1711'. [ 99.474677][ T8056] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1711'. [ 99.580785][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 99.623647][ T8066] syz_tun: entered allmulticast mode [ 99.641027][ T8065] syz_tun: left allmulticast mode [ 99.693557][ T8073] loop5: detected capacity change from 0 to 256 [ 99.793348][ T8083] futex_wake_op: syz.3.1723 tries to shift op by -1; fix this program [ 99.835036][ T29] audit: type=1400 audit(1768903208.050:920): avc: denied { ioctl } for pid=8084 comm="syz.5.1724" path="socket:[19443]" dev="sockfs" ino=19443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.988894][ T8090] loop5: detected capacity change from 0 to 8192 [ 100.100015][ T8106] loop0: detected capacity change from 0 to 512 [ 100.106444][ T8107] netlink: zone id is out of range [ 100.111605][ T8107] netlink: zone id is out of range [ 100.143223][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.156056][ T8107] netlink: zone id is out of range [ 100.168086][ T8107] netlink: zone id is out of range [ 100.184801][ T8106] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.211855][ T8107] netlink: set zone limit has 8 unknown bytes [ 100.297846][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.329684][ T29] audit: type=1400 audit(1768903208.540:921): avc: denied { mounton } for pid=8111 comm="syz.5.1735" path="/proc/456/task" dev="proc" ino=20524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 100.595347][ T8136] gtp0: entered promiscuous mode [ 100.600447][ T8136] gtp0: entered allmulticast mode [ 100.618744][ T29] audit: type=1400 audit(1768903208.840:922): avc: denied { mount } for pid=8137 comm="syz.4.1747" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 100.632136][ T8138] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 100.675146][ T29] audit: type=1400 audit(1768903208.880:923): avc: denied { unmount } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 100.792673][ T29] audit: type=1400 audit(1768903209.010:924): avc: denied { name_bind } for pid=8151 comm="syz.4.1754" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 100.994362][ T8166] EXT4-fs: inline encryption not supported [ 101.018410][ T8166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.042760][ T8172] GUP no longer grows the stack in syz.5.1763 (8172): 200000004000-20000000a000 (200000002000) [ 101.053423][ T8172] CPU: 1 UID: 0 PID: 8172 Comm: syz.5.1763 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.053447][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.053458][ T8172] Call Trace: [ 101.053467][ T8172] [ 101.053474][ T8172] __dump_stack+0x1d/0x30 [ 101.053511][ T8172] dump_stack_lvl+0x95/0xd0 [ 101.053530][ T8172] dump_stack+0x15/0x1b [ 101.053634][ T8172] __get_user_pages+0x195b/0x1ea0 [ 101.053731][ T8172] ? __rcu_read_unlock+0x4e/0x70 [ 101.053749][ T8172] get_user_pages_remote+0x1d5/0x6b0 [ 101.053779][ T8172] __access_remote_vm+0x15c/0x580 [ 101.053883][ T8172] access_remote_vm+0x32/0x40 [ 101.053911][ T8172] proc_pid_cmdline_read+0x32b/0x6b0 [ 101.053935][ T8172] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 101.053958][ T8172] vfs_readv+0x432/0x6e0 [ 101.053989][ T8172] __x64_sys_preadv+0xfd/0x1c0 [ 101.054009][ T8172] x64_sys_call+0x2805/0x3000 [ 101.054031][ T8172] do_syscall_64+0xc0/0x2a0 [ 101.054130][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.054149][ T8172] RIP: 0033:0x7fb8769facb9 [ 101.054162][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.054177][ T8172] RSP: 002b:00007fb875457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 101.054194][ T8172] RAX: ffffffffffffffda RBX: 00007fb876c75fa0 RCX: 00007fb8769facb9 [ 101.054220][ T8172] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 101.054231][ T8172] RBP: 00007fb876a68bf7 R08: 0000000000000000 R09: 0000000000000000 [ 101.054242][ T8172] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 101.054252][ T8172] R13: 00007fb876c76038 R14: 00007fb876c75fa0 R15: 00007fff86cbe948 [ 101.054297][ T8172] [ 101.275471][ T7207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.308532][ T29] audit: type=1400 audit(1768903209.530:925): avc: denied { accept } for pid=8176 comm="syz.6.1765" path="socket:[20668]" dev="sockfs" ino=20668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.339715][ T8179] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.375638][ T8179] EXT4-fs (loop3): 1 truncate cleaned up [ 101.385058][ T8179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.432969][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.478199][ T8187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.491065][ T8187] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.572195][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.631594][ T8201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.679097][ T8201] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 101.702148][ T8201] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 101.714510][ T8201] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.714510][ T8201] [ 101.724168][ T8201] EXT4-fs (loop0): Total free blocks count 0 [ 101.730530][ T8201] EXT4-fs (loop0): Free/Dirty block details [ 101.735183][ T29] audit: type=1400 audit(1768903209.950:926): avc: denied { rename } for pid=8200 comm="syz.0.1776" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.736511][ T8201] EXT4-fs (loop0): free_blocks=2415919504 [ 101.764689][ T8201] EXT4-fs (loop0): dirty_blocks=16 [ 101.769835][ T8201] EXT4-fs (loop0): Block reservation details [ 101.775914][ T8201] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 101.782135][ T29] audit: type=1400 audit(1768903209.990:927): avc: denied { write } for pid=8212 comm="syz.6.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.801772][ T29] audit: type=1400 audit(1768903210.000:928): avc: denied { getopt } for pid=8210 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.848612][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.857954][ T8217] set_capacity_and_notify: 6 callbacks suppressed [ 101.857972][ T8217] loop6: detected capacity change from 0 to 512 [ 101.874114][ T8217] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.890012][ T8217] EXT4-fs (loop6): 1 truncate cleaned up [ 101.897191][ T8217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.030409][ T7207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.329703][ T8254] loop5: detected capacity change from 0 to 512 [ 102.341108][ T8254] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 102.357918][ T8254] EXT4-fs (loop5): 1 truncate cleaned up [ 102.373866][ T8254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.392048][ T8242] loop6: detected capacity change from 0 to 32768 [ 102.406944][ T8257] loop4: detected capacity change from 0 to 512 [ 102.414151][ T8257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.425412][ T3313] loop6: p1 p3 < p5 p6 > [ 102.429854][ T3313] loop6: partition table partially beyond EOD, truncated [ 102.438588][ T8257] EXT4-fs (loop4): 1 truncate cleaned up [ 102.450377][ T8257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.467971][ T8242] loop6: p1 p3 < p5 p6 > [ 102.472374][ T8242] loop6: partition table partially beyond EOD, truncated [ 102.507276][ T5481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.591453][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 102.597652][ T6271] udevd[6271]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 102.606551][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 102.622077][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 102.637987][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 102.640657][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 102.652859][ T6271] udevd[6271]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 102.658440][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 102.690434][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.027908][ T8303] loop0: detected capacity change from 0 to 128 [ 103.220019][ T8299] loop5: detected capacity change from 0 to 32768 [ 103.435322][ T8341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8341 comm=syz.6.1831 [ 103.480314][ T8343] __nla_validate_parse: 8 callbacks suppressed [ 103.480337][ T8343] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1832'. [ 103.550205][ T8348] loop6: detected capacity change from 0 to 8192 [ 103.690008][ T8356] loop6: detected capacity change from 0 to 512 [ 103.738686][ T8347] loop5: detected capacity change from 0 to 32768 [ 103.776103][ T8347] loop5: p1 p3 < p5 p6 > [ 103.780486][ T8347] loop5: partition table partially beyond EOD, truncated [ 103.944159][ T8360] loop4: detected capacity change from 0 to 32768 [ 104.103705][ T8381] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1844'. [ 104.191442][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 104.191462][ T29] audit: type=1400 audit(1768903212.410:933): avc: denied { sys_module } for pid=8392 comm="syz.4.1849" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.404232][ T8424] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1867'. [ 104.607025][ T8450] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.628083][ T8450] EXT4-fs (loop0): invalid journal inode [ 104.633929][ T8450] EXT4-fs (loop0): can't get journal size [ 104.641784][ T8450] EXT4-fs (loop0): 1 truncate cleaned up [ 104.648073][ T8450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.676329][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.939578][ T29] audit: type=1400 audit(1768903213.160:934): avc: denied { mount } for pid=8465 comm="syz.5.1883" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 104.975598][ T29] audit: type=1400 audit(1768903213.180:935): avc: denied { mounton } for pid=8465 comm="syz.5.1883" path="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 104.996924][ T29] audit: type=1400 audit(1768903213.200:936): avc: denied { unmount } for pid=5481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.016867][ T29] audit: type=1400 audit(1768903213.200:937): avc: denied { unmount } for pid=5481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.179894][ T8468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.255283][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.311353][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.366119][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.451336][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.517890][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.644261][ T52] bridge_slave_1: left allmulticast mode [ 105.649995][ T52] bridge_slave_1: left promiscuous mode [ 105.655858][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.672122][ T52] bridge_slave_0: left allmulticast mode [ 105.677871][ T52] bridge_slave_0: left promiscuous mode [ 105.683647][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.810124][ T52] bridge0 (unregistering): left allmulticast mode [ 105.857325][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.867843][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.879077][ T52] bond0 (unregistering): Released all slaves [ 105.967876][ T52] hsr_slave_0: left promiscuous mode [ 105.977998][ T52] hsr_slave_1: left promiscuous mode [ 105.988974][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.996451][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.014099][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.021614][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.045195][ T52] veth1_macvtap: left promiscuous mode [ 106.050886][ T52] veth0_macvtap: left promiscuous mode [ 106.056878][ T52] veth1_vlan: left promiscuous mode [ 106.070091][ T52] veth0_vlan: left promiscuous mode [ 106.117172][ T8564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.140715][ T8564] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.179201][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.207631][ T52] team0 (unregistering): Port device team_slave_1 removed [ 106.222525][ T52] team0 (unregistering): Port device team_slave_0 removed [ 106.276480][ T8558] bridge1: entered promiscuous mode [ 106.308219][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 106.359407][ T8582] EXT4-fs: Ignoring removed nobh option [ 106.365178][ T8582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.384022][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.391283][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.399558][ T8480] bridge_slave_0: entered allmulticast mode [ 106.406464][ T8480] bridge_slave_0: entered promiscuous mode [ 106.413740][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.420870][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.429332][ T8480] bridge_slave_1: entered allmulticast mode [ 106.435941][ T8480] bridge_slave_1: entered promiscuous mode [ 106.442640][ T8582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.484859][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.495842][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.529871][ T8480] team0: Port device team_slave_0 added [ 106.548959][ T8480] team0: Port device team_slave_1 added [ 106.568653][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.575679][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.601699][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.618295][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.625507][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.651552][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.681625][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.722204][ T29] audit: type=1400 audit(1768903214.940:938): avc: denied { create } for pid=8605 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.744335][ T8480] hsr_slave_0: entered promiscuous mode [ 106.756993][ T29] audit: type=1400 audit(1768903214.940:939): avc: denied { bind } for pid=8605 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.777422][ T8480] hsr_slave_1: entered promiscuous mode [ 106.836715][ T29] audit: type=1400 audit(1768903215.060:940): avc: denied { create } for pid=8615 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.887000][ T29] audit: type=1400 audit(1768903215.080:941): avc: denied { write } for pid=8615 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.955068][ T8480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 106.966196][ T8480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 106.977817][ T8480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 106.994106][ T8480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 107.038794][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.045930][ T8480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.053300][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.060408][ T8480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.100390][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.114201][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.137051][ T29] audit: type=1326 audit(1768903215.360:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.4.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720792acb9 code=0x7ffc0000 [ 107.163276][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.202591][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.229313][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.236419][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.247237][ T8650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1929'. [ 107.262030][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.269233][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.282842][ T8645] set_capacity_and_notify: 5 callbacks suppressed [ 107.282859][ T8645] loop6: detected capacity change from 0 to 8192 [ 107.365107][ T3409] kernel write not supported for file /ppp (pid: 3409 comm: kworker/0:3) [ 107.376683][ T7207] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 107.384558][ T7207] FAT-fs (loop6): Filesystem has been set read-only [ 107.466201][ T8668] team_slave_1: entered promiscuous mode [ 107.476398][ T8668] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.503719][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.535537][ T8668] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 107.660023][ T8689] bridge1: entered promiscuous mode [ 107.816531][ T8480] veth0_vlan: entered promiscuous mode [ 107.837133][ T8480] veth1_vlan: entered promiscuous mode [ 107.866778][ T8480] veth0_macvtap: entered promiscuous mode [ 107.892821][ T8480] veth1_macvtap: entered promiscuous mode [ 107.916229][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.928478][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.954668][ T2636] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.974035][ T2636] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.994093][ T2636] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.003509][ T2636] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.044059][ T8714] loop7: detected capacity change from 0 to 764 [ 108.181964][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1951'. [ 108.191023][ T8724] netem: incorrect gi model size [ 108.196113][ T8724] netem: change failed [ 108.390265][ T8742] loop0: detected capacity change from 0 to 128 [ 108.791276][ T8756] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 108.867192][ T8762] loop0: detected capacity change from 0 to 512 [ 108.911558][ T8762] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1967: corrupted in-inode xattr: e_value size too large [ 108.943843][ T8762] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1967: couldn't read orphan inode 15 (err -117) [ 108.977538][ T8774] team_slave_0: entered promiscuous mode [ 108.983252][ T8774] team_slave_1: entered promiscuous mode [ 108.990573][ T8762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.004099][ T8774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.033816][ T8774] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 109.066374][ T3322] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 109.085221][ T3322] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 109.089349][ T8776] loop4: detected capacity change from 0 to 1024 [ 109.130207][ T8776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.153663][ T8776] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.169791][ T8776] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.1972: lblock 0 mapped to illegal pblock 0 (length 6) [ 109.183590][ T8776] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.1972: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 109.221840][ T2636] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 5) [ 109.245531][ T3782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.255252][ T2636] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 109.267685][ T2636] EXT4-fs (loop4): This should not happen!! Data will be lost [ 109.267685][ T2636] [ 109.286735][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.408501][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 109.408522][ T29] audit: type=1326 audit(1768903217.630:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720792acb9 code=0x7ffc0000 [ 109.438219][ T29] audit: type=1326 audit(1768903217.630:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720792acb9 code=0x7ffc0000 [ 109.461910][ T29] audit: type=1326 audit(1768903217.630:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f720792acb9 code=0x7ffc0000 [ 109.485468][ T29] audit: type=1326 audit(1768903217.630:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f720792aa22 code=0x7ffc0000 [ 109.508749][ T29] audit: type=1326 audit(1768903217.630:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f720792aa22 code=0x7ffc0000 [ 109.532075][ T29] audit: type=1326 audit(1768903217.630:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720792acb9 code=0x7ffc0000 [ 109.555473][ T29] audit: type=1326 audit(1768903217.630:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8797 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720792acb9 code=0x7ffc0000 [ 109.602708][ T29] audit: type=1400 audit(1768903217.820:985): avc: denied { connect } for pid=8802 comm="syz.6.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.654226][ T2636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.664653][ T2636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 48569 - 0 [ 109.737449][ T2636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.747892][ T2636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48569 - 0 [ 109.804347][ T8810] SELinux: failed to load policy [ 109.809554][ T29] audit: type=1400 audit(1768903218.020:986): avc: denied { load_policy } for pid=8808 comm="syz.4.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 109.849345][ T2636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.859763][ T2636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48569 - 0 [ 109.888862][ T29] audit: type=1400 audit(1768903218.060:987): avc: denied { bind } for pid=8814 comm="syz.6.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.968291][ T2636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.978717][ T2636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48569 - 0 [ 110.012738][ T8833] loop4: detected capacity change from 0 to 512 [ 110.093638][ T2636] bridge_slave_1: left allmulticast mode [ 110.099400][ T2636] bridge_slave_1: left promiscuous mode [ 110.105152][ T2636] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.124217][ T2636] bridge_slave_0: left allmulticast mode [ 110.129983][ T2636] bridge_slave_0: left promiscuous mode [ 110.135735][ T2636] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.171453][ T8833] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1995: corrupted in-inode xattr: e_value size too large [ 110.238158][ T8833] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1995: couldn't read orphan inode 15 (err -117) [ 110.285708][ T8833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.290246][ T8847] loop7: detected capacity change from 0 to 1024 [ 110.339870][ T8847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.377560][ T8847] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.391870][ T3325] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 110.410301][ T3325] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 110.411554][ T8847] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.2000: lblock 0 mapped to illegal pblock 0 (length 2) [ 110.436042][ T8847] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 110.448388][ T8847] EXT4-fs (loop7): This should not happen!! Data will be lost [ 110.448388][ T8847] [ 110.462477][ T8847] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.2000: lblock 0 mapped to illegal pblock 0 (length 1) [ 110.486711][ T8847] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.2000: Freeing blocks not in datazone - block = 1, count = 1 [ 110.502573][ T2636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.514839][ T5727] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.526766][ T2636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.538137][ T2636] bond0 (unregistering): Released all slaves [ 110.544843][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.555780][ T2636] bond1 (unregistering): Released all slaves [ 110.577728][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1999'. [ 110.586782][ T8845] netem: incorrect gi model size [ 110.591736][ T8845] netem: change failed [ 110.635495][ T2636] tipc: Left network mode [ 110.654308][ T2636] hsr_slave_0: left promiscuous mode [ 110.668730][ T2636] hsr_slave_1: left promiscuous mode [ 110.674666][ T2636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.682069][ T2636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.694379][ T2636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.701866][ T2636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.715933][ T2636] team_slave_1: left promiscuous mode [ 110.731596][ T2636] veth1_macvtap: left promiscuous mode [ 110.737297][ T2636] veth0_macvtap: left promiscuous mode [ 110.743813][ T2636] veth1_vlan: left promiscuous mode [ 110.749997][ T2636] veth0_vlan: left promiscuous mode [ 110.937408][ T2636] team0 (unregistering): Port device team_slave_1 removed [ 111.186811][ T8811] chnl_net:caif_netlink_parms(): no params data found [ 111.200828][ T8909] loop7: detected capacity change from 0 to 512 [ 111.216410][ T2636] IPVS: stop unused estimator thread 0... [ 111.235035][ T8909] EXT4-fs: Ignoring removed orlov option [ 111.277266][ T8909] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 111.307664][ T8909] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2015: corrupted in-inode xattr: e_value size too large [ 111.344386][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.356653][ T8909] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2015: couldn't read orphan inode 15 (err -117) [ 111.371350][ T8909] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.419142][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.449306][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.456512][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.473399][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.474037][ T8811] bridge_slave_0: entered allmulticast mode [ 111.512880][ T8811] bridge_slave_0: entered promiscuous mode [ 111.528680][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.540253][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.547442][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.565576][ T8811] bridge_slave_1: entered allmulticast mode [ 111.578335][ T8811] bridge_slave_1: entered promiscuous mode [ 111.593707][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.641600][ T8811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.733946][ T8882] chnl_net:caif_netlink_parms(): no params data found [ 111.769690][ T8811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.779260][ T52] bridge_slave_1: left allmulticast mode [ 111.784956][ T52] bridge_slave_1: left promiscuous mode [ 111.790787][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.834637][ T52] bridge_slave_0: left allmulticast mode [ 111.840351][ T52] bridge_slave_0: left promiscuous mode [ 111.846254][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.939540][ T52] bridge0 (unregistering): left allmulticast mode [ 112.014869][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2027'. [ 112.077130][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.088201][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.103339][ T52] bond0 (unregistering): Released all slaves [ 112.115782][ T52] bond1 (unregistering): Released all slaves [ 112.131215][ T52] bond2 (unregistering): Released all slaves [ 112.304990][ T8967] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 112.350957][ T8969] loop3: detected capacity change from 0 to 1024 [ 112.363989][ T8811] team0: Port device team_slave_0 added [ 112.369953][ T52] tipc: Left network mode [ 112.387316][ T8969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.400562][ T8811] team0: Port device team_slave_1 added [ 112.412983][ T8969] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.424430][ T52] hsr_slave_0: left promiscuous mode [ 112.430795][ T52] hsr_slave_1: left promiscuous mode [ 112.440483][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.448057][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.465253][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.472807][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.478924][ T8969] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.2030: lblock 0 mapped to illegal pblock 0 (length 6) [ 112.502306][ T52] veth1_macvtap: left promiscuous mode [ 112.508080][ T52] veth0_macvtap: left promiscuous mode [ 112.524028][ T8969] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.2030: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 112.548548][ T8978] loop6: detected capacity change from 0 to 1024 [ 112.555334][ T8978] EXT4-fs: Ignoring removed orlov option [ 112.588416][ T12] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 5) [ 112.604213][ T8978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.613644][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 112.628653][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.628653][ T12] [ 112.677404][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.707889][ T52] team0 (unregistering): Port device team_slave_1 removed [ 112.733309][ T52] team0 (unregistering): Port device team_slave_0 removed [ 112.805882][ T7207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.822291][ T8997] loop3: detected capacity change from 0 to 1024 [ 112.845812][ T8997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.860067][ T8811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.867402][ T8811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.893620][ T8811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.905342][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.912438][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.932984][ T8882] bridge_slave_0: entered allmulticast mode [ 112.939757][ T8882] bridge_slave_0: entered promiscuous mode [ 112.954590][ T8811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.961608][ T8811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.987660][ T8811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.999972][ T8997] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 113.032944][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.040076][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.054592][ T8882] bridge_slave_1: entered allmulticast mode [ 113.061257][ T8882] bridge_slave_1: entered promiscuous mode [ 113.076649][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.133504][ T8882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.162134][ T8811] hsr_slave_0: entered promiscuous mode [ 113.175214][ T8811] hsr_slave_1: entered promiscuous mode [ 113.185317][ T8811] debugfs: 'hsr0' already exists in 'hsr' [ 113.191092][ T8811] Cannot create hsr debugfs directory [ 113.202379][ T8882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.220057][ T9014] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.2038'. [ 113.276188][ T8882] team0: Port device team_slave_0 added [ 113.283169][ T8882] team0: Port device team_slave_1 added [ 113.370578][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.377663][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.403682][ T8882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.453610][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.460645][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.486652][ T8882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.532196][ T8882] hsr_slave_0: entered promiscuous mode [ 113.538530][ T8882] hsr_slave_1: entered promiscuous mode [ 113.544856][ T8882] debugfs: 'hsr0' already exists in 'hsr' [ 113.550619][ T8882] Cannot create hsr debugfs directory [ 113.570462][ T8811] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 113.581243][ T8811] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 113.597719][ T8811] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 113.621794][ T8811] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 113.777567][ T8811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.804039][ T8882] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 113.832140][ T8882] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 113.847171][ T8882] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 113.854676][ T9062] SELinux: failed to load policy [ 113.874422][ T8882] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 113.884611][ T8811] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.911746][ T2636] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.918892][ T2636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.962904][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.970037][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.011538][ T8811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.022037][ T8811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.057585][ T8882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.078328][ T8882] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.109251][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.116538][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.126782][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.133893][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.251162][ T8811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.302804][ T8882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.439316][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 114.439331][ T29] audit: type=1326 audit(2000000002.990:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.6.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 114.486109][ T29] audit: type=1326 audit(2000000003.030:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.6.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 114.505463][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 114.509820][ T29] audit: type=1326 audit(2000000003.030:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.6.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 114.542054][ T29] audit: type=1326 audit(2000000003.030:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.6.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff279e7acb9 code=0x7ffc0000 [ 114.671922][ T8882] veth0_vlan: entered promiscuous mode [ 114.691117][ T8882] veth1_vlan: entered promiscuous mode [ 114.705599][ T8811] veth0_vlan: entered promiscuous mode [ 114.731876][ T8811] veth1_vlan: entered promiscuous mode [ 114.740367][ T8882] veth0_macvtap: entered promiscuous mode [ 114.775533][ T8882] veth1_macvtap: entered promiscuous mode [ 114.803786][ T8811] veth0_macvtap: entered promiscuous mode [ 114.803793][ T29] audit: type=1400 audit(2000000003.350:1009): avc: denied { ioctl } for pid=9158 comm="syz.6.2060" path="socket:[25053]" dev="sockfs" ino=25053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.834205][ T8811] veth1_macvtap: entered promiscuous mode [ 114.925137][ T9166] loop6: detected capacity change from 0 to 2048 [ 114.944427][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.983075][ T8811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.998764][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.007383][ T9166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.032974][ T8811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.050144][ T1697] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.098868][ T1697] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.142016][ T7207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.185511][ T1697] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.212592][ T1697] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.233766][ T1697] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.312840][ T1697] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.355562][ T1697] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.409042][ T1697] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.803260][ T29] audit: type=1400 audit(2000000004.350:1010): avc: denied { setopt } for pid=9213 comm="syz.9.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.880882][ T9220] loop7: detected capacity change from 0 to 512 [ 115.913629][ T9220] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 115.960151][ T9220] EXT4-fs (loop7): 1 truncate cleaned up [ 115.973856][ T9220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.995857][ T9230] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 116.013311][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2082'. [ 116.105294][ T9237] loop6: detected capacity change from 0 to 128 [ 116.121850][ T9237] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.134584][ T9237] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.166706][ T7207] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.189225][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.343747][ T9259] loop7: detected capacity change from 0 to 1024 [ 116.356905][ T9259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.369165][ T9261] loop3: detected capacity change from 0 to 512 [ 116.376900][ T9261] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.388672][ T9259] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.400176][ T9261] EXT4-fs (loop3): 1 truncate cleaned up [ 116.406348][ T9261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.451750][ T9261] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.2094: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 116.473522][ T9261] EXT4-fs (loop3): Remounting filesystem read-only [ 116.480198][ T9261] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.2094: Deleting old file: nlink 5, error=-117 [ 116.501312][ T9259] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.2095: lblock 3 mapped to illegal pblock 3 (length 3) [ 116.522465][ T9272] loop9: detected capacity change from 0 to 128 [ 116.530859][ T9259] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 116.532295][ T9273] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2098'. [ 116.543201][ T9259] EXT4-fs (loop7): This should not happen!! Data will be lost [ 116.543201][ T9259] [ 116.562474][ T9272] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.567148][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.595740][ T9272] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.629882][ T9259] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2095: bg 0: block 112: padding at end of block bitmap is not set [ 116.681018][ T31] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 5) [ 116.712532][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 116.725050][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 116.725050][ T31] [ 116.815050][ T2636] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.824315][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.001082][ T9308] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.008328][ T9175] IPVS: starting estimator thread 0... [ 117.094585][ T9317] IPVS: using max 1776 ests per chain, 88800 per kthread [ 117.119169][ T9324] loop9: detected capacity change from 0 to 1024 [ 117.166411][ T9324] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2120: bad orphan inode 134217728 [ 117.214523][ T9324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.442068][ T9347] team0 (unregistering): Port device team_slave_0 removed [ 117.565842][ T9351] loop3: detected capacity change from 0 to 2048 [ 117.586197][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2142'. [ 117.624767][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 117.637993][ T9351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.712396][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.875648][ T9364] loop6: detected capacity change from 0 to 2048 [ 117.926128][ T9364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.995267][ T9364] EXT4-fs (loop6): shut down requested (0) [ 118.059983][ T7207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.238366][ T8882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.277151][ T9397] loop9: detected capacity change from 0 to 1024 [ 118.298842][ T9397] EXT4-fs: Ignoring removed bh option [ 118.354091][ T9402] loop3: detected capacity change from 0 to 256 [ 118.375397][ T9397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.391180][ T9407] netlink: 'syz.6.2149': attribute type 8 has an invalid length. [ 118.399002][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2149'. [ 118.423427][ T9397] EXT4-fs (loop9): shut down requested (1) [ 118.439162][ T9407] bond0: entered promiscuous mode [ 118.444243][ T9407] bond_slave_0: entered promiscuous mode [ 118.450046][ T9407] bond_slave_1: entered promiscuous mode [ 118.489906][ T9411] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 118.498820][ T9411] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 118.507987][ T29] audit: type=1400 audit(2000000007.060:1011): avc: denied { unlink } for pid=9396 comm="syz.9.2145" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.521612][ T9407] gretap0: entered promiscuous mode [ 118.572033][ T8882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.582007][ T9407] hsr1: entered promiscuous mode [ 118.679059][ T29] audit: type=1400 audit(2000000007.220:1012): avc: denied { mounton } for pid=9419 comm="syz.8.2155" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 118.764248][ T9433] loop3: detected capacity change from 0 to 1024 [ 118.820109][ T9441] loop8: detected capacity change from 0 to 512 [ 118.846200][ T9433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.857842][ T9441] EXT4-fs: Ignoring removed i_version option [ 118.864342][ T9441] EXT4-fs: Ignoring removed bh option [ 118.893059][ T29] audit: type=1326 audit(2000000007.440:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 118.916619][ T29] audit: type=1326 audit(2000000007.440:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9445 comm="syz.7.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 118.948562][ T9433] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2169: Parent and EA inode have the same ino 15 [ 118.970101][ T9441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.986761][ T9441] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.008863][ T8811] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.035192][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.200385][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2172'. [ 119.209554][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2172'. [ 119.344328][ T9494] loop9: detected capacity change from 0 to 764 [ 119.377519][ T9494] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 119.402965][ T9494] Symlink component flag not implemented [ 119.434558][ T9494] Symlink component flag not implemented (7) [ 119.477834][ T9518] loop3: detected capacity change from 0 to 128 [ 119.499574][ T9518] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.561767][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 119.561815][ T29] audit: type=1400 audit(2000000008.110:1020): avc: denied { execute } for pid=9514 comm="syz.3.2185" name="file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.604232][ T29] audit: type=1400 audit(2000000008.110:1021): avc: denied { execute_no_trans } for pid=9514 comm="syz.3.2185" path="/440/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 119.648987][ T9533] loop7: detected capacity change from 0 to 512 [ 119.675926][ T9540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9540 comm=syz.9.2191 [ 119.713401][ T29] audit: type=1326 audit(2000000008.260:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 119.737109][ T29] audit: type=1326 audit(2000000008.260:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 119.794638][ T9533] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 119.805175][ T9533] EXT4-fs (loop7): invalid journal inode [ 119.811258][ T9533] EXT4-fs (loop7): can't get journal size [ 119.882883][ T9533] EXT4-fs (loop7): 1 truncate cleaned up [ 119.894738][ T29] audit: type=1326 audit(2000000008.320:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 119.918156][ T29] audit: type=1326 audit(2000000008.320:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 119.930111][ T9555] loop6: detected capacity change from 0 to 512 [ 119.941614][ T29] audit: type=1326 audit(2000000008.320:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 119.971315][ T29] audit: type=1326 audit(2000000008.330:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 119.972151][ T9558] iso9660: Unknown parameter 'checQqbrict' [ 119.996136][ T29] audit: type=1326 audit(2000000008.330:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 120.024529][ T29] audit: type=1326 audit(2000000008.330:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.8.2192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc818acb9 code=0x7ffc0000 [ 120.141498][ T9555] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.341866][ T9599] atomic_op ffff88812cc54128 conn xmit_atomic 0000000000000000 [ 120.828868][ T9642] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2222: invalid indirect mapped block 256 (level 2) [ 120.852103][ T9644] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2221: bad orphan inode 134217728 [ 120.864389][ T9642] EXT4-fs (loop9): 2 truncates cleaned up [ 120.909522][ T9642] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2222: bg 0: block 5: invalid block bitmap [ 120.938655][ T9651] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.959396][ T9642] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.971691][ T9642] EXT4-fs (loop9): This should not happen!! Data will be lost [ 120.971691][ T9642] [ 120.981423][ T9642] EXT4-fs (loop9): Total free blocks count 0 [ 120.987553][ T9642] EXT4-fs (loop9): Free/Dirty block details [ 120.993470][ T9642] EXT4-fs (loop9): free_blocks=0 [ 120.998459][ T9642] EXT4-fs (loop9): dirty_blocks=2 [ 121.003548][ T9642] EXT4-fs (loop9): Block reservation details [ 121.009593][ T9642] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 121.028697][ T334] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 121.041415][ T334] EXT4-fs (loop9): This should not happen!! Data will be lost [ 121.041415][ T334] [ 121.191346][ T9680] EXT4-fs: Ignoring removed bh option [ 121.208650][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2237'. [ 121.239853][ T9680] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2236: Allocating blocks 385-513 which overlap fs metadata [ 121.260984][ T9680] EXT4-fs (loop7): pa ffff888107a1d5b0: logic 16, phys. 129, len 24 [ 121.269207][ T9680] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 121.289933][ T9688] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 121.311967][ T9688] EXT4-fs (loop8): 1 truncate cleaned up [ 121.488663][ T9716] sctp: [Deprecated]: syz.6.2251 (pid 9716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.488663][ T9716] Use struct sctp_sack_info instead [ 121.757280][ T9738] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.770194][ T9738] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.2262: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.785068][ T9738] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 121.797400][ T9738] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.797400][ T9738] [ 121.835356][ T9738] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.2262: lblock 3 mapped to illegal pblock 3 (length 1) [ 121.851409][ T9738] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 121.863786][ T9738] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.863786][ T9738] [ 121.891101][ T173] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 121.908035][ T173] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 121.920459][ T173] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.920459][ T173] [ 122.141480][ T9768] sctp: [Deprecated]: syz.9.2275 (pid 9768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.141480][ T9768] Use struct sctp_sack_info instead [ 122.185484][ T9773] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.280538][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.292879][ T9788] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2283'. [ 122.307016][ T9788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.315874][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.325548][ T9788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.335445][ T9788] bond0 (unregistering): Released all slaves [ 122.458216][ T9804] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.994153][ T9834] set_capacity_and_notify: 10 callbacks suppressed [ 122.994168][ T9834] loop3: detected capacity change from 0 to 512 [ 123.007934][ T9834] EXT4-fs: Ignoring removed i_version option [ 123.014004][ T9834] EXT4-fs: Ignoring removed nobh option [ 123.021296][ T9834] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.033861][ T9834] EXT4-fs (loop3): 1 truncate cleaned up [ 123.283986][ T9849] loop3: detected capacity change from 0 to 1024 [ 123.293849][ T9849] EXT4-fs: Ignoring removed orlov option [ 123.305566][ T9849] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 123.337321][ T9849] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.2311: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 123.362428][ T9849] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.2311: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 123.503191][ T9871] loop6: detected capacity change from 0 to 256 [ 123.530844][ T9871] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.543614][ T9871] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.608362][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2326'. [ 123.773009][ T9897] loop8: detected capacity change from 0 to 1024 [ 124.187246][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2343'. [ 124.242909][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2344'. [ 124.260265][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2344'. [ 124.520985][ T9958] SELinux: failed to load policy [ 124.710757][ T9980] loop6: detected capacity change from 0 to 128 [ 124.777595][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2373'. [ 124.799777][ T9990] chnl_net:caif_netlink_parms(): no params data found [ 124.881026][ T173] kworker/u8:5: attempt to access beyond end of device [ 124.881026][ T173] loop6: rw=1, sector=137, nr_sectors = 8 limit=128 [ 124.898553][ T173] kworker/u8:5: attempt to access beyond end of device [ 124.898553][ T173] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 124.914480][ T173] kworker/u8:5: attempt to access beyond end of device [ 124.914480][ T173] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 124.929365][ T173] kworker/u8:5: attempt to access beyond end of device [ 124.929365][ T173] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 124.944224][ T173] kworker/u8:5: attempt to access beyond end of device [ 124.944224][ T173] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 124.948466][T10006] loop8: detected capacity change from 0 to 512 [ 124.958086][ T173] kworker/u8:5: attempt to access beyond end of device [ 124.958086][ T173] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 124.979724][ T173] kworker/u8:5: attempt to access beyond end of device [ 124.979724][ T173] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 125.000132][ T173] kworker/u8:5: attempt to access beyond end of device [ 125.000132][ T173] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 125.015607][ T173] kworker/u8:5: attempt to access beyond end of device [ 125.015607][ T173] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 125.036411][ T173] kworker/u8:5: attempt to access beyond end of device [ 125.036411][ T173] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 125.050466][T10006] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.089899][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 125.089917][ T29] audit: type=1400 audit(2000000013.632:1073): avc: denied { associate } for pid=10018 comm="syz.6.2374" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 125.098338][T10006] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 125.136691][T10020] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2376'. [ 125.181780][T10006] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 125.194446][T10006] EXT4-fs (loop8): This should not happen!! Data will be lost [ 125.194446][T10006] [ 125.204119][T10006] EXT4-fs (loop8): Total free blocks count 0 [ 125.210332][T10006] EXT4-fs (loop8): Free/Dirty block details [ 125.216305][T10006] EXT4-fs (loop8): free_blocks=65280 [ 125.221623][T10006] EXT4-fs (loop8): dirty_blocks=2 [ 125.226727][T10006] EXT4-fs (loop8): Block reservation details [ 125.232722][T10006] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 125.265018][T10027] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 125.277270][T10027] EXT4-fs (loop8): This should not happen!! Data will be lost [ 125.277270][T10027] [ 125.399689][ T29] audit: type=1400 audit(2000000013.942:1074): avc: denied { create } for pid=10042 comm="syz.6.2383" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.426363][ T29] audit: type=1400 audit(2000000013.972:1075): avc: denied { unlink } for pid=7207 comm="syz-executor" name="file1" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 125.490095][T10047] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.544701][T10047] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.640099][T10047] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.741885][T10047] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.815845][ T2636] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.834241][ T2636] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.864753][ T2636] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.889277][ T2636] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.984241][T10090] loop9: detected capacity change from 0 to 128 [ 126.221031][T10109] loop6: detected capacity change from 0 to 1024 [ 126.254969][T10109] EXT4-fs: Ignoring removed nobh option [ 126.260580][T10109] EXT4-fs: inline encryption not supported [ 126.368199][T10127] pimreg: entered allmulticast mode [ 126.446328][T10127] pimreg: left allmulticast mode [ 126.585807][T10151] loop6: detected capacity change from 0 to 1024 [ 126.684237][T10168] loop7: detected capacity change from 0 to 1024 [ 126.899728][T10187] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.946035][T10187] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2424: corrupted inode contents [ 126.965735][T10201] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2427'. [ 126.978494][T10201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.988892][T10201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.006016][T10201] bond0 (unregistering): Released all slaves [ 127.027814][T10187] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.2424: mark_inode_dirty error [ 127.074868][T10187] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2424: corrupted inode contents [ 127.096200][T10209] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2429'. [ 127.097073][T10195] SELinux: failed to load policy [ 127.126700][T10187] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2424: mark_inode_dirty error [ 127.164344][ T29] audit: type=1400 audit(2000000015.702:1076): avc: denied { rename } for pid=10186 comm="syz.6.2424" name="file0" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.229770][ T29] audit: type=1400 audit(2000000015.742:1077): avc: denied { read } for pid=10215 comm="syz.8.2431" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.252771][ T29] audit: type=1400 audit(2000000015.742:1078): avc: denied { open } for pid=10215 comm="syz.8.2431" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.302535][T10226] syzkaller1: entered allmulticast mode [ 127.455517][T10240] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 127.563669][T10240] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 127.716890][T10240] EXT4-fs: Ignoring sb option on remount [ 127.723752][T10256] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.750727][T10240] EXT4-fs (loop8): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 127.856817][T10256] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.038151][T10256] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.163026][T10269] 9p: Unknown uid 00000000004294967295 [ 128.172768][T10256] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.237044][T10273] set_capacity_and_notify: 2 callbacks suppressed [ 128.237062][T10273] loop3: detected capacity change from 0 to 128 [ 128.331351][T10273] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.358425][ T334] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.385988][ T334] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.394668][ T334] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.405004][ T29] audit: type=1400 audit(2000000016.942:1079): avc: denied { read } for pid=10278 comm="syz.7.2454" path="socket:[28877]" dev="sockfs" ino=28877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.431628][ T334] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.551447][ T29] audit: type=1400 audit(2000000017.092:1080): avc: denied { accept } for pid=10286 comm="syz.3.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.747681][T10301] loop9: detected capacity change from 0 to 1024 [ 128.779337][T10301] EXT4-fs: Ignoring removed nobh option [ 128.785158][T10301] EXT4-fs: Ignoring removed bh option [ 128.920159][T10322] bridge: RTM_NEWNEIGH with invalid ether address [ 128.931937][T10324] loop3: detected capacity change from 0 to 512 [ 128.953022][T10322] bridge: RTM_NEWNEIGH with invalid ether address [ 129.035807][T10324] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.143060][T10324] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.2472: corrupted inode contents [ 129.211062][T10324] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.2472: mark_inode_dirty error [ 129.232799][T10324] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.2472: corrupted inode contents [ 129.254695][T10324] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2472: mark_inode_dirty error [ 129.342098][ T3328] EXT4-fs unmount: 47 callbacks suppressed [ 129.342115][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.398042][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 129.407046][T10357] netlink: 'syz.3.2480': attribute type 29 has an invalid length. [ 129.415079][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 129.449465][T10361] loop6: detected capacity change from 0 to 136 [ 129.467395][T10361] iso9660: Unknown parameter 'checQqbrict' [ 129.529964][ T29] audit: type=1326 audit(2000000274.080:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.3.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb99a0acb9 code=0x7ffc0000 [ 129.559472][T10356] SELinux: failed to load policy [ 129.567002][T10363] sctp: [Deprecated]: syz.3.2482 (pid 10363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.567002][T10363] Use struct sctp_sack_info instead [ 129.610628][ T29] audit: type=1326 audit(2000000274.100:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10362 comm="syz.3.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb99a0acb9 code=0x7ffc0000 [ 129.696450][T10379] loop7: detected capacity change from 0 to 128 [ 129.708942][T10379] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 129.721408][T10379] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 129.760240][T10379] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 129.793487][T10383] loop3: detected capacity change from 0 to 512 [ 129.803356][T10379] EXT4-fs: Ignoring sb option on remount [ 129.821600][T10383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.836965][T10379] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 129.858745][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2492'. [ 129.868054][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2492'. [ 129.889275][ T8480] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.899722][T10383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 129.908043][T10383] System zones: 1-2, 4-12, 8-8 [ 129.920686][T10383] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2490: iget: bad i_size value: 38620345925642 [ 129.948012][T10383] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2490: couldn't read orphan inode 15 (err -117) [ 129.969712][T10388] loop7: detected capacity change from 0 to 1024 [ 129.977871][T10383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.995508][T10388] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2503: bad orphan inode 134217728 [ 130.003548][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2494'. [ 130.023654][T10388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.068413][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.102993][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.104579][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 130.104642][ T29] audit: type=1400 audit(2000000274.650:1094): avc: denied { accept } for pid=10398 comm="syz.9.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.148833][T10401] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.208675][T10401] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.268322][T10401] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.321035][T10401] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.388131][ T173] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.404307][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2508'. [ 130.413710][ T2636] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.426342][T10421] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2508'. [ 130.444570][ T2636] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.452813][ T2636] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.586468][ T3483] kernel write not supported for file bpf-prog (pid: 3483 comm: kworker/0:5) [ 130.679466][ T29] audit: type=1326 audit(2000000275.230:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.719417][ T29] audit: type=1326 audit(2000000275.230:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.743092][ T29] audit: type=1326 audit(2000000275.270:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.749626][T10456] loop3: detected capacity change from 0 to 8192 [ 130.766680][ T29] audit: type=1326 audit(2000000275.270:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.796568][ T29] audit: type=1326 audit(2000000275.270:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.820245][ T29] audit: type=1326 audit(2000000275.270:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.844045][ T29] audit: type=1326 audit(2000000275.270:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.867622][ T29] audit: type=1326 audit(2000000275.270:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.904783][ T29] audit: type=1326 audit(2000000275.460:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4f0249acb9 code=0x7ffc0000 [ 130.983823][T10462] loop7: detected capacity change from 0 to 512 [ 130.994089][T10462] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 131.015126][T10462] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.2528: invalid indirect mapped block 83886080 (level 1) [ 131.039422][T10462] EXT4-fs (loop7): Remounting filesystem read-only [ 131.049748][T10464] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.049801][ T1039] IPVS: starting estimator thread 0... [ 131.059295][T10462] EXT4-fs (loop7): 1 orphan inode deleted [ 131.068199][T10462] EXT4-fs (loop7): 1 truncate cleaned up [ 131.082143][T10462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.096170][T10472] vhci_hcd vhci_hcd.3: invalid port number 9 [ 131.102183][T10472] vhci_hcd vhci_hcd.3: invalid port number 9 [ 131.134657][T10469] IPVS: using max 2208 ests per chain, 110400 per kthread [ 131.153715][T10480] loop9: detected capacity change from 0 to 512 [ 131.166218][T10480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.193388][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.202809][T10480] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.223851][T10480] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.2533: corrupted inode contents [ 131.236244][T10480] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.2533: mark_inode_dirty error [ 131.249465][T10480] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.2533: corrupted inode contents [ 131.295929][T10480] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.2533: mark_inode_dirty error [ 131.370089][ T8882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.425411][T10504] EXT4-fs: Ignoring removed nobh option [ 131.431056][T10504] EXT4-fs: inline encryption not supported [ 131.481782][T10513] pim6reg: entered allmulticast mode [ 131.489753][T10504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.532492][ T8882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.589454][T10522] EXT4-fs: Ignoring removed bh option [ 131.608438][T10522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.713135][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.783661][T10542] bond_slave_0: entered promiscuous mode [ 131.789396][T10542] bond_slave_1: entered promiscuous mode [ 131.805777][T10542] macvtap1: entered allmulticast mode [ 131.811520][T10542] bond0: entered allmulticast mode [ 131.816755][T10542] bond_slave_0: entered allmulticast mode [ 131.822717][T10542] bond_slave_1: entered allmulticast mode [ 131.835545][T10542] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 131.844275][T10542] batman_adv: batadv0: Adding interface: macvtap1 [ 131.850914][T10542] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.878161][T10542] batman_adv: batadv0: Interface activated: macvtap1 [ 131.887451][T10546] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 132.130285][ T3313] ================================================================== [ 132.138411][ T3313] BUG: KCSAN: data-race in set_nlink / set_nlink [ 132.144771][ T3313] [ 132.147124][ T3313] read to 0xffff8881079a4c50 of 4 bytes by task 3009 on cpu 0: [ 132.154699][ T3313] set_nlink+0x29/0xb0 [ 132.158822][ T3313] kernfs_iop_permission+0x1e2/0x220 [ 132.164159][ T3313] inode_permission+0x2de/0x3c0 [ 132.169300][ T3313] link_path_walk+0x779/0xe30 [ 132.174020][ T3313] path_lookupat+0x8c/0x500 [ 132.178547][ T3313] filename_lookup+0x190/0x390 [ 132.183342][ T3313] vfs_statx+0x9d/0x3b0 [ 132.187527][ T3313] vfs_fstatat+0x115/0x170 [ 132.191971][ T3313] __se_sys_newfstatat+0x55/0x3e0 [ 132.197034][ T3313] __x64_sys_newfstatat+0x55/0x70 [ 132.202096][ T3313] x64_sys_call+0x111f/0x3000 [ 132.206818][ T3313] do_syscall_64+0xc0/0x2a0 [ 132.211348][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.217268][ T3313] [ 132.219609][ T3313] write to 0xffff8881079a4c50 of 4 bytes by task 3313 on cpu 1: [ 132.227254][ T3313] set_nlink+0x99/0xb0 [ 132.231351][ T3313] kernfs_iop_permission+0x1e2/0x220 [ 132.236684][ T3313] inode_permission+0x2de/0x3c0 [ 132.241576][ T3313] link_path_walk+0x779/0xe30 [ 132.246279][ T3313] path_openat+0x1bf/0x23c0 [ 132.250815][ T3313] do_filp_open+0x15d/0x280 [ 132.255346][ T3313] do_sys_openat2+0xa6/0x150 [ 132.259963][ T3313] __x64_sys_openat+0xf2/0x120 [ 132.264749][ T3313] x64_sys_call+0x2b07/0x3000 [ 132.269449][ T3313] do_syscall_64+0xc0/0x2a0 [ 132.273970][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.279877][ T3313] [ 132.282208][ T3313] value changed: 0x00000008 -> 0x00000009 [ 132.287938][ T3313] [ 132.290294][ T3313] Reported by Kernel Concurrency Sanitizer on: [ 132.296456][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.305772][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.315846][ T3313] ================================================================== [ 132.350035][T10565] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.362545][T10565] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.388069][T10569] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2570: bad orphan inode 134217728 [ 132.411763][T10569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.465905][ T8882] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.206592][ T8480] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.