last executing test programs: 5.875091504s ago: executing program 3 (id=1703): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.896268813s ago: executing program 4 (id=1718): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e0"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x840) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 4.784611187s ago: executing program 3 (id=1720): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@nobh}, {@nombcache}, {@nogrpid}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='.\x00', 0x2075, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x43aa, 0xc0ca, 0x29, &(0x7f0000000100)={[0xf]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) 4.784337377s ago: executing program 4 (id=1721): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x24060400) io_uring_enter(0xffffffffffffffff, 0x1, 0x21, 0x1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 4.652018631s ago: executing program 1 (id=1723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 3.061806528s ago: executing program 4 (id=1725): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) inotify_init1(0x80800) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) flock(r2, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 2.978200091s ago: executing program 0 (id=1726): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300", @ANYRES32], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) unlink(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x488c4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.857361294s ago: executing program 4 (id=1727): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0xb, 0x2, 0x0, 0xfffffffffffffffc, 0x1) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x200002e6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.705827209s ago: executing program 1 (id=1729): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.383984789s ago: executing program 0 (id=1730): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sed\x00', 0x1, 0xa7e, 0x70}, 0x2c) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.383753639s ago: executing program 1 (id=1731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x9}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xf}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x48, 0x9, 0x0, 0xa, 0x10, 0x2, 0x6, 0x2, 0x18, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x81, 0x6, 0xd, 0x100], [0xfff1, 0x85, 0xffff, 0xfff1, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}, @TCA_RATE={0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.309789981s ago: executing program 0 (id=1732): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.290830192s ago: executing program 1 (id=1733): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x8, 0x8001, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x74}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(r2) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 2.225135914s ago: executing program 3 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r2) 1.994176551s ago: executing program 3 (id=1735): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) chdir(&(0x7f0000000080)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00') 1.813552756s ago: executing program 1 (id=1736): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(0xffffffffffffffff, 0xc040583f, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2712, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0xfe, 0x0, 0xfffff02c}, {0x6}]}, 0x10) 1.729641799s ago: executing program 4 (id=1739): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.711362189s ago: executing program 1 (id=1740): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x121440, 0x10) 1.657397111s ago: executing program 4 (id=1741): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}], 0x2}}, {{&(0x7f0000000180)=@xdp, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/70}, {&(0x7f0000000540)=""/17}, {&(0x7f0000000680)=""/251}, {&(0x7f0000000780)=""/193}, {&(0x7f0000000880)=""/208}], 0x0, &(0x7f0000000a00)=""/67}, 0x6}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a80)=""/124}, {&(0x7f0000001b80)=""/192}, {&(0x7f0000001c40)=""/79}, {&(0x7f0000001cc0)=""/61}]}, 0x7}, {{&(0x7f0000001d40)=@alg, 0x0, &(0x7f0000002380)=[{&(0x7f0000001dc0)=""/108}, {&(0x7f0000001e80)=""/138}, {&(0x7f0000001f40)=""/252}, {&(0x7f0000002040)=""/65}, {&(0x7f00000020c0)=""/4}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/242}, {&(0x7f0000002240)=""/56}, {&(0x7f0000002280)=""/228}], 0x0, &(0x7f0000002440)=""/138}, 0x1}], 0x4000011, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 1.36989094s ago: executing program 0 (id=1743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlockall(0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 928.169323ms ago: executing program 3 (id=1745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x9}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xf}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x48, 0x9, 0x0, 0xa, 0x10, 0x2, 0x6, 0x2, 0x18, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x81, 0x6, 0xd, 0x100], [0xfff1, 0x85, 0xffff, 0xfff1, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}, @TCA_RATE={0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) 815.672666ms ago: executing program 3 (id=1746): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket$inet6(0xa, 0x2, 0x0) 798.340057ms ago: executing program 2 (id=1747): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) bind$tipc(r0, 0x0, 0x0) 734.417958ms ago: executing program 2 (id=1748): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 462.396407ms ago: executing program 0 (id=1749): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 462.035437ms ago: executing program 2 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 331.664091ms ago: executing program 2 (id=1751): r0 = socket$can_raw(0x1d, 0x3, 0x1) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)="1f9a7f1356017b9c19546e0f2a259f", 0xf}], 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002fb}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 311.840162ms ago: executing program 0 (id=1752): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 263.149263ms ago: executing program 2 (id=1753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x20000ac8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001ed) 0s ago: executing program 2 (id=1754): openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$hiddev(&(0x7f00000012c0), 0x3, 0x400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) kernel console output (not intermixed with test programs): ][ T5654] EXT4-fs (loop3): 1 truncate cleaned up [ 91.278314][ T5654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.479826][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.511749][ T5725] loop1: detected capacity change from 0 to 512 [ 91.538200][ T5725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.557704][ T5725] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.637707][ T5714] dummy0: entered promiscuous mode [ 91.657589][ T5714] dummy0: left promiscuous mode [ 91.794919][ T5731] loop0: detected capacity change from 0 to 256 [ 91.813173][ T5731] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.844001][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.893491][ T5733] loop4: detected capacity change from 0 to 128 [ 92.036827][ T5733] netlink: 'syz.4.676': attribute type 21 has an invalid length. [ 92.250189][ T5733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.676'. [ 92.776550][ T5751] loop2: detected capacity change from 0 to 1024 [ 92.787432][ T5751] EXT4-fs: Ignoring removed bh option [ 92.853012][ T5751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.934473][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 92.934490][ T28] audit: type=1400 audit(1779707259.074:724): avc: denied { write } for pid=5749 comm="syz.2.730" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.050238][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.209959][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.256246][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.299840][ T5760] netlink: 22 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.341232][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.391818][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.422404][ T5760] netlink: 22 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.479242][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.524583][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 93.553033][ T5760] netlink: 22 bytes leftover after parsing attributes in process `syz.1.724'. [ 94.328560][ T5789] loop1: detected capacity change from 0 to 128 [ 95.501399][ T5804] loop4: detected capacity change from 0 to 512 [ 95.841250][ T5827] loop1: detected capacity change from 0 to 512 [ 96.005864][ T5827] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 96.071648][ T5827] EXT4-fs (loop1): 1 truncate cleaned up [ 96.104338][ T5827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.214336][ T5804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.247455][ T5804] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.292605][ T28] audit: type=1400 audit(1779707262.434:725): avc: denied { write } for pid=5826 comm="syz.1.748" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.342861][ T28] audit: type=1400 audit(1779707262.434:726): avc: denied { write } for pid=5826 comm="syz.1.748" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.469742][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.531250][ T5804] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.738: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 96.629584][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.928856][ T5848] loop0: detected capacity change from 0 to 128 [ 97.159111][ T5848] netlink: 'syz.0.752': attribute type 21 has an invalid length. [ 97.726572][ T28] audit: type=1400 audit(1779707263.864:727): avc: denied { create } for pid=5865 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.959792][ T5875] loop0: detected capacity change from 0 to 512 [ 97.971265][ T5868] loop2: detected capacity change from 0 to 512 [ 98.008198][ T5876] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 98.053001][ T28] audit: type=1400 audit(1779707264.194:728): avc: denied { bind } for pid=5877 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.075533][ T5875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.141584][ T5887] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 98.152339][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.168436][ T5875] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.177477][ T5868] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.190578][ T5887] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 98.238204][ T5887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.266045][ T5887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 98.290402][ T28] audit: type=1400 audit(1779707264.404:729): avc: denied { write } for pid=5865 comm="syz.0.770" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.384277][ T28] audit: type=1400 audit(1779707264.524:730): avc: denied { shutdown } for pid=5894 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.873020][ T28] audit: type=1400 audit(1779707265.014:731): avc: denied { write } for pid=5865 comm="syz.0.770" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.902765][ T5866] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz.0.770: Directory hole found for htree leaf block 0 [ 98.918014][ T28] audit: type=1400 audit(1779707265.014:732): avc: denied { write } for pid=5865 comm="syz.0.770" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.943544][ T5866] EXT4-fs (loop0): Remounting filesystem read-only [ 99.441358][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.487701][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.510299][ T4094] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.526591][ T4094] Quota error (device loop0): write_blk: dquota write failed [ 99.539275][ T4094] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 99.622585][ T5913] loop0: detected capacity change from 0 to 1024 [ 99.637294][ T5913] EXT4-fs: Ignoring removed bh option [ 99.666512][ T5913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.705225][ T28] audit: type=1400 audit(1779707265.844:733): avc: denied { write } for pid=5912 comm="syz.0.771" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.071672][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.267399][ T5935] loop3: detected capacity change from 0 to 128 [ 100.510815][ T5944] loop4: detected capacity change from 0 to 256 [ 100.531093][ T5944] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.588596][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.596282][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.699624][ T5937] batman_adv: batadv0: Interface deactivated: dummy0 [ 100.918964][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.979845][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.028073][ T5948] __nla_validate_parse: 23 callbacks suppressed [ 101.028254][ T5948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'. [ 101.146678][ T5950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5950 comm=syz.2.786 [ 101.180490][ T5935] syz.3.783: attempt to access beyond end of device [ 101.180490][ T5935] loop3: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 101.349440][ T4097] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.378721][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.414745][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.428866][ T5960] loop1: detected capacity change from 0 to 512 [ 101.448986][ T5960] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.789: Bad quota inum: 2, type: 1 [ 101.457728][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.469655][ T5960] loop1: lost filesystem error report for type 5 error -117 [ 101.470114][ T5960] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 101.477547][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 101.477568][ C1] EXT4-fs (loop1): initial error at time 1779707267: ext4_quota_enable:7221 [ 101.477592][ C1] EXT4-fs (loop1): last error at time 1779707267: ext4_quota_enable:7221 [ 101.515904][ T28] audit: type=1400 audit(1779707267.654:734): avc: denied { setopt } for pid=5961 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.548555][ T5960] EXT4-fs (loop1): mount failed [ 101.614866][ T5966] loop4: detected capacity change from 0 to 512 [ 101.627322][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.674473][ T5966] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.132671][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.181434][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 102.200325][ T28] audit: type=1400 audit(1779707268.334:735): avc: denied { bind } for pid=5980 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.283231][ T5986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.290515][ T5986] IPv6: NLM_F_CREATE should be set when creating new route [ 102.297847][ T5986] IPv6: NLM_F_CREATE should be set when creating new route [ 102.361834][ T5986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.765987][ T6004] loop4: detected capacity change from 0 to 512 [ 102.788384][ T6004] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.804: Bad quota inum: 2, type: 1 [ 102.808316][ T5995] loop1: detected capacity change from 0 to 512 [ 102.815049][ T6004] loop4: lost filesystem error report for type 5 error -117 [ 102.816838][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 102.831281][ C1] EXT4-fs (loop4): initial error at time 1779707268: ext4_quota_enable:7221 [ 102.840606][ C1] EXT4-fs (loop4): last error at time 1779707268: ext4_quota_enable:7221 [ 102.849972][ T6004] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 102.875776][ T6004] EXT4-fs (loop4): mount failed [ 102.931170][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.952374][ T5995] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.037695][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.190814][ T6020] loop3: detected capacity change from 0 to 128 [ 103.271070][ T5237] bridge0: entered promiscuous mode [ 103.457625][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 103.457640][ T28] audit: type=1400 audit(1779707269.604:738): avc: denied { connect } for pid=6029 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 103.495553][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 103.520267][ T6020] netlink: 'syz.3.809': attribute type 21 has an invalid length. [ 103.558157][ T6020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.809'. [ 104.126357][ T6046] syzkaller0: entered promiscuous mode [ 104.139369][ T6046] syzkaller0: entered allmulticast mode [ 104.282411][ T6043] loop3: detected capacity change from 0 to 512 [ 104.348558][ T6043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.362027][ T6051] loop2: detected capacity change from 0 to 512 [ 104.370414][ T6043] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.391232][ T6051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.411387][ T6051] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.441618][ T28] audit: type=1400 audit(1779707270.584:739): avc: denied { write } for pid=6047 comm="syz.2.824" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.507965][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.551358][ T28] audit: type=1400 audit(1779707270.694:740): avc: denied { write } for pid=6047 comm="syz.2.824" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.596481][ T6048] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz.2.824: Directory hole found for htree leaf block 0 [ 104.611720][ T28] audit: type=1400 audit(1779707270.694:741): avc: denied { write } for pid=6047 comm="syz.2.824" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.639204][ T6048] EXT4-fs (loop2): Remounting filesystem read-only [ 104.686409][ T28] audit: type=1400 audit(1779707270.824:742): avc: denied { mount } for pid=6056 comm="syz.1.835" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.708656][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.708706][ T4101] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 104.743271][ T4101] Quota error (device loop2): write_blk: dquota write failed [ 104.764375][ T4101] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 104.768869][ T28] audit: type=1400 audit(1779707270.904:743): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.002687][ T6068] loop2: detected capacity change from 0 to 128 [ 105.277883][ T6068] syz.2.840: attempt to access beyond end of device [ 105.277883][ T6068] loop2: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 105.332379][ T6068] syz.2.840: attempt to access beyond end of device [ 105.332379][ T6068] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 105.390725][ T28] audit: type=1400 audit(1779707271.534:744): avc: denied { bind } for pid=6074 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.412687][ T6068] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 105.455448][ T6068] syz.2.840: attempt to access beyond end of device [ 105.455448][ T6068] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 105.481173][ T6068] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 105.510362][ T6068] syz.2.840: attempt to access beyond end of device [ 105.510362][ T6068] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 105.559842][ T6068] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 105.692935][ T6068] syz.2.840: attempt to access beyond end of device [ 105.692935][ T6068] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 105.708776][ T6068] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 105.718913][ T6068] syz.2.840: attempt to access beyond end of device [ 105.718913][ T6068] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 105.734831][ T6068] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 105.777623][ T6068] syz.2.840: attempt to access beyond end of device [ 105.777623][ T6068] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 105.894479][ T6068] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 106.278832][ T6068] syz.2.840: attempt to access beyond end of device [ 106.278832][ T6068] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 106.330587][ T6068] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 106.353214][ T6068] syz.2.840: attempt to access beyond end of device [ 106.353214][ T6068] loop2: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 106.370811][ T6068] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 107.870346][ T6120] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 107.887854][ T6120] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 107.900685][ T6120] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 107.929016][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.962794][ T6120] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.052575][ T6130] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 108.069030][ T6130] ip6gretap1: entered promiscuous mode [ 108.255305][ T6125] net_ratelimit: 10 callbacks suppressed [ 108.255323][ T6125] IPVS: lc: FWM 3 0x00000003 - no destination available [ 108.255917][ T10] IPVS: starting estimator thread 0... [ 108.386917][ T6131] IPVS: using max 2640 ests per chain, 132000 per kthread [ 108.864480][ T6134] loop1: detected capacity change from 0 to 128 [ 108.933798][ T6142] team0: Port device syz_tun added [ 108.976586][ T28] audit: type=1400 audit(1779707275.114:745): avc: denied { sqpoll } for pid=6132 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.012639][ T6142] team0: Port device syz_tun removed [ 109.027562][ T6134] netlink: 'syz.1.855': attribute type 21 has an invalid length. [ 109.037372][ T6142] team0: Port device bond0 removed [ 109.044549][ T6142] bridge_slave_0: left allmulticast mode [ 109.050930][ T6142] bridge_slave_0: left promiscuous mode [ 109.057024][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.078768][ T6142] bridge_slave_1: left allmulticast mode [ 109.087205][ T6142] bridge_slave_1: left promiscuous mode [ 109.093001][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.105110][ T6142] bond0: (slave bond_slave_0): Releasing backup interface [ 109.130757][ T6142] bond0: (slave bond_slave_1): Releasing backup interface [ 109.144013][ T6142] team0: Port device team_slave_0 removed [ 109.152035][ T6142] team0: Port device team_slave_1 removed [ 109.158582][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.167238][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.181734][ T6142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.203371][ T6134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.855'. [ 109.246610][ T4097] IPVS: stop unused estimator thread 0... [ 109.291387][ T28] audit: type=1400 audit(1779707275.434:746): avc: denied { listen } for pid=6158 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.829722][ T6166] loop0: detected capacity change from 0 to 8192 [ 109.952248][ T6168] netlink: 'syz.4.870': attribute type 7 has an invalid length. [ 109.986157][ T6168] netlink: 'syz.4.870': attribute type 7 has an invalid length. [ 109.986185][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.010659][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.021116][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.035131][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.343793][ T28] audit: type=1326 audit(1779707276.484:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.1.872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x0 [ 110.400616][ T28] audit: type=1400 audit(1779707276.544:748): avc: denied { ioctl } for pid=6175 comm="syz.2.873" path="socket:[15052]" dev="sockfs" ino=15052 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.627647][ T6190] team0: Port device syz_tun added [ 110.651274][ T6190] team0: Port device syz_tun removed [ 110.669319][ T28] audit: type=1400 audit(1779707276.814:749): avc: denied { mounton } for pid=6193 comm="syz.4.881" path="/29/file1" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.694487][ T6190] bond0: (slave team0): Releasing backup interface [ 110.704921][ T6190] batman_adv: batadv0: Removing interface: dummy0 [ 110.712527][ T6190] bridge_slave_0: left allmulticast mode [ 110.724840][ T6190] bridge_slave_0: left promiscuous mode [ 110.733320][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.741581][ T6190] bridge_slave_1: left allmulticast mode [ 110.747600][ T6190] bridge_slave_1: left promiscuous mode [ 110.753302][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.763161][ T6190] bond0: (slave bond_slave_0): Releasing backup interface [ 110.773254][ T6190] bond0: (slave bond_slave_1): Releasing backup interface [ 110.782902][ T6190] team0: Port device team_slave_0 removed [ 110.789846][ T6190] team0: Port device team_slave_1 removed [ 110.795813][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.804013][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.812284][ T6190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.547057][ T6224] netlink: 'syz.4.893': attribute type 10 has an invalid length. [ 112.460264][ T6224] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 112.469655][ T6224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.488744][ T6224] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 112.579103][ T6236] syzkaller0: entered promiscuous mode [ 112.599270][ T6236] syzkaller0: entered allmulticast mode [ 112.599972][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 112.817649][ T28] audit: type=1326 audit(1779707278.964:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.2.904" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 112.868049][ T1037] kernel read not supported for file bpf-prog (pid: 1037 comm: kworker/0:2) [ 112.876966][ T28] audit: type=1326 audit(1779707278.964:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.2.904" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 112.908386][ T28] audit: type=1326 audit(1779707278.964:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.2.904" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 112.970764][ T28] audit: type=1326 audit(1779707278.964:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.2.904" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 113.017388][ T28] audit: type=1326 audit(1779707278.984:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.2.904" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 113.132994][ T6270] loop0: detected capacity change from 0 to 512 [ 113.140760][ T6270] EXT4-fs: Ignoring removed bh option [ 113.149986][ T6270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.157451][ T6270] EXT4-fs: dax option not supported [ 113.169851][ T6270] netlink: 'syz.0.910': attribute type 63 has an invalid length. [ 113.180936][ T6270] lo: entered promiscuous mode [ 113.192515][ T6270] lo: entered allmulticast mode [ 113.215220][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 113.543248][ T6291] syzkaller0: entered promiscuous mode [ 113.552965][ T6291] syzkaller0: entered allmulticast mode [ 114.250689][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.924'. [ 114.300072][ T6303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6303 comm=syz.3.924 [ 114.399283][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 114.399361][ T28] audit: type=1326 audit(1779707280.544:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6305 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff025ffce59 code=0x0 [ 114.452372][ T6312] loop4: detected capacity change from 0 to 512 [ 114.471053][ T28] audit: type=1400 audit(1779707280.554:791): avc: denied { watch } for pid=6309 comm="syz.3.926" path="/" dev="configfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.520195][ T6312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.535703][ T6312] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.593825][ T28] audit: type=1400 audit(1779707280.734:792): avc: denied { write } for pid=6293 comm="syz.4.922" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.723463][ T28] audit: type=1400 audit(1779707280.864:793): avc: denied { write } for pid=6293 comm="syz.4.922" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.750055][ T6295] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #12: comm syz.4.922: Directory hole found for htree leaf block 0 [ 114.770523][ T28] audit: type=1400 audit(1779707280.864:794): avc: denied { write } for pid=6293 comm="syz.4.922" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.808756][ T6295] EXT4-fs (loop4): Remounting filesystem read-only [ 114.848425][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.867698][ T4097] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.880053][ T4097] Quota error (device loop4): write_blk: dquota write failed [ 114.888392][ T4097] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 115.055502][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.074133][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.225731][ T6338] syzkaller0: entered promiscuous mode [ 115.237553][ T6338] syzkaller0: entered allmulticast mode [ 115.257064][ T6340] tipc: Failed to remove unknown binding: 66,0,0/0:3667853598/3667853600 [ 115.276070][ T6340] tipc: Failed to remove unknown binding: 66,0,0/0:3667853598/3667853599 [ 115.299148][ T28] audit: type=1400 audit(1779707281.444:795): avc: denied { shutdown } for pid=6328 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.320005][ T6340] tipc: Failed to remove unknown binding: 66,0,0/0:3667853598/3667853600 [ 115.331272][ T6340] tipc: Failed to remove unknown binding: 66,0,0/0:3667853598/3667853599 [ 115.342448][ T28] audit: type=1400 audit(1779707281.444:796): avc: denied { read } for pid=6328 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.805732][ T6364] loop2: detected capacity change from 0 to 256 [ 115.831277][ T6364] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.966978][ T6375] loop0: detected capacity change from 0 to 512 [ 115.976238][ T6375] EXT4-fs: Ignoring removed nobh option [ 115.985071][ T6375] EXT4-fs: Ignoring removed orlov option [ 115.997807][ T6375] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.951: invalid block [ 116.022421][ T6375] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.022659][ T6375] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.951: couldn't read orphan inode 11 (err -117) [ 116.031961][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 116.031984][ C1] EXT4-fs (loop0): initial error at time 1779707282: __ext4_iget:5481: inode 11: block 1 [ 116.032021][ C1] EXT4-fs (loop0): last error at time 1779707282: __ext4_iget:5481: inode 11: block 1 [ 116.070632][ T6375] loop0: lost filesystem error report for type 5 error -117 [ 116.072544][ T6375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.102743][ T6375] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 116.113750][ T28] audit: type=1400 audit(1779707282.244:797): avc: denied { write } for pid=6374 comm="syz.0.951" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.148554][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.954'. [ 116.177171][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.269385][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.955'. [ 116.283628][ T6382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6382 comm=syz.4.954 [ 116.321174][ T6387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6387 comm=syz.0.955 [ 116.374539][ T6389] loop0: detected capacity change from 0 to 512 [ 116.402934][ T6389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.415985][ T6391] sctp: [Deprecated]: syz.4.959 (pid 6391) Use of int in max_burst socket option. [ 116.415985][ T6391] Use struct sctp_assoc_value instead [ 116.436491][ T6389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 116.443238][ T6384] loop1: detected capacity change from 0 to 512 [ 116.449112][ T6389] System zones: 1-12 [ 116.469671][ T6389] EXT4-fs (loop0): 1 truncate cleaned up [ 116.475788][ T6389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.503002][ T6389] program syz.0.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.582414][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.728566][ T6405] capability: warning: `syz.0.962' uses deprecated v2 capabilities in a way that may be insecure [ 117.104834][ T6418] raw_sendmsg: syz.1.967 forgot to set AF_INET. Fix it! [ 117.148254][ T6422] team0: Port device syz_tun added [ 117.160578][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 117.172294][ T6422] team0: Port device syz_tun removed [ 117.179751][ T6422] batman_adv: batadv0: Removing interface: dummy0 [ 117.187404][ T6422] bridge_slave_0: left allmulticast mode [ 117.188309][ T6424] loop0: detected capacity change from 0 to 128 [ 117.194720][ T6422] bridge_slave_0: left promiscuous mode [ 117.205829][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.217541][ T6422] bridge_slave_1: left allmulticast mode [ 117.223249][ T6422] bridge_slave_1: left promiscuous mode [ 117.229162][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.238575][ T6422] bond0: (slave bond_slave_0): Releasing backup interface [ 117.247074][ T6422] bond0: (slave bond_slave_1): Releasing backup interface [ 117.255741][ T6422] team0: Port device team_slave_0 removed [ 117.263120][ T6422] team0: Port device team_slave_1 removed [ 117.270098][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.278931][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.286559][ T6422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.313186][ T6424] syz.0.970: attempt to access beyond end of device [ 117.313186][ T6424] loop0: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 117.324117][ T6429] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.340662][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 117.343595][ T6424] syz.0.970: attempt to access beyond end of device [ 117.343595][ T6424] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 117.381761][ T6424] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 117.408381][ T6424] syz.0.970: attempt to access beyond end of device [ 117.408381][ T6424] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 117.482556][ T6424] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 117.525655][ T6424] syz.0.970: attempt to access beyond end of device [ 117.525655][ T6424] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 117.555478][ T6424] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 117.570657][ T6424] syz.0.970: attempt to access beyond end of device [ 117.570657][ T6424] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 117.608288][ T6424] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 117.620279][ T6424] syz.0.970: attempt to access beyond end of device [ 117.620279][ T6424] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 117.639983][ T6424] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 117.646573][ T6438] loop1: detected capacity change from 0 to 512 [ 117.652874][ T6424] syz.0.970: attempt to access beyond end of device [ 117.652874][ T6424] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 117.653004][ T6424] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 117.653407][ T6424] syz.0.970: attempt to access beyond end of device [ 117.653407][ T6424] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 117.753422][ T6424] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 117.766923][ T6424] syz.0.970: attempt to access beyond end of device [ 117.766923][ T6424] loop0: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 117.792509][ T6424] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 117.899154][ T6452] loop3: detected capacity change from 0 to 512 [ 117.899469][ T6438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.975108][ T6452] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.978: corrupted in-inode xattr: invalid ea_ino [ 117.983726][ T6438] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.010802][ T6452] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.016791][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 118.033765][ C1] EXT4-fs (loop3): initial error at time 1779707284: ext4_iget_extra_inode:5128: inode 15 [ 118.044090][ C1] EXT4-fs (loop3): last error at time 1779707284: ext4_iget_extra_inode:5128: inode 15 [ 118.061769][ T6452] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.978: couldn't read orphan inode 15 (err -117) [ 118.069911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.084675][ T6452] loop3: lost filesystem error report for type 5 error -117 [ 118.126091][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.179213][ T6438] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.974: Directory hole found for htree leaf block 0 [ 118.226087][ T6438] EXT4-fs (loop1): Remounting filesystem read-only [ 118.234605][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.294917][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.314651][ T4101] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 118.356753][ T6462] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 118.380803][ T6462] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 118.389013][ T6462] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.980'. [ 118.606579][ T6463] loop4: detected capacity change from 0 to 1024 [ 118.618364][ T6463] EXT4-fs (loop4): blocks per group (131072) and clusters per group (32) inconsistent [ 118.780267][ T4097] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.317629][ T6494] loop0: detected capacity change from 0 to 512 [ 119.341063][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.995'. [ 119.365724][ T6497] EXT4-fs (loop2): invalid inodes per group: 4294508576 [ 119.365724][ T6497] [ 119.388712][ T6494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.402545][ T6494] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.470388][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 119.470405][ T28] audit: type=1400 audit(1779707285.614:826): avc: denied { write } for pid=6488 comm="syz.0.992" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.516847][ T28] audit: type=1400 audit(1779707285.614:827): avc: denied { read } for pid=6495 comm="syz.2.996" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.546845][ T28] audit: type=1400 audit(1779707285.614:828): avc: denied { open } for pid=6495 comm="syz.2.996" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.604008][ T28] audit: type=1400 audit(1779707285.744:829): avc: denied { write } for pid=6488 comm="syz.0.992" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.610960][ T6489] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz.0.992: Directory hole found for htree leaf block 0 [ 119.651586][ T28] audit: type=1400 audit(1779707285.744:830): avc: denied { write } for pid=6488 comm="syz.0.992" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.663180][ T6489] EXT4-fs (loop0): Remounting filesystem read-only [ 119.718973][ T6507] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 119.739565][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 119.760707][ T6509] set_capacity_and_notify: 1 callbacks suppressed [ 119.760725][ T6509] loop1: detected capacity change from 0 to 128 [ 119.779842][ T6509] FAT-fs (loop1): bogus number of FAT structure [ 119.788229][ T6509] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 119.798180][ T6509] FAT-fs (loop1): Can't find a valid FAT filesystem [ 119.834190][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.859903][ T4101] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 119.882301][ T4101] Quota error (device loop0): write_blk: dquota write failed [ 119.903447][ T4101] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 119.929976][ T28] audit: type=1400 audit(1779707286.074:831): avc: denied { getopt } for pid=6517 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.982491][ T28] audit: type=1400 audit(1779707286.124:832): avc: denied { bind } for pid=6519 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 120.346588][ T6543] bridge0: entered promiscuous mode [ 120.360894][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.380318][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.407081][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.598209][ T6560] loop3: detected capacity change from 0 to 8192 [ 120.598254][ T6543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.638824][ T6543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.650595][ T6560] loop3: p1 < > p2 p4 < p5 > [ 120.660053][ T6566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1022'. [ 120.661734][ T6560] loop3: partition table partially beyond EOD, [ 120.674355][ T6543] veth1_vlan: left promiscuous mode [ 120.686939][ T6560] truncated [ 120.690826][ T6543] veth0_vlan: left promiscuous mode [ 120.702391][ T6560] loop3: p1 start 134217728 is beyond EOD, truncated [ 120.704835][ T6543] veth0_vlan: entered promiscuous mode [ 120.715831][ T6560] loop3: p2 size 67072 extends beyond EOD, truncated [ 120.733278][ T6560] loop3: p5 size 67072 extends beyond EOD, truncated [ 120.737924][ T6543] veth1_vlan: entered promiscuous mode [ 120.784001][ T6543] veth1_macvtap: left promiscuous mode [ 120.793339][ T6543] veth0_macvtap: left promiscuous mode [ 120.812278][ T6543] veth0_macvtap: entered promiscuous mode [ 120.821897][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1024'. [ 120.833281][ T6543] veth1_macvtap: entered promiscuous mode [ 120.842544][ T6543] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 120.852054][ T6543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.860231][ T3529] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.868676][ T6543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.878582][ T6543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.895690][ T5123] udevd[5123]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 120.895729][ T6543] bond1: left promiscuous mode [ 120.907517][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 120.911955][ T6543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.922942][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 120.930593][ T6543] bond2: left promiscuous mode [ 120.957017][ T6543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.968207][ T6543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.976343][ T6543] bridge2: left promiscuous mode [ 120.998587][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 121.019955][ T4097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.029250][ T4097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.046513][ T4097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.081565][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 121.093631][ T4097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.189945][ T6591] loop1: detected capacity change from 0 to 512 [ 121.208624][ T6591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.226447][ T6591] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.240032][ T28] audit: type=1400 audit(1779707287.384:833): avc: denied { write } for pid=6590 comm="syz.1.1031" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.264634][ T6591] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.303437][ T6591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 121.313660][ T6600] loop2: detected capacity change from 0 to 512 [ 121.336560][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.362345][ T6591] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.401693][ T6600] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.415506][ T6608] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.1031: bg 0: bad block bitmap checksum [ 121.422748][ T6591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 121.442054][ T6608] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.442287][ T6588] macsec2: entered promiscuous mode [ 121.456748][ T6591] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.459645][ T6591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 121.460006][ T6608] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 121.460041][ T6608] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.460257][ T6608] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.460504][ T6608] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 121.463267][ T6591] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.463486][ T6591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 121.463515][ T6591] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.463689][ T6591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 121.465597][ T6591] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1031: corrupted xattr block 13: invalid checksum [ 121.491085][ T6612] loop4: detected capacity change from 0 to 128 [ 121.819079][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 121.952176][ T6612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.965550][ T6612] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.043043][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.085421][ T5454] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.096290][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.125953][ T6624] syzkaller0: entered promiscuous mode [ 122.132811][ T6624] syzkaller0: entered allmulticast mode [ 122.251446][ T6630] IPVS: Scheduler module ip_vs_ not found [ 122.280267][ T6637] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 122.328572][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 122.341511][ T6644] tipc: Failed to remove unknown binding: 66,0,0/0:2988787604/2988787605 [ 122.350878][ T6644] tipc: Failed to remove unknown binding: 66,0,0/0:2988787604/2988787605 [ 122.360814][ T6637] bond1 (unregistering): Released all slaves [ 122.374311][ T6642] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 122.382301][ T6642] netlink: 'syz.3.1048': attribute type 30 has an invalid length. [ 122.425417][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 122.486135][ T6653] bridge1: port 1(dummy0) entered blocking state [ 122.499954][ T6653] bridge1: port 1(dummy0) entered disabled state [ 122.507031][ T6653] dummy0: entered allmulticast mode [ 122.520377][ T6653] dummy0: entered promiscuous mode [ 122.532802][ T6653] netlink: 'syz.4.1053': attribute type 10 has an invalid length. [ 122.556415][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1053'. [ 122.587236][ T6653] bridge1: port 1(dummy0) entered blocking state [ 122.593864][ T6653] bridge1: port 1(dummy0) entered forwarding state [ 122.629143][ T6653] dummy0: left allmulticast mode [ 122.645999][ T6653] bridge1: port 1(dummy0) entered disabled state [ 122.880005][ T6684] loop4: detected capacity change from 0 to 2048 [ 123.240064][ T6695] xt_hashlimit: size too large, truncated to 1048576 [ 123.333422][ T6704] loop4: detected capacity change from 0 to 1024 [ 123.351901][ T6704] EXT4-fs: Ignoring removed bh option [ 123.376580][ T6704] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 123.502204][ T6711] SELinux: security_context_str_to_sid (}oæ‹bö–?3bæñlæÊGœ;oÔÌñúÍxo‹Ùÿ¤digUü) failed with errno=-22 [ 123.745571][ T6729] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 123.788722][ T6729] SELinux: failed to load policy [ 125.000377][ T6757] __nla_validate_parse: 1 callbacks suppressed [ 125.000396][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 125.026584][ T6757] team1: entered promiscuous mode [ 125.032064][ T6757] team1: entered allmulticast mode [ 125.045681][ T6757] 8021q: adding VLAN 0 to HW filter on device team1 [ 125.053418][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 125.064333][ T6761] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 125.065137][ T6760] netlink: 'syz.2.1095': attribute type 10 has an invalid length. [ 125.078926][ T6761] team2: entered promiscuous mode [ 125.089237][ T6761] team2: entered allmulticast mode [ 125.094601][ T6760] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1095'. [ 125.101500][ T6761] 8021q: adding VLAN 0 to HW filter on device team2 [ 125.667915][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 125.667932][ T28] audit: type=1400 audit(1779707291.814:868): avc: denied { create } for pid=6782 comm="syz.1.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 125.794782][ T28] audit: type=1400 audit(1779707291.934:869): avc: denied { create } for pid=6786 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 125.836837][ T28] audit: type=1400 audit(1779707291.974:870): avc: denied { setopt } for pid=6786 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.402322][ T6809] loop2: detected capacity change from 0 to 512 [ 126.424882][ T6809] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 126.453239][ T6809] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 126.465199][ T6809] EXT4-fs (loop2): 1 truncate cleaned up [ 126.471810][ T6809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.490299][ T28] audit: type=1400 audit(1779707292.634:871): avc: denied { remount } for pid=6808 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 126.511304][ T6809] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 126.556674][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.950162][ T6823] loop0: detected capacity change from 0 to 256 [ 126.991252][ T6823] FAT-fs (loop0): codepage cp852 not found [ 127.689455][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 127.914341][ T6847] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 127.932230][ T6847] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1126'. [ 127.982264][ T6848] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 128.125638][ T28] audit: type=1400 audit(1779707550.241:872): avc: denied { create } for pid=6842 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.213706][ T6854] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1128'. [ 128.371913][ T6856] loop0: detected capacity change from 0 to 8192 [ 128.520067][ T28] audit: type=1400 audit(1779707550.661:873): avc: denied { ioctl } for pid=6862 comm="syz.4.1132" path="socket:[17462]" dev="sockfs" ino=17462 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.653584][ T6870] loop0: detected capacity change from 0 to 2048 [ 128.681594][ T6870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.712322][ T28] audit: type=1400 audit(1779707550.851:874): avc: denied { write } for pid=6868 comm="syz.0.1134" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.748328][ T6870] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.801676][ T6870] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 128.839362][ T6877] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 128.854698][ T6870] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.854698][ T6870] [ 128.863220][ T6877] EXT4-fs (loop0): This should not happen!! Data will be lost [ 128.863220][ T6877] [ 128.875314][ T6877] EXT4-fs (loop0): Total free blocks count 0 [ 128.881652][ T6877] EXT4-fs (loop0): Free/Dirty block details [ 128.888375][ T6877] EXT4-fs (loop0): free_blocks=2415919104 [ 128.894808][ T6877] EXT4-fs (loop0): dirty_blocks=16 [ 128.900231][ T6877] EXT4-fs (loop0): Block reservation details [ 128.931145][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 129.090641][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1141'. [ 129.105915][ T6892] syzkaller0: entered promiscuous mode [ 129.121673][ T6892] syzkaller0: entered allmulticast mode [ 129.188221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.253822][ T6896] loop4: detected capacity change from 0 to 512 [ 129.268151][ T6896] EXT4-fs: Ignoring removed nobh option [ 129.274879][ T6896] EXT4-fs: Ignoring removed orlov option [ 129.286418][ T6896] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 1: comm syz.4.1143: invalid block [ 129.306513][ T6896] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 129.306700][ T6896] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1143: couldn't read orphan inode 11 (err -117) [ 129.306806][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 129.334955][ C0] EXT4-fs (loop4): initial error at time 1779707551: __ext4_iget:5481: inode 11: block 1 [ 129.345384][ C0] EXT4-fs (loop4): last error at time 1779707551: __ext4_iget:5481: inode 11: block 1 [ 129.355784][ T6896] loop4: lost filesystem error report for type 5 error -117 [ 129.357192][ T6896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.471232][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.832178][ T6919] loop2: detected capacity change from 0 to 1024 [ 129.865627][ T6919] EXT4-fs: Ignoring removed bh option [ 129.941011][ T6919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.007719][ T28] audit: type=1400 audit(1779707552.151:875): avc: denied { write } for pid=6918 comm="syz.2.1154" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.038986][ T28] audit: type=1400 audit(1779707552.171:876): avc: denied { write } for pid=6918 comm="syz.2.1154" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.057177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.064728][ T28] audit: type=1400 audit(1779707552.171:877): avc: denied { open } for pid=6918 comm="syz.2.1154" path="/273/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.158473][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.451505][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 130.506061][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 130.570601][ T6954] team1: entered promiscuous mode [ 130.591124][ T6954] team1: entered allmulticast mode [ 130.638910][ T6954] 8021q: adding VLAN 0 to HW filter on device team1 [ 130.669023][ T6955] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 130.703285][ T6955] team2: entered promiscuous mode [ 130.719484][ T6955] team2: entered allmulticast mode [ 130.729123][ T6955] 8021q: adding VLAN 0 to HW filter on device team2 [ 132.767626][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 132.816258][ T6994] loop0: detected capacity change from 0 to 2048 [ 132.841215][ T6994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.920481][ T28] audit: type=1400 audit(1779707555.061:878): avc: denied { mounton } for pid=6993 comm="syz.0.1179" path="/223/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.920447][ T6994] nfs: Unknown parameter '' [ 133.008013][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.044621][ T7003] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 133.056039][ T28] audit: type=1400 audit(1779707555.181:879): avc: denied { mounton } for pid=7002 comm="syz.0.1182" path="/224/file0" dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 133.375947][ T5227] IPVS: starting estimator thread 0... [ 133.382589][ T7005] IPVS: lc: FWM 3 0x00000003 - no destination available [ 133.476880][ T7011] IPVS: using max 2832 ests per chain, 141600 per kthread [ 133.916436][ T7021] syzkaller0: entered promiscuous mode [ 133.945514][ T7021] syzkaller0: entered allmulticast mode [ 133.966214][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 133.979001][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 134.098832][ T4101] IPVS: stop unused estimator thread 0... [ 134.139044][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1194'. [ 134.169141][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 134.200903][ T7029] loop4: detected capacity change from 0 to 512 [ 134.224167][ T7029] EXT4-fs: Ignoring removed oldalloc option [ 134.239907][ T7029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.262913][ T7029] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.274766][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1194'. [ 134.296459][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.349950][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'. [ 134.461602][ T7047] syzkaller0: entered promiscuous mode [ 134.486077][ T7047] syzkaller0: entered allmulticast mode [ 134.742314][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 134.825535][ T28] audit: type=1326 audit(1779707556.961:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7066 comm="syz.1.1218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x0 [ 134.936464][ T7073] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 135.769142][ T7090] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1214'. [ 135.820532][ T7090] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 135.884270][ T7090] SELinux: failed to load policy [ 136.550007][ T7099] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 136.651654][ T7102] syzkaller0: entered promiscuous mode [ 136.680652][ T7102] syzkaller0: entered allmulticast mode [ 137.049399][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 137.099817][ T7115] bridge2: port 1(dummy0) entered blocking state [ 137.116060][ T28] audit: type=1400 audit(1779707559.251:881): avc: denied { bind } for pid=7116 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 137.126865][ T7115] bridge2: port 1(dummy0) entered disabled state [ 137.167202][ T7121] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 137.177956][ T7115] dummy0: entered allmulticast mode [ 137.197584][ T7115] dummy0: entered promiscuous mode [ 137.203040][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 137.214535][ T7121] bridge2: port 1(dummy0) entered blocking state [ 137.221065][ T7121] bridge2: port 1(dummy0) entered forwarding state [ 137.254361][ T7121] dummy0: left allmulticast mode [ 137.266054][ T7121] bridge2: port 1(dummy0) entered disabled state [ 137.319564][ T7126] syzkaller0: entered promiscuous mode [ 137.337012][ T7126] syzkaller0: entered allmulticast mode [ 137.349122][ T7130] netlink: 'syz.1.1230': attribute type 7 has an invalid length. [ 137.388344][ T4078] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.397522][ T7130] netlink: 'syz.1.1230': attribute type 7 has an invalid length. [ 137.414466][ T4078] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.440372][ T4078] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.461605][ T7133] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 137.478799][ T4078] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.026171][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 138.027242][ T7142] loop2: detected capacity change from 0 to 128 [ 138.065257][ T7142] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 138.083102][ T28] audit: type=1400 audit(1779707560.201:882): avc: denied { setopt } for pid=7137 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.106456][ T7142] FAT-fs (loop2): Filesystem has been set read-only [ 138.123693][ T7149] loop2: Can't mount, would change RO state [ 138.135601][ T28] audit: type=1400 audit(1779707560.261:883): avc: denied { mounton } for pid=7136 comm="syz.2.1236" path="/285/file1" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 138.198926][ T7154] tipc: Failed to remove unknown binding: 66,0,0/0:1639507202/1639507204 [ 138.218242][ T7154] tipc: Failed to remove unknown binding: 66,0,0/0:1639507202/1639507203 [ 138.230727][ T7154] tipc: Failed to remove unknown binding: 66,0,0/0:1639507202/1639507204 [ 138.251688][ T7154] tipc: Failed to remove unknown binding: 66,0,0/0:1639507202/1639507203 [ 138.461018][ T28] audit: type=1400 audit(1779707560.601:884): avc: denied { write } for pid=7138 comm="syz.4.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.555242][ T28] audit: type=1326 audit(1779707560.691:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.2.1257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 138.622514][ T28] audit: type=1326 audit(1779707560.721:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.2.1257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 138.671996][ T28] audit: type=1326 audit(1779707560.721:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.2.1257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 138.740336][ T28] audit: type=1326 audit(1779707560.721:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.2.1257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 138.767011][ T28] audit: type=1326 audit(1779707560.721:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.2.1257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 138.794659][ T28] audit: type=1326 audit(1779707560.721:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.2.1257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 138.821337][ T28] audit: type=1326 audit(1779707560.721:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7162 comm="syz.2.1257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 138.960864][ T7178] loop3: detected capacity change from 0 to 2048 [ 138.992828][ T7178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.042018][ T7178] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.069342][ T7178] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 139.076523][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1258'. [ 139.082678][ T7178] EXT4-fs (loop3): This should not happen!! Data will be lost [ 139.082678][ T7178] [ 139.114886][ T7178] EXT4-fs (loop3): Total free blocks count 0 [ 139.121323][ T7178] EXT4-fs (loop3): Free/Dirty block details [ 139.127507][ T7178] EXT4-fs (loop3): free_blocks=2415919104 [ 139.129944][ T7194] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 139.133355][ T7178] EXT4-fs (loop3): dirty_blocks=16 [ 139.150920][ T7178] EXT4-fs (loop3): Block reservation details [ 139.164910][ T7178] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 139.171578][ T7193] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 139.212398][ T7192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7192 comm=syz.1.1258 [ 139.270529][ T7198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1260'. [ 139.557050][ T3305] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 139.620032][ T7206] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 139.637051][ T7206] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1262'. [ 139.675795][ T7209] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 139.723415][ T7212] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 139.730177][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.744887][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 139.817565][ T7223] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 139.836894][ T7223] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.926837][ T3377] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 139.996910][ T3377] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 140.871474][ T7213] vhci_hcd: connection reset by peer [ 140.883566][ T4097] vhci_hcd vhci_hcd.0: stop threads [ 140.901349][ T4097] vhci_hcd vhci_hcd.0: release socket [ 140.915531][ T4097] vhci_hcd vhci_hcd.0: disconnect device [ 141.043354][ T7243] loop4: detected capacity change from 0 to 512 [ 141.058170][ T7241] tipc: Failed to remove unknown binding: 66,0,0/0:3938704061/3938704063 [ 141.069701][ T7243] EXT4-fs: Ignoring removed bh option [ 141.087133][ T7243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.100963][ T7241] tipc: Failed to remove unknown binding: 66,0,0/0:3938704061/3938704062 [ 141.117000][ T7241] tipc: Failed to remove unknown binding: 66,0,0/0:3938704061/3938704063 [ 141.120321][ T7243] EXT4-fs: dax option not supported [ 141.142421][ T7241] tipc: Failed to remove unknown binding: 66,0,0/0:3938704061/3938704062 [ 141.220181][ T7243] netlink: 'syz.4.1277': attribute type 63 has an invalid length. [ 141.251561][ T7243] lo: entered promiscuous mode [ 141.257533][ T7243] lo: entered allmulticast mode [ 141.265228][ T7254] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 141.280096][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 141.298900][ T7254] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1282'. [ 141.316122][ T7256] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 141.732175][ T7258] loop3: detected capacity change from 0 to 1024 [ 141.766372][ T7258] EXT4-fs: Ignoring removed bh option [ 141.806429][ T7258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.902827][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.307092][ T7291] loop4: detected capacity change from 0 to 128 [ 142.470443][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1297'. [ 142.494917][ T7293] loop2: detected capacity change from 0 to 512 [ 142.572300][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 142.782179][ T4097] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.189636][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.189636][ T7291] loop4: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 143.205263][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.205263][ T7291] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 143.226347][ T7303] loop1: detected capacity change from 0 to 512 [ 143.233071][ T7291] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 143.238382][ T7303] EXT4-fs: Ignoring removed nobh option [ 143.247302][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.247302][ T7291] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 143.261698][ T7303] EXT4-fs: Ignoring removed orlov option [ 143.274342][ T7291] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 143.277220][ T7303] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.1299: invalid block [ 143.289970][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.289970][ T7291] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 143.294482][ T7303] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.308311][ T7303] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1299: couldn't read orphan inode 11 (err -117) [ 143.317675][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 143.317708][ C0] EXT4-fs (loop1): initial error at time 1779707565: __ext4_iget:5481: inode 11: block 1 [ 143.317747][ C0] EXT4-fs (loop1): last error at time 1779707565: __ext4_iget:5481: inode 11: block 1 [ 143.322586][ T7291] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 143.329764][ T7303] loop1: lost filesystem error report for type 5 error -117 [ 143.343761][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.343761][ T7291] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 143.368440][ T7303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.394566][ T7291] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 143.408379][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.408379][ T7291] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 143.439111][ T7291] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 143.448200][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.448200][ T7291] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 143.462798][ T7291] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 143.471683][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.471683][ T7291] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 143.485740][ T7291] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 143.491962][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 143.491978][ T28] audit: type=1400 audit(1779707565.631:913): avc: denied { write } for pid=7302 comm="syz.1.1299" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.494794][ T7291] syz.4.1294: attempt to access beyond end of device [ 143.494794][ T7291] loop4: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 143.505328][ T7303] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, [ 143.523170][ T7291] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 143.537105][ T7303] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 143.578215][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1306'. [ 143.616564][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.702324][ T7325] tipc: Failed to remove unknown binding: 66,0,0/0:1719489151/1719489153 [ 143.711085][ T7325] tipc: Failed to remove unknown binding: 66,0,0/0:1719489151/1719489152 [ 143.720036][ T7325] tipc: Failed to remove unknown binding: 66,0,0/0:1719489151/1719489153 [ 143.730026][ T7325] tipc: Failed to remove unknown binding: 66,0,0/0:1719489151/1719489152 [ 143.781410][ T28] audit: type=1326 audit(1779707565.921:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.0.1307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff025ffce59 code=0x0 [ 144.731995][ T7339] loop0: detected capacity change from 0 to 512 [ 144.856824][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 144.863169][ T6481] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.876417][ T7345] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 144.891057][ T7331] syz.4.1312 (7331) used greatest stack depth: 8128 bytes left [ 144.909476][ T7345] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1316'. [ 144.943669][ T7346] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 145.026847][ T3377] usb 1-1: enqueue for inactive port 0 [ 145.040707][ T3377] usb 1-1: enqueue for inactive port 0 [ 145.126861][ T3377] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 145.428444][ T7353] loop1: detected capacity change from 0 to 128 [ 145.530800][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.551743][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.945894][ T7353] syz.1.1317: attempt to access beyond end of device [ 145.945894][ T7353] loop1: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 145.968383][ T7353] Buffer I/O error on dev loop1, logical block 156, lost async page write [ 145.980090][ T7353] Buffer I/O error on dev loop1, logical block 157, lost async page write [ 146.216964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.592339][ T28] audit: type=1400 audit(1779707568.731:915): avc: denied { mounton } for pid=7373 comm="syz.3.1338" path=2F3236392FE91F7189591E9233614B dev="tmpfs" ino=1424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 147.177065][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 147.399949][ T7383] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1330'. [ 147.490229][ T7393] lo: left promiscuous mode [ 147.546864][ T7393] bridge0: entered promiscuous mode [ 147.562010][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.584715][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.610001][ T7393] dummy0: left promiscuous mode [ 147.638118][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.799393][ T7393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.839914][ T7393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.860621][ T7393] veth1_vlan: left promiscuous mode [ 147.874205][ T7393] veth0_vlan: left promiscuous mode [ 147.886464][ T7393] veth0_vlan: entered promiscuous mode [ 147.903927][ T7393] veth1_vlan: entered promiscuous mode [ 147.923100][ T7393] veth1_macvtap: left promiscuous mode [ 147.937324][ T7393] veth0_macvtap: left promiscuous mode [ 147.949520][ T7393] veth0_macvtap: entered promiscuous mode [ 147.958068][ T7393] veth1_macvtap: entered promiscuous mode [ 147.970501][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.990965][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.022878][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.035730][ T7403] loop3: detected capacity change from 0 to 512 [ 148.057688][ T7393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.079251][ T4097] bond1: (slave ip6gretap1): link status down again after 0 ms [ 148.088794][ T7393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.105907][ T7393] ip6gretap1: left promiscuous mode [ 148.163222][ T7398] 8021q: VLANs not supported on vcan0 [ 148.175485][ T4101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.185211][ T4097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.215845][ T4097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.242324][ T4097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.262595][ T4094] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 148.279896][ T4094] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 148.295760][ T7415] netlink: 'syz.0.1343': attribute type 11 has an invalid length. [ 148.305713][ T7417] ip_vti0: entered promiscuous mode [ 148.325830][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 148.350927][ T7419] loop0: detected capacity change from 0 to 128 [ 148.360028][ T4097] bond1: (slave ip6gretap1): link status definitely up, 0 Mbps full duplex [ 148.378175][ T4097] bond1: active interface up! [ 148.444371][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 148.687227][ T7430] xt_hashlimit: size too large, truncated to 1048576 [ 148.936057][ T7419] bio_check_eod: 8 callbacks suppressed [ 149.048310][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.048310][ T7419] loop0: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 149.111012][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.111012][ T7419] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 149.150782][ T7419] buffer_io_error: 6 callbacks suppressed [ 149.151040][ T7419] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 149.189632][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.189632][ T7419] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 149.269744][ T7419] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 149.284150][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.284150][ T7419] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 149.315888][ T7419] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 149.330875][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.330875][ T7419] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 149.368969][ T7419] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 149.378521][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.378521][ T7419] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 149.392424][ T7419] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 149.401357][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.401357][ T7419] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 149.415329][ T7419] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 149.424836][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.424836][ T7419] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 149.440697][ T7419] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 149.449414][ T7419] syz.0.1344: attempt to access beyond end of device [ 149.449414][ T7419] loop0: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 149.463093][ T7419] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 149.614859][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1354'. [ 149.652599][ T7440] ip6gre2: entered promiscuous mode [ 149.663400][ T7440] ip6gre2: entered allmulticast mode [ 149.688848][ T7440] netlink: 'syz.2.1354': attribute type 6 has an invalid length. [ 149.699493][ T7440] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1354'. [ 149.949189][ T28] audit: type=1400 audit(1779707572.091:916): avc: denied { append } for pid=7458 comm="syz.3.1364" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 150.180884][ T7475] loop3: detected capacity change from 0 to 128 [ 150.332530][ T7475] syz.3.1367: attempt to access beyond end of device [ 150.332530][ T7475] loop3: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 150.398437][ T7475] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 150.419030][ T7475] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 150.734676][ T7480] loop4: detected capacity change from 0 to 8192 [ 150.788781][ T7480] loop4: p1 < > p2 p4 < p5 > [ 150.804839][ T7480] loop4: partition table partially beyond EOD, truncated [ 150.816341][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1380'. [ 150.821782][ T7480] loop4: p1 start 134217728 is beyond EOD, truncated [ 150.833661][ T7480] loop4: p2 size 67072 extends beyond EOD, truncated [ 150.847801][ T7480] loop4: p5 size 67072 extends beyond EOD, truncated [ 150.877495][ T7482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7482 comm=syz.0.1380 [ 150.945192][ T7486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=7486 comm=syz.2.1372 [ 151.034060][ T7490] syzkaller0: entered promiscuous mode [ 151.055721][ T7490] syzkaller0: entered allmulticast mode [ 151.243699][ T7493] 8021q: VLANs not supported on vcan0 [ 152.216856][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 152.676149][ T7529] loop4: detected capacity change from 0 to 512 [ 152.693688][ T28] audit: type=1400 audit(1779707574.831:917): avc: denied { create } for pid=7526 comm="syz.2.1387" name="syzkaller" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.696864][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 153.182714][ T7546] loop0: detected capacity change from 0 to 512 [ 153.228421][ T7546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.255430][ T7546] ext4 filesystem being mounted at /266/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.605114][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.125700][ T7565] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1400'. [ 154.188142][ T7569] loop2: detected capacity change from 0 to 128 [ 154.507478][ T7602] netlink: 'syz.2.1411': attribute type 83 has an invalid length. [ 157.044153][ T28] audit: type=1400 audit(1779707579.181:918): avc: denied { write } for pid=7633 comm="syz.1.1425" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.101822][ T28] audit: type=1400 audit(1779707579.181:919): avc: denied { ioctl } for pid=7633 comm="syz.1.1425" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.168811][ T7636] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1436'. [ 157.173041][ T7638] loop4: detected capacity change from 0 to 512 [ 157.208745][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.246101][ T7638] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.292211][ T7638] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1426: corrupted xattr block 13: invalid checksum [ 157.295367][ T28] audit: type=1400 audit(1779707579.431:920): avc: denied { write } for pid=7637 comm="syz.4.1426" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.331747][ T7638] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 157.344178][ T7638] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1426: corrupted xattr block 13: invalid checksum [ 157.359100][ T7638] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 157.386821][ T7638] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1426: corrupted xattr block 13: invalid checksum [ 157.404303][ T28] audit: type=1400 audit(1779707579.541:921): avc: denied { write } for pid=7637 comm="syz.4.1426" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.405484][ T7649] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.1426: bg 0: bad block bitmap checksum [ 157.439249][ T7638] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 157.493255][ T7638] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1426: corrupted xattr block 13: invalid checksum [ 157.510099][ T7638] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 157.536878][ T7638] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1426: corrupted xattr block 13: invalid checksum [ 157.565844][ T7638] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1426: corrupted xattr block 13: invalid checksum [ 157.569734][ T7653] syzkaller0: entered promiscuous mode [ 157.587458][ T7653] syzkaller0: entered allmulticast mode [ 157.593727][ T7638] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 157.644445][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.738037][ T7658] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1431'. [ 157.748360][ T7658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1431'. [ 157.796486][ T7660] loop2: detected capacity change from 0 to 2048 [ 158.087415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.255116][ T7685] loop3: detected capacity change from 0 to 512 [ 158.285825][ T7685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.314813][ T7685] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.391636][ T7684] macsec2: entered promiscuous mode [ 158.449975][ T7693] syz.4.1447 (7693) used obsolete PPPIOCDETACH ioctl [ 158.478339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.570936][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.633912][ T7700] loop2: detected capacity change from 0 to 8192 [ 158.692971][ T7700] loop2: p1 < > p2 p4 < p5 > [ 158.704852][ T7700] loop2: partition table partially beyond EOD, truncated [ 158.714007][ T7700] loop2: p1 start 134217728 is beyond EOD, truncated [ 158.721531][ T7700] loop2: p2 size 67072 extends beyond EOD, truncated [ 158.739531][ T7700] loop2: p5 size 67072 extends beyond EOD, truncated [ 158.810785][ T3852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.847835][ T3852] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.646467][ T28] audit: type=1400 audit(1779707581.781:922): avc: denied { open } for pid=7714 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.682006][ T28] audit: type=1400 audit(1779707581.781:923): avc: denied { kernel } for pid=7714 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.884049][ T28] audit: type=1400 audit(1779707582.021:924): avc: denied { getopt } for pid=7713 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.045377][ T28] audit: type=1400 audit(1779707582.181:925): avc: denied { connect } for pid=7740 comm="syz.0.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.079515][ T7742] loop1: detected capacity change from 0 to 512 [ 160.147803][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1466'. [ 160.209916][ T7742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.261537][ T7742] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.397563][ T7735] macsec2: entered promiscuous mode [ 160.627426][ T7752] syzkaller0: entered promiscuous mode [ 160.641760][ T7752] syzkaller0: entered allmulticast mode [ 160.814737][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.937269][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 161.091850][ T7769] syzkaller0: entered promiscuous mode [ 161.099011][ T28] audit: type=1400 audit(1779707583.241:926): avc: denied { write } for pid=7766 comm="syz.4.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.111777][ T7769] syzkaller0: entered allmulticast mode [ 161.205463][ T7771] syzkaller0: entered promiscuous mode [ 161.213885][ T7771] syzkaller0: entered allmulticast mode [ 161.310616][ T7778] vlan2: entered promiscuous mode [ 161.315986][ T7778] bridge0: entered promiscuous mode [ 161.491294][ T28] audit: type=1326 audit(1779707583.631:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.1.1481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 161.533644][ T5237] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 161.559486][ T5237] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.577012][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.752930][ T7796] netlink: 63 bytes leftover after parsing attributes in process `syz.1.1484'. [ 161.918344][ T7798] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1485'. [ 162.000402][ T7800] loop2: detected capacity change from 0 to 512 [ 162.038585][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.084943][ T7796] loop1: detected capacity change from 0 to 1764 [ 162.099187][ T7800] ext4 filesystem being mounted at /341/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.135843][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 162.135860][ T28] audit: type=1400 audit(1779707584.271:938): avc: denied { write } for pid=7799 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 162.398145][ T28] audit: type=1400 audit(1779707584.531:939): avc: denied { tracepoint } for pid=7807 comm="syz.0.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 162.491850][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.532763][ T28] audit: type=1326 audit(1779707584.671:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 162.606941][ T28] audit: type=1326 audit(1779707584.671:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 162.663652][ T28] audit: type=1326 audit(1779707584.671:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 162.755356][ T28] audit: type=1326 audit(1779707584.671:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 162.858604][ T28] audit: type=1326 audit(1779707584.671:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 162.937238][ T7818] loop2: detected capacity change from 0 to 512 [ 162.949468][ T28] audit: type=1326 audit(1779707584.671:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 163.002663][ T28] audit: type=1326 audit(1779707584.671:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 163.043698][ T28] audit: type=1326 audit(1779707584.671:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7809 comm="syz.2.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8a226ce59 code=0x7ffc0000 [ 163.047801][ T7818] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1493: corrupted in-inode xattr: invalid ea_ino [ 163.110414][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 163.131980][ T7818] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.137691][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 163.156631][ C1] EXT4-fs (loop2): initial error at time 1779707585: ext4_iget_extra_inode:5128: inode 15 [ 163.169849][ C1] EXT4-fs (loop2): last error at time 1779707585: ext4_iget_extra_inode:5128: inode 15 [ 163.186635][ T7818] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1493: couldn't read orphan inode 15 (err -117) [ 163.218151][ T7818] loop2: lost filesystem error report for type 5 error -117 [ 163.231150][ T7818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.655275][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.388314][ T7846] loop2: detected capacity change from 0 to 256 [ 164.511836][ T7859] loop0: detected capacity change from 0 to 512 [ 164.576847][ T7859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.607645][ T7859] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.694781][ T7846] FAT-fs (loop2): Directory bread(block 1285) failed [ 164.714219][ T7846] FAT-fs (loop2): Directory bread(block 1286) failed [ 164.726565][ T7846] FAT-fs (loop2): Directory bread(block 1287) failed [ 164.747195][ T7846] FAT-fs (loop2): Directory bread(block 1288) failed [ 164.761247][ T7851] macsec2: entered promiscuous mode [ 165.012175][ T7846] FAT-fs (loop2): Directory bread(block 1285) failed [ 165.025943][ T7846] FAT-fs (loop2): Directory bread(block 1286) failed [ 165.086142][ T7846] FAT-fs (loop2): Directory bread(block 1287) failed [ 165.143222][ T7846] FAT-fs (loop2): Directory bread(block 1288) failed [ 165.178543][ T7846] FAT-fs (loop2): Directory bread(block 1285) failed [ 165.185632][ T7846] FAT-fs (loop2): Directory bread(block 1286) failed [ 165.241492][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.283668][ T7875] loop4: detected capacity change from 0 to 512 [ 165.323395][ T7886] loop1: detected capacity change from 0 to 512 [ 165.439429][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.474930][ T7875] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1511: corrupted in-inode xattr: invalid ea_ino [ 165.586290][ T7875] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.597066][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 165.614706][ C1] EXT4-fs (loop4): initial error at time 1779707587: ext4_iget_extra_inode:5128: inode 15 [ 165.625917][ C1] EXT4-fs (loop4): last error at time 1779707587: ext4_iget_extra_inode:5128: inode 15 [ 165.727484][ T7875] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1511: couldn't read orphan inode 15 (err -117) [ 165.813900][ T7875] loop4: lost filesystem error report for type 5 error -117 [ 165.842104][ T7875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.938027][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.938307][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.119747][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 166.552332][ T7927] loop3: detected capacity change from 0 to 128 [ 166.598620][ T7927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.631521][ T7927] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.694966][ T7927] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1528'. [ 166.719487][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.803467][ T7939] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1532'. [ 166.862410][ T7944] netlink: 63 bytes leftover after parsing attributes in process `syz.3.1535'. [ 167.064898][ T7944] loop3: detected capacity change from 0 to 1764 [ 167.964207][ T7971] loop4: detected capacity change from 0 to 512 [ 167.979983][ T7964] loop3: detected capacity change from 0 to 512 [ 168.022277][ T7971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.133891][ T7971] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.292274][ T7967] macsec1: entered promiscuous mode [ 168.535671][ T7980] syzkaller0: entered promiscuous mode [ 168.541653][ T7980] syzkaller0: entered allmulticast mode [ 168.549604][ T7988] veth0_vlan: entered allmulticast mode [ 168.592837][ T7988] veth0_vlan: left promiscuous mode [ 168.624864][ T7988] veth0_vlan: entered promiscuous mode [ 168.638338][ T5454] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.724486][ T8002] loop0: detected capacity change from 0 to 1024 [ 168.838355][ T8010] xt_hashlimit: size too large, truncated to 1048576 [ 168.863702][ T8002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.909918][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 168.909935][ T28] audit: type=1400 audit(1779707591.051:1026): avc: denied { getopt } for pid=8000 comm="syz.0.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.120275][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.424853][ T8019] loop1: detected capacity change from 0 to 512 [ 169.455083][ T8019] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1553: corrupted in-inode xattr: invalid ea_ino [ 169.474215][ T8019] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.476882][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 169.493215][ C0] EXT4-fs (loop1): initial error at time 1779707591: ext4_iget_extra_inode:5128: inode 15 [ 169.504016][ C0] EXT4-fs (loop1): last error at time 1779707591: ext4_iget_extra_inode:5128: inode 15 [ 169.519486][ T8019] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1553: couldn't read orphan inode 15 (err -117) [ 169.535004][ T8019] loop1: lost filesystem error report for type 5 error -117 [ 169.543654][ T8019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.643765][ T28] audit: type=1400 audit(1779707591.781:1027): avc: denied { append } for pid=8026 comm="syz.0.1565" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.754562][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.941286][ T28] audit: type=1400 audit(1779707592.081:1028): avc: denied { ioctl } for pid=8040 comm="syz.0.1561" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.963983][ T8032] loop4: detected capacity change from 0 to 512 [ 169.968997][ T8042] loop1: detected capacity change from 0 to 512 [ 170.020605][ T8042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.093006][ T8042] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.139203][ T8035] macsec2: entered promiscuous mode [ 170.333607][ T8044] syzkaller0: entered promiscuous mode [ 170.339666][ T8044] syzkaller0: entered allmulticast mode [ 170.502186][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.598711][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.609307][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.477563][ T8077] loop0: detected capacity change from 0 to 512 [ 171.522063][ T8077] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1571: corrupted in-inode xattr: invalid ea_ino [ 171.537544][ T8077] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.537830][ T8077] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1571: couldn't read orphan inode 15 (err -117) [ 171.547490][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 171.548055][ C1] EXT4-fs (loop0): initial error at time 1779707593: ext4_iget_extra_inode:5128: inode 15 [ 171.548335][ C1] EXT4-fs (loop0): last error at time 1779707593: ext4_iget_extra_inode:5128: inode 15 [ 171.553992][ T8084] tipc: Started in network mode [ 171.568258][ T8077] loop0: lost filesystem error report for type 5 error -117 [ 171.617486][ T8084] tipc: Node identity d6221ac62c54, cluster identity 4711 [ 171.634473][ T8084] tipc: Enabled bearer , priority 0 [ 171.677738][ T8084] tipc: Disabling bearer [ 171.684581][ T8077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.817467][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.172085][ T8115] loop3: detected capacity change from 0 to 512 [ 172.209255][ T8115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.248854][ T8115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.267282][ T8115] ext4 filesystem being mounted at /319/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.316337][ T28] audit: type=1400 audit(1779707594.451:1029): avc: denied { write } for pid=8114 comm="syz.3.1588" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.348776][ T28] audit: type=1400 audit(1779707594.481:1030): avc: denied { write } for pid=8114 comm="syz.3.1588" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.374483][ T28] audit: type=1400 audit(1779707594.481:1031): avc: denied { read append } for pid=8114 comm="syz.3.1588" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.443347][ T8126] loop0: detected capacity change from 0 to 512 [ 172.707217][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.772264][ T8126] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1591: corrupted in-inode xattr: invalid ea_ino [ 172.853676][ T8126] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.859059][ T8126] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1591: couldn't read orphan inode 15 (err -117) [ 172.869450][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 172.869579][ C1] EXT4-fs (loop0): initial error at time 1779707595: ext4_iget_extra_inode:5128: inode 15 [ 172.870126][ C1] EXT4-fs (loop0): last error at time 1779707595: ext4_iget_extra_inode:5128: inode 15 [ 172.938501][ T8126] loop0: lost filesystem error report for type 5 error -117 [ 172.985038][ T8126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.119575][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.145527][ T8140] xt_hashlimit: size too large, truncated to 1048576 [ 173.469267][ T28] audit: type=1400 audit(1779707595.611:1032): avc: denied { setopt } for pid=8151 comm="syz.1.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.195992][ T8174] loop1: detected capacity change from 0 to 512 [ 174.258170][ T8176] macsec2: entered promiscuous mode [ 174.275183][ T8174] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1607: corrupted in-inode xattr: invalid ea_ino [ 174.382990][ T8174] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.397501][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 174.416785][ C1] EXT4-fs (loop1): initial error at time 1779707596: ext4_iget_extra_inode:5128: inode 15 [ 174.429794][ C1] EXT4-fs (loop1): last error at time 1779707596: ext4_iget_extra_inode:5128: inode 15 [ 174.623912][ T8174] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1607: couldn't read orphan inode 15 (err -117) [ 174.752433][ T8184] loop3: detected capacity change from 0 to 512 [ 174.844031][ T8174] loop1: lost filesystem error report for type 5 error -117 [ 174.876735][ T8184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.904209][ T8174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.185773][ T8184] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.242132][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.467581][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.535972][ T8203] veth0_vlan: entered allmulticast mode [ 175.595618][ T8203] veth0_vlan: left promiscuous mode [ 175.621272][ T8203] veth0_vlan: entered promiscuous mode [ 175.661169][ T8209] loop2: detected capacity change from 0 to 512 [ 175.677190][ T8209] EXT4-fs: Ignoring removed nobh option [ 175.695836][ T8209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec02c, mo2=0002] [ 175.706845][ T8209] System zones: 1-4, 20-20, 36-39 [ 175.720031][ T8209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.746882][ T8209] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.787031][ T8212] loop3: detected capacity change from 0 to 512 [ 175.814896][ T8212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.848180][ T8212] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.866780][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.893563][ T8212] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 175.931052][ T8212] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 175.963828][ T8212] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1617: bad orphan inode 15 [ 175.985227][ T8212] loop3: lost filesystem error report for type 5 error -117 [ 175.986775][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 176.001047][ C1] EXT4-fs (loop3): initial error at time 1779707598: ext4_orphan_get:1423 [ 176.009717][ C1] EXT4-fs (loop3): last error at time 1779707598: ext4_orphan_get:1423 [ 176.012345][ T8212] EXT4-fs (loop3): Remounting filesystem read-only [ 176.031170][ T8212] ext4_test_bit(bit=14, block=4) = 1 [ 176.043956][ T8212] is_bad_inode(inode)=0 [ 176.052525][ T8212] NEXT_ORPHAN(inode)=0 [ 176.073855][ T8212] max_ino=32 [ 176.077158][ T8212] i_nlink=1 [ 176.080983][ T8212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.172179][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.289241][ T8233] macsec2: entered promiscuous mode [ 176.311173][ T8234] loop3: detected capacity change from 0 to 512 [ 176.529789][ T8234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.543111][ T8234] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.618909][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.647757][ T8241] syz_tun: entered promiscuous mode [ 176.657978][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 176.671923][ T8241] syz_tun (unregistering): left promiscuous mode [ 176.720414][ T8246] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1628'. [ 176.792157][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 176.806545][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 176.922255][ T8256] netlink: 'syz.1.1633': attribute type 3 has an invalid length. [ 176.942173][ T8256] netlink: 'syz.1.1633': attribute type 3 has an invalid length. [ 177.031954][ T8246] loop0: detected capacity change from 0 to 1764 [ 177.088161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.230963][ T28] audit: type=1400 audit(1779707599.371:1033): avc: denied { bind } for pid=8267 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.647184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.019472][ T28] audit: type=1400 audit(1779707600.161:1034): avc: denied { cpu } for pid=8307 comm="syz.1.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 178.035244][ T8309] ref_ctr increment failed for inode: 0x6b3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810563a880 [ 178.067909][ T28] audit: type=1400 audit(1779707600.201:1035): avc: denied { kexec_image_load } for pid=8308 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 178.079305][ T8309] uprobe: syz.1.1657:8309 failed to unregister, leaking uprobe [ 178.108971][ T8312] netlink: 63 bytes leftover after parsing attributes in process `syz.4.1656'. [ 178.184247][ T28] audit: type=1326 audit(1779707600.321:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 178.217096][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 178.290751][ T28] audit: type=1326 audit(1779707600.321:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 178.345973][ T28] audit: type=1326 audit(1779707600.321:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 178.406901][ T28] audit: type=1326 audit(1779707600.321:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 178.460085][ T28] audit: type=1326 audit(1779707600.371:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 178.527443][ T28] audit: type=1326 audit(1779707600.371:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 178.596528][ T28] audit: type=1326 audit(1779707600.381:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.1.1660" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f772023ce59 code=0x7ffc0000 [ 178.727063][ T8331] loop0: detected capacity change from 0 to 1024 [ 178.737354][ T8331] EXT4-fs: test_dummy_encryption option not supported [ 178.813616][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1663'. [ 178.857071][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 179.172198][ T8312] loop4: detected capacity change from 0 to 1764 [ 179.625104][ T8342] loop1: detected capacity change from 0 to 1024 [ 179.693150][ T8342] EXT4-fs: Ignoring removed orlov option [ 179.701762][ T8352] netlink: 63 bytes leftover after parsing attributes in process `syz.2.1681'. [ 179.733795][ T8342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 179.754625][ T8342] System zones: 0-1, 3-12 [ 179.765965][ T8353] loop2: detected capacity change from 0 to 1764 [ 179.766362][ T8342] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.903072][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 179.931307][ T8360] loop0: detected capacity change from 0 to 128 [ 180.693930][ T8388] loop1: detected capacity change from 0 to 512 [ 180.983380][ T8398] netlink: 'syz.1.1685': attribute type 3 has an invalid length. [ 180.996005][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1685'. [ 181.031141][ T8404] macsec2: entered promiscuous mode [ 181.079640][ T8406] loop2: detected capacity change from 0 to 512 [ 181.129956][ T8406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.143874][ T8406] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.221737][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.877469][ T8435] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1697'. [ 181.923670][ T8435] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1697'. [ 182.408452][ T8443] loop2: detected capacity change from 0 to 8192 [ 182.716072][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 182.716165][ T28] audit: type=1400 audit(1779707604.661:1048): avc: denied { remount } for pid=8440 comm="syz.2.1710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 183.605959][ T8472] netlink: 'syz.4.1714': attribute type 13 has an invalid length. [ 183.614969][ T8472] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.1714'. [ 183.978504][ T8487] loop3: detected capacity change from 0 to 8192 [ 184.209072][ T8491] loop2: detected capacity change from 0 to 512 [ 184.338209][ T8491] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1719: corrupted inode contents [ 184.354110][ T8491] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.357396][ T8491] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.1719: mark_inode_dirty error [ 184.369204][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 184.369630][ C0] EXT4-fs (loop2): initial error at time 1779707606: ext4_do_update_inode:5690: inode 16 [ 184.369906][ C0] EXT4-fs (loop2): last error at time 1779707606: ext4_do_update_inode:5690: inode 16 [ 184.419989][ T8491] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.423971][ T8491] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1719: corrupted inode contents [ 184.448829][ T8491] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.452713][ T8491] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1719: mark_inode_dirty error [ 184.477688][ T8491] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.482375][ T8491] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1719: corrupted inode contents [ 184.506824][ T8491] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.507910][ T8491] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 184.529909][ T8491] loop2: lost filesystem error report for type 5 error -117 [ 184.533624][ T8491] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1719: corrupted inode contents [ 184.558977][ T8491] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.562114][ T8491] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.1719: mark_inode_dirty error [ 184.588623][ T8491] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.591770][ T8491] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 184.614741][ T8491] loop2: lost filesystem error report for type 5 error -117 [ 184.654064][ T8491] EXT4-fs (loop2): 1 truncate cleaned up [ 184.690967][ T8491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.710547][ T8491] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.801165][ T4078] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.817571][ T4078] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 185.573863][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.662926][ T28] audit: type=1400 audit(1779707607.801:1049): avc: denied { create } for pid=8504 comm="syz.2.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 186.857442][ T28] audit: type=1400 audit(1779707609.001:1050): avc: denied { ioctl } for pid=8539 comm="syz.1.1736" path="socket:[23327]" dev="sockfs" ino=23327 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.870668][ T8542] syzkaller0: entered promiscuous mode [ 186.902790][ T8542] syzkaller0: entered allmulticast mode [ 186.917375][ T8539] Process accounting resumed [ 187.022109][ T28] audit: type=1400 audit(1779707609.161:1051): avc: denied { write } for pid=8551 comm="syz.2.1742" name="/" dev="configfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.045126][ T28] audit: type=1400 audit(1779707609.161:1052): avc: denied { add_name } for pid=8551 comm="syz.2.1742" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.077799][ T28] audit: type=1400 audit(1779707609.161:1053): avc: denied { create } for pid=8551 comm="syz.2.1742" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 188.199071][ T8578] syzkaller0: entered promiscuous mode [ 188.204767][ T8578] syzkaller0: entered allmulticast mode [ 188.245437][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 188.274650][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 188.320200][ T28] audit: type=1400 audit(1779707610.461:1054): avc: denied { create } for pid=8580 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.373111][ T28] audit: type=1400 audit(1779707610.481:1055): avc: denied { write } for pid=8580 comm="syz.2.1751" path="socket:[23392]" dev="sockfs" ino=23392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.607037][ T8587] ================================================================== [ 188.615741][ T8587] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 188.623509][ T8587] [ 188.626032][ T8587] read-write to 0xffff88811c2ce964 of 4 bytes by task 8583 on cpu 1: [ 188.634376][ T8587] fifo_open+0x86/0x5d0 [ 188.638749][ T8587] do_dentry_open+0x4be/0xa90 [ 188.643976][ T8587] vfs_open+0x37/0x1e0 [ 188.648427][ T8587] path_openat+0x1b70/0x2050 [ 188.653223][ T8587] do_file_open+0x16c/0x290 [ 188.657751][ T8587] do_sys_openat2+0x94/0x130 [ 188.662370][ T8587] __se_sys_openat2+0x193/0x1f0 [ 188.667595][ T8587] __x64_sys_openat2+0x55/0x70 [ 188.672569][ T8587] x64_sys_call+0x2170/0x3020 [ 188.677363][ T8587] do_syscall_64+0x12c/0x3b0 [ 188.682428][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.688432][ T8587] [ 188.691011][ T8587] read to 0xffff88811c2ce964 of 4 bytes by task 8587 on cpu 0: [ 188.698915][ T8587] wait_for_partner+0xd5/0x1e0 [ 188.704319][ T8587] fifo_open+0x462/0x5d0 [ 188.708886][ T8587] do_dentry_open+0x4be/0xa90 [ 188.713617][ T8587] vfs_open+0x37/0x1e0 [ 188.718672][ T8587] path_openat+0x1b70/0x2050 [ 188.723732][ T8587] do_file_open+0x16c/0x290 [ 188.728447][ T8587] do_sys_openat2+0x94/0x130 [ 188.733338][ T8587] __x64_sys_openat+0xf2/0x120 [ 188.738313][ T8587] x64_sys_call+0x1e39/0x3020 [ 188.743106][ T8587] do_syscall_64+0x12c/0x3b0 [ 188.748678][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.754780][ T8587] [ 188.757164][ T8587] value changed: 0x00000001 -> 0x00000002 [ 188.763268][ T8587] [ 188.765694][ T8587] Reported by Kernel Concurrency Sanitizer on: [ 188.771987][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.0.1752 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.783081][ T8587] Tainted: [W]=WARN [ 188.786915][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.797265][ T8587] ================================================================== [ 190.830467][ T8565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512